Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File:                     LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier:          7dgtaghFfph82xuc6NF4u/SG7T8PF/ljIkfThqkdo7c=
Subject key identifier:   88:A1:F9:F0:7F:8D:34:5E:F1:9B:0A:35:EA:1D:96:DF:54:38:71:1D
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       09C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number:          09B8
Signing time:             Fri 24 May 2024 20:57:49 +0000
Manifest this update:     Fri 24 May 2024 20:57:49 +0000
Manifest next update:     Fri 31 May 2024 20:57:49 +0000
Files and hashes:         1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: M4gkzh6PtKRzh8sfiFXKV30TCRhVOYuIzeO8bBsID10=)
                          2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: Y/AEd7QcGK8AQ/rzAT1eLLkzS1RzAMBe2UpxIF9eV6E=)
                          3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: WKWrJLE2KjXqNoGts7dJxOjcA/A1JYYBqSWWc0aK44A=)
                          4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 9fqzd3vvP8c0S6SsCwgCIrhZmr97quNpOsKxeDvdK6A=)
                          5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 8v3U212scKLXksKa0eNaD2XPnjY3jXNcz+ZwlllZRK4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 20:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: May 24 20:57:49 2024 GMT
            Not After : May 31 20:57:49 2024 GMT
        Subject: CN=6650ff4d-fc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:c0:bb:ca:04:b5:32:6e:06:42:45:f0:f2:
                    21:27:ba:f6:c2:1e:18:8d:ec:73:7b:59:9f:d3:04:
                    39:6c:91:f5:b0:d1:81:1b:ee:cb:8c:b9:c4:d5:7d:
                    32:b7:85:63:ca:19:fa:0c:d7:b2:61:ec:55:51:9b:
                    17:24:1a:85:9a:f2:b4:2f:31:68:08:c3:19:4a:24:
                    b5:69:c0:2c:b8:26:ac:9b:25:c9:87:fa:23:1c:b8:
                    4d:8d:3c:79:73:4f:5e:51:83:10:44:92:50:63:14:
                    5e:2d:52:f3:1a:49:be:1e:f1:0e:87:18:0b:59:10:
                    c4:09:39:ae:2a:41:85:3b:95:ea:df:08:41:c9:f9:
                    f1:79:8d:9a:7e:b0:82:3b:41:98:66:84:9c:32:df:
                    c1:75:f3:a7:35:23:9b:29:49:11:96:9c:1c:4c:dd:
                    6c:c7:80:6f:d2:5b:a6:5f:af:cd:6d:fb:56:11:cc:
                    72:f9:19:66:af:fb:94:bb:02:28:ff:10:53:5a:49:
                    37:13:29:f5:4d:bb:06:a6:6b:c6:f8:d6:0c:5e:67:
                    8d:34:7a:a6:cc:b1:b2:98:22:39:86:45:44:ef:77:
                    fb:19:5f:f0:a7:a8:7f:fa:d8:46:01:bb:04:7d:e0:
                    4e:69:4a:09:83:1a:43:be:aa:36:48:a3:80:b8:70:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:F9:F0:7F:8D:34:5E:F1:9B:0A:35:EA:1D:96:DF:54:38:71:1D
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:9a:08:67:d0:92:29:1b:ac:9d:fa:01:e2:5a:84:d8:ef:
         82:d9:0d:5b:e5:be:3e:26:91:f4:ca:16:07:ea:14:ae:b3:71:
         7b:6e:1c:b6:84:5a:32:72:c8:45:96:fb:c6:a1:5e:ed:22:f7:
         86:e5:3b:2f:84:45:61:19:c9:0c:c2:ae:6a:ea:d4:b8:83:70:
         3c:37:72:fe:06:c9:84:f8:16:4a:72:0a:4f:9b:93:ff:a0:d9:
         f0:63:de:bb:77:ab:5f:21:d7:4d:58:cb:90:31:53:ec:4b:92:
         ad:34:84:3e:f3:ee:b5:50:df:5c:ac:0b:4d:25:96:18:03:d9:
         e7:6d:1c:ba:61:06:72:bd:ef:36:48:fc:b2:17:99:b9:7c:d0:
         50:ce:98:a1:8b:e5:dc:2c:d2:00:e4:75:25:4e:ff:86:09:be:
         e0:5d:96:9d:c6:e4:b0:2c:50:ba:e2:ea:d4:fe:cc:91:30:2d:
         d7:88:9e:e4:be:99:55:b4:a9:c1:35:9b:6e:de:40:e5:c0:4a:
         c8:ff:e0:c0:19:9f:ad:4b:f1:a8:71:67:c9:d2:51:66:c9:b9:
         f7:8b:fc:7c:fd:db:7a:3b:65:17:37:36:6d:88:6b:c7:5b:ba:
         a7:6c:64:cf:a6:0a:ca:03:78:8f:2b:ef:07:e6:6a:01:97:ee:
         dc:8b:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:43:05 2024 by rpki-client on console-ams.rpki-client.org