Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          IB9yTJDGLO5t/9wuVEeumIRzfZjDxmyU60CVQWkHeBY=
Subject key identifier:   19:AA:E2:D8:08:5C:CF:30:38:56:0C:0B:41:47:D7:97:4C:99:4D:B0
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       314E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          3146
Signing time:             Sat 18 May 2024 15:40:09 +0000
Manifest this update:     Sat 18 May 2024 15:40:08 +0000
Manifest next update:     Sat 25 May 2024 15:40:08 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: ydz4xYcf5k7P4meLjQ+8jimtlNhQk1iO4WTxigGPVJg=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: vZA2+KWBR1wDSvH4IKxEBdO5KRub7QRUaZOldm9+tP8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12622 (0x314e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: May 18 15:40:08 2024 GMT
            Not After : May 25 15:40:08 2024 GMT
        Subject: CN=6648cbd9-37bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:fb:26:f4:5a:7f:8b:97:f9:b7:0b:1b:b4:
                    29:96:f8:56:51:3d:33:c6:71:96:cf:b7:40:09:b2:
                    5e:a4:42:fd:96:04:ad:33:77:68:54:03:94:72:06:
                    ab:18:0f:d3:3a:69:83:e6:82:0f:2e:6d:ab:ad:c9:
                    e7:b9:d9:4f:80:1f:ac:fa:14:b4:8d:4f:f6:12:69:
                    ad:e9:47:5d:15:40:ce:91:d4:99:5e:12:59:1e:53:
                    fc:ce:6e:fd:a5:62:37:f9:ec:d6:d0:bf:90:84:97:
                    b6:b2:83:57:b6:81:bf:ed:2b:25:29:a5:b5:7c:a4:
                    12:0d:d7:07:ad:fe:79:bd:b3:50:a8:92:b3:bc:08:
                    fc:85:b8:c4:47:8d:b4:45:e3:c2:70:44:91:a8:3d:
                    a9:4d:7a:35:d0:42:6f:c2:23:56:a2:43:46:c3:97:
                    f4:6c:82:13:9c:30:b7:4c:f2:be:63:32:31:90:fd:
                    55:73:4f:af:00:b0:67:ed:aa:25:96:a4:bd:c8:f4:
                    07:14:be:77:a1:9c:e2:4e:cb:cd:1f:63:13:12:18:
                    14:1e:e2:aa:a7:15:5c:9a:a7:1f:98:72:3f:cd:f3:
                    af:58:30:52:da:d6:8b:c5:38:37:68:7a:ec:16:6f:
                    bb:85:0d:0a:7e:49:f7:48:b6:29:64:2a:f2:bb:ac:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:E2:D8:08:5C:CF:30:38:56:0C:0B:41:47:D7:97:4C:99:4D:B0
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:94:36:29:5e:0b:49:d2:9a:dd:fd:c0:09:50:37:7c:01:08:
         7b:ab:cd:39:83:e6:a3:d1:1e:28:d1:1e:94:90:ed:9d:7e:fe:
         67:86:b8:57:00:36:e3:2b:be:c7:5f:cd:b7:92:e6:df:0f:d5:
         a6:cd:ba:b4:31:3a:91:84:46:0c:69:d2:ee:fb:b7:6d:fb:ab:
         5b:ec:8b:0d:22:55:d0:b7:99:81:18:a5:e5:ca:e1:33:85:62:
         00:41:93:5d:b5:1e:fe:0b:f1:57:52:8c:62:26:68:14:a4:5b:
         5f:a9:5d:75:b6:50:aa:f8:d8:58:73:2b:2d:32:df:ef:a0:b9:
         6a:15:39:c4:c9:09:ba:e2:8b:5a:0b:ca:a2:04:61:7a:8a:02:
         72:69:23:8d:e3:e3:0d:44:0f:cf:ab:be:0c:77:65:21:5a:f6:
         5b:18:02:68:68:c9:ba:82:bd:b2:3e:7e:e7:bf:bd:1d:07:c9:
         ef:99:df:7d:45:dd:b9:6b:01:6b:af:78:8c:74:be:d6:a2:68:
         74:fb:4e:93:63:a5:66:17:91:41:b7:de:8c:6e:14:71:34:3c:
         09:b5:e2:12:72:07:05:a8:4f:ae:2f:ec:ed:c5:ec:62:7e:22:
         d1:29:11:3d:1f:fd:27:1b:ed:57:ee:d8:26:b5:56:ff:f8:98:
         7c:33:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org