Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          2a4WjJIrD5OgjqUYH1mOe5RETN1X73IRXT96sDaZ6fk=
Subject key identifier:   05:41:F8:2B:5C:FA:75:6F:1C:1A:28:E9:15:C4:F9:21:57:2D:DE:A2
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          3E
Signing time:             Sun 19 May 2024 08:11:18 +0000
Manifest this update:     Sun 19 May 2024 08:11:17 +0000
Manifest next update:     Sun 26 May 2024 08:11:17 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: GgNGZhvS0qyH+duaOJLD1E2xyyYrVPi7U+Uo7meblRY=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: m15NEWV6N4iOizBEIFnAzmMenEVArh+8Fks5/Usc4R8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: May 19 08:11:17 2024 GMT
            Not After : May 26 08:11:17 2024 GMT
        Subject: CN=6649b426-a209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:37:63:f9:6b:3d:2b:44:08:7c:9e:22:5e:
                    86:80:78:cf:99:1f:6c:9c:82:10:8d:1a:13:4f:e7:
                    de:7b:d4:4d:f4:1e:ff:88:0d:c3:ff:ed:75:13:f0:
                    f7:bd:d5:46:bc:e5:39:e6:20:64:57:e0:e5:cc:9c:
                    45:40:1b:1c:e4:76:85:46:37:33:08:78:6f:64:8e:
                    3e:80:b2:30:97:64:50:62:44:8a:73:f8:6e:b1:ea:
                    ba:0a:d2:1b:11:d4:1a:89:27:e0:2b:96:b2:7a:76:
                    8e:c5:f1:cd:71:69:72:64:e3:01:a7:8c:8c:df:82:
                    59:21:ff:d4:fc:2a:8e:f6:16:f2:4f:2b:ad:d2:5b:
                    dd:3e:d7:4a:aa:a6:c9:9e:7f:55:ea:56:b3:3c:1e:
                    29:2b:e1:96:6d:9c:cc:c3:99:8d:43:6d:1d:7b:d3:
                    28:65:51:73:41:1f:45:af:3e:37:af:a5:9e:ed:9e:
                    0a:7e:1d:d7:33:6c:40:1b:c4:5b:f1:1d:64:36:36:
                    44:66:06:0c:8f:63:85:c4:7f:19:4b:b3:9b:b1:14:
                    3a:93:a8:58:69:8a:b2:a1:3c:ae:1f:c8:62:5c:2f:
                    42:05:35:a3:29:2a:49:1e:69:18:4a:24:c7:6b:35:
                    46:2e:b3:4f:68:fe:d4:51:ab:4d:9f:f4:5a:e2:e7:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:F8:2B:5C:FA:75:6F:1C:1A:28:E9:15:C4:F9:21:57:2D:DE:A2
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:52:2b:9e:f7:93:73:8d:35:19:fc:23:f0:e1:41:1c:19:
         21:9b:47:37:3f:00:4b:b3:5d:9f:48:5f:37:73:c6:54:9e:25:
         93:95:fc:3a:c8:03:29:a9:5c:1c:0b:49:4c:3e:bc:a4:fe:ad:
         d1:5e:26:3a:a6:38:25:f2:b9:9b:bd:44:6f:03:8c:5c:06:b0:
         a2:5c:87:4c:07:dd:2f:22:5f:3e:a6:b9:d8:22:79:63:60:fe:
         ec:f0:9f:7d:72:57:19:22:7d:ea:47:0c:3c:40:35:56:5c:c0:
         34:28:27:d7:9a:31:b0:39:a4:97:34:d2:e0:80:18:4a:ac:2a:
         0c:46:62:9b:19:c4:17:3f:93:f0:8f:32:14:30:22:e6:b8:23:
         8f:42:a6:b3:f6:8d:b8:40:9a:8d:aa:13:d4:f2:d3:d5:60:b5:
         bd:9b:16:da:4b:07:05:c9:d0:3f:a3:1a:15:71:54:f1:04:55:
         ec:97:e2:12:3e:bb:12:74:b2:b8:2d:7d:b8:0f:d5:1c:f4:a0:
         2a:df:24:bb:1f:ea:a5:c3:20:a7:7b:bc:c0:2d:d8:40:d5:e7:
         16:26:fb:3a:ae:10:78:c3:db:c8:b1:df:e7:5c:6a:c3:03:aa:
         5f:13:c9:80:02:5f:e1:77:95:35:32:a8:74:79:79:b2:c5:75:
         bd:e4:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org