Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
File:                     HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft (raw, json)
Hash identifier:          RBWslKsHWnwFjbIRvfPYWZ7enX9XsuYne8JUpOZnOAk=
Subject key identifier:   4A:58:C7:B3:73:62:5B:A1:E1:F6:F7:EA:CA:93:AF:0A:AF:4E:A3:4D
Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
Certificate issuer:       /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
Manifest number:          01D6
Signing time:             Sun 19 May 2024 04:19:42 +0000
Manifest this update:     Sun 19 May 2024 04:19:42 +0000
Manifest next update:     Sun 26 May 2024 04:19:42 +0000
Files and hashes:         1: HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl (hash: RSj/b0K+oNRiYhBbDlIi5ODQsFyL8N+AepspoOM6nLc=)
                          2: 9A26AFD201D611EDA3BFA62EC4F9AE02.roa (hash: BSDVALklh20lmgqf3aWX8r8+66lwc6XTeIKSmxYVQCY=)
                          3: 9AF0F3C801D611EDA3BFA62EC4F9AE02.roa (hash: nciiFuGmxPeoho5NmphaFtp0k4wbXNH8dEwpri0vVSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl
                          rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
        Validity
            Not Before: May 19 04:19:42 2024 GMT
            Not After : May 26 04:19:42 2024 GMT
        Subject: CN=66497dde-54b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:66:8a:41:d2:3d:85:3a:ee:f3:51:c4:24:
                    fb:dd:72:71:22:42:a2:bc:b2:52:93:67:aa:4d:fa:
                    59:43:31:4f:07:5e:bf:3b:1c:4d:4b:47:94:ac:51:
                    85:a4:2a:7e:01:ae:6d:c4:00:e7:58:6b:e9:af:19:
                    a2:4e:78:1c:dd:f0:ce:26:3d:1e:f8:10:c9:d4:36:
                    37:cb:a4:5a:e5:03:72:10:87:7c:90:34:f1:bb:c4:
                    45:12:6a:65:3e:59:06:20:45:6c:58:43:c6:cd:38:
                    0f:93:61:6b:c7:96:97:ba:0a:1f:95:8d:3b:36:48:
                    5a:c8:96:a7:77:90:d2:6c:99:4b:ca:e8:19:42:a9:
                    0d:0d:dc:7a:5a:cd:da:9c:63:d7:3d:3b:8a:66:52:
                    b8:d3:60:b8:7b:34:13:b0:be:fe:09:ac:ca:67:06:
                    ea:3f:aa:de:68:6d:37:cd:19:b9:36:26:3a:18:35:
                    ee:c2:3c:fe:04:e7:bb:db:f5:a4:a4:8a:21:78:f6:
                    ee:d8:42:09:1e:18:94:08:f2:b6:0a:64:68:db:c7:
                    96:b1:86:f2:3d:5c:47:40:b2:2a:5b:fc:d9:d2:ca:
                    24:4e:d9:40:77:c2:4e:4b:b6:bb:6f:e1:e5:81:51:
                    45:b0:98:6a:f5:aa:4d:a2:18:b6:b1:35:17:c0:94:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:58:C7:B3:73:62:5B:A1:E1:F6:F7:EA:CA:93:AF:0A:AF:4E:A3:4D
            X509v3 Authority Key Identifier:
                keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:66:99:3e:92:f8:b7:93:e6:31:37:0d:2f:e3:a7:5c:6a:4d:
         c3:d5:87:fa:86:23:87:a1:e2:72:68:bd:bd:db:e4:ba:76:57:
         a5:4d:5f:87:a3:e6:aa:91:64:e4:61:8c:62:0b:98:bb:10:2a:
         de:6f:f6:3b:ac:b7:b1:c5:3a:2a:ec:7a:0b:1d:3a:99:21:b9:
         a1:79:37:a4:41:e7:1d:ea:95:1c:37:b5:ca:58:99:09:b3:1b:
         73:b7:ee:9a:6d:7a:65:03:ea:fe:77:54:75:be:c0:5c:a2:d3:
         70:83:84:d3:8b:45:17:45:28:40:9b:90:a9:e6:89:b5:d4:33:
         5f:66:94:f6:6a:e2:11:8b:8e:c8:57:8b:60:0f:a0:a2:46:d7:
         8a:10:52:67:da:f4:4a:ec:8a:f1:23:5f:83:0a:5a:5d:52:6e:
         a7:ea:eb:13:a6:78:70:f9:72:94:e6:b2:6a:58:8c:f5:a1:c1:
         ea:8f:df:91:ae:19:fe:93:a8:a0:55:4c:66:ea:b7:0e:5f:45:
         5a:68:28:f3:40:9f:d6:54:3a:b2:8c:5a:fd:ec:00:4f:66:13:
         af:21:26:6d:90:72:83:07:c0:79:2b:b1:8c:09:01:f7:da:09:
         90:0d:90:3f:b0:33:3a:af:d1:6a:b0:18:63:5f:08:d2:ea:d7:
         8c:0e:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org