Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier:          mdgOxBytcX1SMCrFa1BRdr/lflNFESgVAl/bvu8lhNI=
Subject key identifier:   59:3F:41:19:91:53:E8:F0:C1:19:BC:B0:D6:B8:68:8E:1D:85:72:38
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer:       /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number:          072E
Signing time:             Sat 18 May 2024 22:30:39 +0000
Manifest this update:     Sat 18 May 2024 22:30:39 +0000
Manifest next update:     Sat 25 May 2024 22:30:39 +0000
Files and hashes:         1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: FLcBX75pXjok0p4yFK6JKP58XVtOznyXhDxWdAnHbGE=)
                          2: D2027F2A09B711EC93F7E66FC4F9AE02.roa (hash: 6KNgKZXZVV/AvknRswKbpktVqgCEKw/OBPB+JqhURXs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
                          rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Validity
            Not Before: May 18 22:30:39 2024 GMT
            Not After : May 25 22:30:39 2024 GMT
        Subject: CN=66492c0f-577c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:69:be:7f:30:7d:ec:79:c5:4e:0a:3d:e7:
                    31:a2:51:fb:bc:c8:ca:16:d3:3c:d4:e1:41:27:81:
                    d1:40:b7:9f:e8:a1:c7:35:a5:b4:b3:da:24:12:5c:
                    2b:a6:56:eb:59:e5:c6:9e:5d:d8:98:fc:17:ad:52:
                    55:45:7a:73:56:d7:15:59:b9:13:46:21:84:9a:84:
                    d5:04:64:2f:e1:57:c9:71:e4:9b:93:c1:7c:e8:07:
                    9e:b2:c9:96:90:d4:66:22:61:f9:a0:e8:e5:b0:1a:
                    18:bc:ef:e1:ad:70:5c:7f:ef:31:33:c2:4a:3d:4c:
                    11:6f:01:ff:fa:4f:49:92:2b:98:3c:c6:5f:c9:55:
                    b9:2d:54:56:7c:0a:1a:c3:fc:de:ab:10:e8:4f:e1:
                    70:ea:1b:de:e7:0e:da:97:b2:93:9a:7c:68:fe:67:
                    6f:85:64:fc:1b:28:58:95:04:a3:f7:01:a8:d4:91:
                    fc:a3:5a:04:32:66:cb:8a:a9:58:02:22:05:63:33:
                    b3:9c:8f:23:a3:11:37:7d:57:26:73:18:51:1f:35:
                    b3:3e:2b:e6:ed:66:45:cf:3c:6f:10:43:26:68:23:
                    7f:4c:fb:a8:99:3d:91:a7:a9:00:72:0e:cc:18:6d:
                    b1:fc:65:c9:bc:9c:a9:b7:d4:32:67:90:1b:1a:67:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3F:41:19:91:53:E8:F0:C1:19:BC:B0:D6:B8:68:8E:1D:85:72:38
            X509v3 Authority Key Identifier:
                keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:17:1a:a1:67:04:a9:3b:41:f4:1f:ed:a4:c7:b9:73:82:
         56:3d:97:2a:e5:95:6f:5b:58:b2:0d:ef:50:47:5e:e6:44:72:
         86:db:a2:7d:bc:f2:6d:04:31:5f:fb:fb:9f:aa:07:5e:5f:2a:
         2e:42:9a:e7:cc:1c:59:33:a3:f0:e7:57:af:62:ce:6c:87:7b:
         d4:91:0e:20:a5:cd:eb:66:54:fe:3b:0c:85:78:ae:78:e6:b1:
         97:a7:9f:89:6e:41:66:69:d1:26:fb:96:d3:2d:2a:a5:b4:c4:
         ab:17:ff:d1:83:0b:d9:66:cc:8f:c6:30:b3:2c:fe:b4:97:0c:
         0a:1a:27:93:fe:0e:ba:cd:4e:b1:c6:31:df:f3:96:a5:98:3c:
         c5:7c:c1:12:1d:71:21:e8:e5:0f:1a:a0:17:df:64:24:f6:80:
         2c:c4:79:78:0a:90:22:d9:cb:01:77:63:3c:31:4e:f3:ca:7d:
         e1:11:48:35:f7:5b:31:99:d2:bf:66:7d:63:4d:f1:0c:fe:99:
         04:a1:f8:11:19:55:c0:7b:39:d7:96:f5:62:a5:4e:e9:ea:5a:
         df:e0:c4:ca:c2:cf:59:aa:0f:d8:2d:8e:bb:8d:b0:a3:a6:0c:
         3b:f7:bd:b8:c6:d7:ac:75:be:7c:cb:b6:ea:d8:9c:bd:d3:6c:
         fe:23:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org