Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          BdcWD8RltMOhqrTFCWnCecJHcBy3veJY3/BN09+Yf7I=
Subject key identifier:   2E:00:27:78:C0:75:E9:17:C6:01:56:51:8D:55:1A:DB:95:69:57:BB
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1BFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1BC6
Signing time:             Fri 31 May 2024 16:47:33 +0000
Manifest this update:     Fri 31 May 2024 16:47:32 +0000
Manifest next update:     Fri 07 Jun 2024 16:47:32 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: rDfVTA9oBvie53elggUArEbwMkQkw5eYJIBeku0uoI4=)
                          2: 846D5AAA9F8A11ECB8E03812C4F9AE02.roa (hash: 7PdKUXE5Xitd5DLRaHPfMoA74Y6LX1GUgGaOxCGqnLQ=)
                          3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Qf6Id46hBN+W7rLVaZL9Bo0piMWZE9hsYSpHsWs83lo=)
                          4: D1A2301C98DD11EAB0763B4BC4F9AE02.roa (hash: 1CXisgn5G4IACvJcG9Sr+WfoN241nnt4sfV7d3DxyjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7163 (0x1bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: May 31 16:47:32 2024 GMT
            Not After : Jun  7 16:47:32 2024 GMT
        Subject: CN=6659ff24-e426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:4d:da:1d:40:d2:eb:c1:61:4f:d8:df:a5:
                    10:ad:73:03:47:30:c7:d6:51:dc:25:af:a9:e7:38:
                    b0:83:06:bc:0c:28:64:b4:b4:2e:e1:d5:be:6a:06:
                    56:55:13:12:14:58:87:f5:b6:81:54:ad:e1:b5:cd:
                    f5:bd:3d:a3:b6:ae:af:7d:37:b7:4c:33:cd:9a:53:
                    41:a4:41:1c:d2:52:54:70:fc:47:f1:3d:7c:dc:d9:
                    9e:72:8d:20:f3:a5:c1:5e:70:4e:44:83:97:23:3f:
                    be:99:66:67:e8:5a:ef:69:b2:00:bc:30:f9:80:c5:
                    6a:ab:fa:15:78:77:e3:e9:4a:d9:70:ea:97:19:9c:
                    d2:62:63:62:d6:e2:4b:fe:8b:53:53:d1:36:91:be:
                    f8:e1:68:e3:e7:68:4e:8d:2d:e5:03:ea:28:27:94:
                    2f:cd:a7:88:c0:f1:0f:22:f0:cf:54:f9:13:53:03:
                    a1:e8:3f:31:c0:cc:86:52:c6:cf:b6:d5:47:7a:c1:
                    5c:f2:d4:50:a3:e3:8b:16:80:26:af:5d:d2:3b:59:
                    66:d5:2e:f1:e2:f9:03:b1:a8:11:8a:b5:5d:d7:eb:
                    6f:bd:72:0e:5b:60:06:8c:0e:73:43:f0:ab:4c:57:
                    72:a7:fc:fd:1d:60:57:a3:d0:89:9d:39:81:0d:04:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:27:78:C0:75:E9:17:C6:01:56:51:8D:55:1A:DB:95:69:57:BB
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:01:9c:45:b8:72:d2:45:76:0b:c8:51:a4:03:bd:db:ce:
         65:47:65:2a:b6:ce:3e:81:97:2f:ee:e2:ff:89:30:a8:99:4d:
         d1:72:1e:cf:5d:ae:91:a7:72:71:60:e1:cd:86:45:30:70:5e:
         51:32:33:bf:97:75:35:b6:ba:95:3f:ce:dc:d2:6e:99:14:2b:
         cd:45:7a:95:fb:74:53:30:2b:5c:ab:97:67:61:c0:c5:0f:a6:
         56:35:81:66:dc:88:9f:73:20:6a:77:be:2b:a3:72:7d:c9:61:
         f2:e9:0a:17:08:1a:5b:2d:51:c9:73:56:af:44:a7:0c:69:7e:
         ea:53:e3:f7:db:fc:27:97:7d:59:78:f6:12:38:85:31:9c:81:
         6a:d3:b7:6c:cf:88:86:e5:7b:30:99:18:93:dc:29:a7:19:86:
         45:38:6f:e5:49:c2:91:a7:58:f4:6b:44:82:5d:23:29:43:96:
         58:7f:e5:3a:5f:bc:37:44:9d:51:94:13:c0:8a:1f:5d:ab:59:
         eb:9a:b7:6a:2d:2e:d6:be:65:92:80:1d:8c:d5:c9:dc:82:36:
         9e:89:e7:dc:00:db:76:7b:2f:26:7a:60:1a:67:ba:2a:99:e8:
         bb:fe:16:b6:35:d6:79:95:28:e9:fb:9f:24:e9:30:0f:ff:ba:
         c9:96:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:04 2024 by rpki-client on console-ams.rpki-client.org