Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File:                     sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier:          1hC8W/RNIFhZp1NsQanzIIwUPWlCIWRQQhSTF4vuXQY=
Subject key identifier:   60:05:1C:BC:D2:D7:31:E4:5C:87:FD:67:12:0D:A1:E8:CB:40:34:40
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer:       /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial:       099C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number:          0954
Signing time:             Fri 31 May 2024 21:58:59 +0000
Manifest this update:     Fri 31 May 2024 21:58:59 +0000
Manifest next update:     Fri 07 Jun 2024 21:58:59 +0000
Files and hashes:         1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: ZQnUr/ubBBoqz+FGkYEFjkmsHWuVtxUvXRtjPLyi8o4=)
                          2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: Ul3ZbP/fNxzjD2ZG1ojB7jnfAOS0FAoquPFEmyg/Vyk=)
                          3: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: 59rfR016T6zLx2ZcFJHQavFs1kWem06rHOXIJjKemfY=)
                          4: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: dR3OL7oMhrbuHCOtgjWRDLTt0cknZ+28XTKmzmn3SY4=)
                          5: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: JZu1c9oaB+RLLkfJxGcLzwwbwsqRlg3ky2bwUx14MD8=)
                          6: 7B7F4CC8839411EAAA78E971C4F9AE02.roa (hash: l8YY8+oFyyl539nf28JZzhTUkJq/jCKTmnifHGuQul8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 21:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460 (0x99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
        Validity
            Not Before: May 31 21:58:59 2024 GMT
            Not After : Jun  7 21:58:59 2024 GMT
        Subject: CN=665a4823-590a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:0e:4a:1c:a5:a8:a9:66:3e:24:69:5a:a9:
                    9d:e8:7b:27:d3:21:91:6d:50:5c:6c:82:ea:5c:e5:
                    a8:d7:fa:f3:da:81:d4:84:a3:b9:07:ec:47:ea:a2:
                    59:57:79:0a:46:9f:f2:0a:ad:d0:55:6a:58:5d:92:
                    64:7b:cb:10:61:8e:b4:3f:4d:fa:16:c1:3b:1f:b6:
                    77:3b:57:43:53:83:29:17:42:4a:7b:ca:82:e7:1c:
                    fe:9b:53:94:60:c2:71:e0:89:a9:d8:f3:75:c7:23:
                    de:68:f4:2a:fe:9f:0b:2c:ff:14:bc:0a:6c:a5:f5:
                    94:9e:82:48:43:6a:d8:34:9f:97:89:89:ad:3e:99:
                    6d:b5:a1:57:08:68:cb:9c:28:6c:60:1a:5b:c4:b7:
                    06:80:8f:6e:e8:aa:06:cc:52:09:a8:69:9a:f4:ee:
                    af:2c:b4:d3:48:ba:78:9e:47:25:3f:28:58:51:cb:
                    9f:88:1a:45:27:1a:f5:7c:20:07:a8:7b:8d:76:10:
                    a7:75:6b:fe:0b:2f:6b:de:51:0f:f4:3f:a9:de:98:
                    bf:88:e5:4b:13:18:0a:7b:b3:e2:f0:4e:e8:e7:14:
                    a6:f7:87:54:b4:7d:d2:09:1b:77:27:f5:0e:e1:59:
                    04:d4:80:c6:86:0a:a2:36:f9:7a:6d:05:55:46:a6:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:1C:BC:D2:D7:31:E4:5C:87:FD:67:12:0D:A1:E8:CB:40:34:40
            X509v3 Authority Key Identifier:
                keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:b0:d0:31:59:1c:40:f0:72:bf:14:c2:83:0e:4b:ea:cd:
         48:9a:e4:90:2b:b4:95:37:51:0f:8e:7e:06:0a:db:ca:e8:66:
         96:70:c3:c7:21:db:98:3a:0e:5d:c1:1a:8f:06:fb:c8:79:44:
         0e:f2:09:cc:4f:76:c4:1e:d6:22:6e:6d:22:df:25:b1:9a:0b:
         db:ec:0b:52:42:71:6b:78:3f:b5:01:50:0a:eb:a5:ab:ee:88:
         bf:a0:16:2c:ba:9f:89:0f:32:73:cf:3c:bb:f0:99:dd:25:10:
         55:de:99:08:9c:02:f2:62:06:62:8f:53:0b:c0:22:66:60:f8:
         19:46:7c:e8:50:23:d7:28:b7:dd:0d:2e:3f:36:d0:80:1b:dc:
         31:f0:48:24:02:20:1b:2b:69:0a:c4:c9:96:de:14:4c:df:c6:
         ad:fc:17:fa:50:aa:d5:14:8c:6a:3e:ef:c7:0c:5c:50:e4:b8:
         f7:98:5c:b8:9a:99:a0:9b:13:24:9b:74:d5:bd:44:95:d9:d2:
         3d:75:c3:82:ce:60:4e:0a:ce:26:1f:53:f6:50:69:3c:34:95:
         c7:00:ca:22:3a:47:82:dc:9a:20:88:ab:d2:a6:27:18:23:4b:
         67:04:e4:f9:7b:1d:6f:8b:f7:e8:f0:1f:0c:3d:38:9b:f5:6f:
         ef:67:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:19 2024 by rpki-client on console-ams.rpki-client.org