Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
File:                     bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json)
Hash identifier:          +eOgHoaAva9EUSA+RfFPNC8E789xLtLyhRcA7G7cKFA=
Subject key identifier:   EB:00:0A:3B:EC:F0:D2:C7:30:85:FC:58:6C:CE:4E:49:54:FC:06:0B
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Certificate issuer:       /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
Manifest number:          01C2
Signing time:             Sun 19 May 2024 04:26:23 +0000
Manifest this update:     Sun 19 May 2024 04:26:23 +0000
Manifest next update:     Sun 26 May 2024 04:26:23 +0000
Files and hashes:         1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: tpWBjEda+cRGzheUU/S3seyg5L6UrQlR32mSLXexylQ=)
                          2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: 4D1pPdSdbqdCY5PZJLcDChnWlfH/s/pDWMp2AoBeRI4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
                          rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
        Validity
            Not Before: May 19 04:26:23 2024 GMT
            Not After : May 26 04:26:23 2024 GMT
        Subject: CN=66497f6f-520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:a8:5b:da:5b:6a:ed:e9:2e:e0:6d:83:b8:
                    03:75:7f:68:2b:c4:e8:57:8d:ae:16:9b:92:1c:d5:
                    cc:ca:81:1d:0e:8f:a0:f7:ce:5a:11:2d:71:23:ea:
                    4f:45:62:a7:81:47:ec:09:a7:b6:60:6f:0b:3e:dc:
                    7e:a9:1a:93:8d:b1:f7:56:99:89:45:4a:76:d6:58:
                    0f:0f:1e:20:8e:b6:70:25:79:0d:89:3f:c0:d7:d2:
                    71:d5:52:0e:66:38:46:2d:13:33:f6:46:05:6f:2f:
                    d3:d4:34:49:00:77:b6:a8:99:d5:f3:63:24:8a:2f:
                    2d:1c:f7:a7:8c:a3:df:92:65:ca:ad:58:69:a0:b1:
                    93:1e:5c:db:3d:e8:dc:1a:bc:8f:74:39:9c:95:46:
                    f4:5b:b4:1e:93:68:7c:f9:5b:82:9b:09:18:36:e9:
                    0e:fd:ca:2c:01:1e:1a:45:8e:05:f6:ec:f7:8f:a8:
                    61:34:2d:0d:5b:e9:c7:bc:73:8b:7e:cc:65:d2:3b:
                    70:f9:fe:7b:ee:c9:45:43:48:07:fb:96:1b:68:98:
                    0a:fc:6d:3f:1b:40:84:f7:5f:01:5a:8a:64:34:f6:
                    6c:bb:dc:55:32:d2:49:4b:68:5d:56:79:19:62:bc:
                    d6:8d:ae:d1:9c:ec:28:ba:e1:51:18:fb:ac:e0:f6:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:00:0A:3B:EC:F0:D2:C7:30:85:FC:58:6C:CE:4E:49:54:FC:06:0B
            X509v3 Authority Key Identifier:
                keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:04:fe:d4:5c:9e:6a:05:f9:f7:41:25:3d:98:ec:6a:22:
         e3:94:35:b4:0e:e3:46:f7:3f:2e:5e:c5:3e:3c:62:c0:c1:cd:
         11:6b:c7:d6:0f:3e:df:a4:e6:6f:36:90:55:9b:dd:cf:fa:89:
         9d:c6:13:22:fa:50:fe:c0:4b:13:a0:9d:f9:4f:e0:74:84:48:
         25:1e:55:94:6f:1f:92:d4:45:ae:e5:31:2c:2d:c7:7f:59:5e:
         ce:f9:cb:6c:b9:e3:7b:ef:88:3f:41:f0:73:f8:0f:44:d4:47:
         25:cf:96:ee:18:78:e0:03:7a:74:aa:d0:24:22:f0:5e:ee:98:
         dc:65:c7:e3:d4:2b:b9:81:43:49:71:fb:d1:e8:92:d8:d0:79:
         01:97:48:f7:d1:b5:17:66:94:91:55:e5:0d:eb:4c:2d:36:c4:
         05:b2:89:1a:ea:76:b6:4e:70:b7:5a:c1:5e:d7:0b:ac:9e:76:
         67:01:ba:d2:6a:4d:a8:82:da:45:cc:9d:b6:8e:5b:f2:10:c8:
         1b:52:dc:12:fb:07:ee:bf:0d:5e:5d:16:8a:44:dc:3c:ec:4c:
         64:7a:9b:7b:b8:21:8c:a8:0f:a0:98:5e:14:80:23:c6:2d:39:
         aa:81:7b:25:e4:d5:08:8c:4b:e4:82:fe:b1:aa:f5:9b:49:10:
         81:96:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org