Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          mAythjrllT5vhOXs3ULdl1lJTvcOrHoGl6K1u4CKxTU=
Subject key identifier:   2B:03:72:8E:8C:A5:A2:90:D2:A8:77:53:85:C8:5A:99:E2:D9:04:D2
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          01DB
Signing time:             Sun 19 May 2024 04:27:11 +0000
Manifest this update:     Sun 19 May 2024 04:27:11 +0000
Manifest next update:     Sun 26 May 2024 04:27:11 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: +MRC8MiTwG76ZoNoZOn0cRAQdsz6mnldiwG6ev+hYrk=)
                          2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: LvjI1kGLElm7JCE/Hv6TR8CpWAtHCUumiOTJr7qH3KA=)
                          3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: p4VGJGNo8OqjO9e3iY6T8itNoXa552xGBOdZnfrySyg=)
                          4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: ttroBuzpyNHaJs78T3ge8SIPw8AYDGc7mDgWt6Iq9qM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: May 19 04:27:11 2024 GMT
            Not After : May 26 04:27:11 2024 GMT
        Subject: CN=66497f9f-d1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:32:a8:16:be:be:91:1c:8f:e3:1a:33:23:
                    94:df:d4:45:56:d6:55:63:9d:37:1a:f3:05:7d:ef:
                    cc:a6:4f:ba:a0:0e:62:83:cb:78:a0:9e:50:92:4f:
                    39:4e:96:ad:de:bb:fd:68:f0:05:2b:5a:74:86:39:
                    aa:fd:a7:aa:da:21:ac:0a:cb:eb:6c:1c:3d:48:c0:
                    be:fb:21:25:a8:ac:0a:62:f8:a6:4a:7f:3e:f2:bf:
                    59:96:05:0b:86:ef:16:ba:3b:0d:14:5b:dd:90:3b:
                    62:ae:d9:69:55:36:36:4c:69:85:9a:30:9d:29:07:
                    16:39:c7:3b:bc:c3:26:30:79:6b:ed:c2:23:3d:45:
                    fa:94:19:e9:26:12:28:e9:59:57:7b:40:9d:09:8d:
                    76:1a:3d:6d:20:7f:42:5a:aa:92:87:91:ab:85:2f:
                    68:67:82:da:88:57:34:92:cc:27:fb:bd:56:9d:e0:
                    e7:c7:96:5b:1e:f6:e2:1b:be:2c:0f:dd:64:72:0c:
                    7a:d0:ce:16:a9:6e:3a:d0:bb:fa:1e:17:c9:03:af:
                    89:42:d6:36:0f:dd:53:ac:14:32:98:38:2a:29:f0:
                    18:7d:5b:80:9c:4a:f6:d1:2b:db:e3:b3:59:63:46:
                    89:fd:f2:45:67:fc:40:b3:53:04:87:cc:68:44:3c:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:72:8E:8C:A5:A2:90:D2:A8:77:53:85:C8:5A:99:E2:D9:04:D2
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:5d:3d:d9:91:1d:a0:6c:e9:81:00:06:b6:59:58:04:ac:
         05:fc:1b:bf:d2:7e:ab:e8:5b:85:4f:c2:54:49:bc:12:51:2e:
         84:8f:5d:4b:05:01:ca:f6:48:d5:ff:11:34:2c:f0:2f:2d:b5:
         9d:5c:87:4a:7d:1c:ee:df:5f:6c:2a:f6:6a:8c:a8:c8:e9:e5:
         f9:ce:cf:6a:a6:37:e0:e4:e4:ee:4e:24:99:66:3d:bc:03:1d:
         47:38:4a:35:df:30:2e:3f:22:8e:4d:26:5b:67:25:08:fc:83:
         cb:a0:79:35:0a:84:ef:89:d5:20:2e:ff:61:9c:67:ea:9f:7f:
         e5:e0:96:e5:59:77:f9:73:5c:7b:36:9c:7f:8f:ab:26:55:8a:
         6a:4a:24:ac:f7:e6:ef:df:da:7b:cc:af:c5:80:f9:e8:d1:89:
         e1:e3:3a:64:70:0d:f7:8e:b3:76:b6:3d:bc:87:29:72:66:d6:
         e9:c5:02:87:28:9e:c5:43:4f:44:45:ee:87:2d:81:37:3c:ed:
         8b:b4:dc:3a:2c:b5:17:d5:b3:96:73:3f:39:53:c3:4e:87:36:
         e6:a5:65:4c:45:f9:ce:a0:83:01:ca:9d:4b:ad:82:98:16:74:
         4d:e0:81:4e:4b:c4:10:f3:a8:eb:d7:ab:61:3a:7b:1b:da:d2:
         5d:e5:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org