Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File:                     PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier:          8/c2IeDGuzZnkDT4t7hXC2cS9oGpdIIeLbYVlDNLAJU=
Subject key identifier:   32:ED:A7:30:35:BE:77:12:24:3B:00:A7:56:E6:46:F5:53:ED:E2:DC
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number:          C9
Signing time:             Fri 31 May 2024 07:06:27 +0000
Manifest this update:     Fri 31 May 2024 07:06:26 +0000
Manifest next update:     Fri 07 Jun 2024 07:06:26 +0000
Files and hashes:         1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: AON7r4H5lAZqR1VHDdcqg4v66LJ8alCPooNG9H95eOM=)
                          2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: SaqoF9qZaWArmnzurxTGnX6sjuUal5ybDEvQkKwjecE=)
                          3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: DzBCpboud2zLxpVF1ilPsGBCQ+/vZr9mk3HLW2SW1Ug=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: May 31 07:06:26 2024 GMT
            Not After : Jun  7 07:06:26 2024 GMT
        Subject: CN=665976f3-c1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:f0:39:ae:58:84:10:0d:c1:65:ed:1e:98:
                    92:76:b3:3f:8c:df:0c:df:20:d9:11:2d:77:3a:30:
                    ea:94:56:ed:26:e5:71:de:c5:06:c9:93:90:8c:15:
                    90:a1:a9:fe:c5:59:56:2e:ea:06:0b:00:e2:5f:0d:
                    05:b2:5d:11:cf:7e:dc:c2:34:0c:40:98:27:01:c6:
                    03:69:a8:36:97:12:09:29:d3:87:ae:60:37:72:26:
                    d2:20:73:ad:e3:97:fc:11:d2:a9:0e:5a:8b:ff:9e:
                    59:03:ee:41:a6:c9:c6:8b:cb:73:f4:df:35:4c:a7:
                    19:11:3d:1e:64:a3:f3:ef:9c:c5:1e:8e:87:a4:f2:
                    54:16:21:9c:3e:99:a2:84:1a:ca:9c:cf:d7:1a:c7:
                    44:6b:23:6a:cc:fb:ad:16:56:fa:32:5d:81:45:df:
                    ad:8f:99:73:58:9d:aa:64:13:63:fa:f2:0a:9a:01:
                    b3:d3:d9:44:5f:8a:30:62:ff:19:5d:13:ea:7b:34:
                    61:c1:f8:41:b0:c5:54:8d:7d:e5:67:36:5c:00:2e:
                    04:40:5e:30:8a:bb:f1:2f:e2:ce:2d:29:6f:6f:92:
                    6b:cb:a2:96:34:67:2e:39:d7:a1:d8:79:f2:6a:e9:
                    15:03:c5:86:35:09:67:72:23:b3:eb:82:c0:62:5b:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:A7:30:35:BE:77:12:24:3B:00:A7:56:E6:46:F5:53:ED:E2:DC
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:4c:b6:ae:bb:bd:4c:4a:07:82:0d:e4:e4:46:78:21:d7:
         be:32:96:21:10:7f:88:b3:13:96:28:8e:ce:21:8c:c5:44:2f:
         98:ae:c5:e1:b7:56:33:9f:01:b4:06:d3:a9:a3:e4:57:54:1e:
         f6:bf:4c:02:ae:ac:ea:bf:21:62:f1:af:fc:e8:2c:13:7e:c7:
         12:86:99:ec:cd:5e:12:6a:65:82:72:ec:80:86:b3:ac:a2:23:
         a3:31:a1:b0:e7:81:15:9b:ab:c9:7a:6a:93:23:7e:3d:1f:27:
         21:f6:b5:d6:a5:47:91:af:7f:24:5d:0b:02:a4:31:7c:89:a4:
         fd:33:78:4a:00:8a:65:9b:fd:99:aa:fe:03:3a:40:ae:d4:b5:
         7d:c3:39:e2:c6:4e:be:b7:5a:4d:24:22:03:05:8e:07:45:66:
         c1:72:ed:18:6e:45:ce:97:bf:5f:20:cc:c9:a8:e4:16:69:2a:
         b5:17:ac:ff:ba:28:20:86:81:05:f1:cd:c6:0d:92:47:55:90:
         32:b4:74:6a:0c:58:cf:21:5b:b3:38:e0:6b:5a:79:07:d1:23:
         84:b4:6c:05:0a:75:a0:ae:65:70:bf:8a:2e:e2:12:24:5e:c1:
         ac:49:84:94:94:d0:50:dc:22:6b:f2:6f:bc:ab:ab:22:7d:87:
         9f:4c:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:45 2024 by rpki-client on console-ams.rpki-client.org