Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File:                     10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier:          Q5CoIfp15Zskw7QHlVXF0gp05V1HI3BkgEpNAvevHYg=
Subject key identifier:   16:06:47:B4:01:EA:2A:C1:35:B9:2A:0C:4F:89:74:B8:D4:26:E7:D0
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number:          34
Signing time:             Sun 19 May 2024 08:27:09 +0000
Manifest this update:     Sun 19 May 2024 08:27:09 +0000
Manifest next update:     Sun 26 May 2024 08:27:09 +0000
Files and hashes:         1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: xwIyX0oeejUDjsM2vomQ1jrw6Xh4FdwRva4Fwo2qBUo=)
                          2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: wWpGWXc0da4NayJh8tXlJgOGWzmykFbxwGJAc8cXKN4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: May 19 08:27:09 2024 GMT
            Not After : May 26 08:27:09 2024 GMT
        Subject: CN=6649b7dd-cb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:e0:cf:93:c7:8d:34:ba:88:49:c9:52:57:
                    ff:71:e8:4f:15:c8:b9:ae:1a:7e:5e:65:f2:48:8c:
                    aa:60:f7:59:24:3c:47:7b:8e:14:ae:00:58:f9:d5:
                    f9:2b:76:19:44:cc:dd:ae:b2:0f:f8:db:f2:bf:47:
                    a5:56:07:a2:e8:94:23:98:f5:00:7a:48:fa:a8:71:
                    ac:da:54:f6:dc:36:f7:e2:69:18:6a:cf:d1:cc:6c:
                    55:d3:74:46:ca:09:b4:78:9b:12:b6:79:5a:75:77:
                    d8:7c:a8:21:0c:fb:25:d5:95:4e:2a:6b:ae:14:69:
                    79:85:31:34:44:e7:a8:c7:e6:9f:42:0b:13:33:6e:
                    bb:f8:fc:8b:70:32:ec:73:d6:6a:7e:69:cd:fe:bc:
                    86:60:d9:e5:2c:85:a3:2c:8c:02:70:31:94:cf:9a:
                    ab:a3:39:20:ce:62:1c:79:59:36:72:f8:ff:3d:70:
                    3b:a4:73:1f:ec:05:e1:29:7d:2e:0d:61:e8:39:37:
                    be:b3:ca:3a:13:41:ea:bc:6c:c4:6b:1f:6c:3b:e1:
                    9d:e8:ad:c8:1e:a4:6e:69:61:bf:a9:2c:42:11:c0:
                    b6:91:24:23:d6:15:58:09:33:63:b7:a6:03:d8:44:
                    95:85:46:76:c4:c3:0d:b6:07:f8:9d:f2:dd:c6:e3:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:47:B4:01:EA:2A:C1:35:B9:2A:0C:4F:89:74:B8:D4:26:E7:D0
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:1e:e3:71:97:cd:85:6f:9b:9f:64:18:56:e2:59:96:07:
         31:b7:2e:ff:13:fc:58:2f:22:7b:c9:8e:49:ac:cc:aa:f7:31:
         f6:b8:d9:98:0f:80:e1:a8:4f:79:06:b0:08:56:41:98:e6:28:
         c3:57:e5:d7:9a:12:8d:a8:15:b3:ec:2b:eb:1d:c8:d9:96:96:
         4f:1b:1d:66:2d:84:2f:2e:32:b7:7f:70:2a:bb:bb:9f:7f:35:
         2d:c4:2f:09:40:35:28:c8:2a:62:7b:83:76:be:d4:a2:d4:ed:
         1d:2b:00:1d:df:ba:e6:74:20:04:ef:33:2d:a5:32:72:c7:6f:
         94:b2:f2:c1:7f:8d:97:41:e3:3e:30:6e:fe:1d:1d:2c:71:1d:
         49:f8:15:f3:05:8f:d8:9d:b7:76:96:40:48:68:74:2c:cc:f5:
         3d:4d:6d:4b:85:87:30:84:01:8e:10:5f:55:7c:65:84:cc:e3:
         07:10:e4:7d:c4:11:72:c9:d8:9f:2a:77:23:bd:a1:d4:09:6e:
         04:ba:bb:25:cf:21:d7:6a:47:d0:09:72:d9:26:9a:ef:55:36:
         ba:ff:da:ca:9c:e5:28:eb:25:e2:e0:19:10:6f:47:90:1d:6c:
         33:d6:a3:8e:ac:8a:91:07:73:0a:05:32:42:8a:c5:b0:5a:5c:
         b2:59:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org