Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File:                     nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier:          isj6Atqg+4SRhmYQJoKOnusE/EkmKt9W412MXqSsam0=
Subject key identifier:   6A:C7:4F:5D:EA:6D:75:0D:E8:4E:4C:24:24:B9:EC:DA:FA:94:67:67
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer:       /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number:          026E
Signing time:             Sun 19 May 2024 03:45:36 +0000
Manifest this update:     Sun 19 May 2024 03:45:36 +0000
Manifest next update:     Sun 26 May 2024 03:45:36 +0000
Files and hashes:         1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: xEVEzyg2XQwVUrSkymzzVrYYmSJANoTvhDHTnY+2Peg=)
                          2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: H1TbSfb4htfB0LmY4JPuswNoz4LPXkP4zd4P9+5LYFs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
                          rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
        Validity
            Not Before: May 19 03:45:36 2024 GMT
            Not After : May 26 03:45:36 2024 GMT
        Subject: CN=664975e0-820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:c4:31:c5:92:fc:74:25:23:43:b4:05:21:
                    ed:4f:4e:a1:95:34:1a:4a:e8:d8:65:d4:4a:b6:14:
                    38:97:4d:c3:66:6a:f5:04:4c:5c:e2:2b:90:ec:5c:
                    08:55:dd:4e:66:e3:ad:20:2e:90:29:e2:37:f8:b1:
                    62:79:b1:b2:63:48:d7:c4:0c:c4:b6:8c:95:38:38:
                    68:09:c9:28:58:77:26:a5:85:ad:08:ab:19:0b:86:
                    2e:1c:e7:f3:44:f6:dc:60:68:fc:e5:cb:6d:83:c8:
                    bb:d6:9a:3f:d0:22:a8:72:d6:39:a4:fe:53:b3:ff:
                    a1:07:3f:9a:15:83:37:56:59:4a:a5:e6:8e:8f:4c:
                    df:c7:e0:f3:fd:63:d9:c4:cc:4c:1c:e4:46:1d:cc:
                    fd:d4:e9:de:11:a0:c4:4a:a4:da:ca:8e:e5:e6:b9:
                    30:ab:16:ee:1f:eb:a4:22:ad:1f:19:cf:d4:58:a5:
                    52:63:37:61:b4:eb:d5:55:e0:44:93:d8:88:b7:bc:
                    50:e8:85:e4:5a:f5:72:dd:17:0b:2d:52:91:a1:4d:
                    b2:61:6a:9d:fe:8f:ce:c6:28:80:62:19:8d:47:29:
                    8e:21:52:3d:33:a9:f4:4e:9a:b7:e4:91:e4:c5:d0:
                    bd:71:68:d7:9c:0f:f4:a7:49:b1:82:27:45:37:b1:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:4F:5D:EA:6D:75:0D:E8:4E:4C:24:24:B9:EC:DA:FA:94:67:67
            X509v3 Authority Key Identifier:
                keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ab:5f:7c:20:14:08:46:da:e8:81:ec:9b:98:71:3a:2c:11:
         d2:e9:d0:25:bd:4c:28:e1:a0:fb:2c:0e:18:4e:a6:45:b9:65:
         64:db:f7:92:1f:b5:28:13:77:a6:a5:c0:db:9c:40:c8:ad:cf:
         aa:92:92:42:e1:b0:99:4d:27:ec:08:6f:bb:c0:03:a9:74:c5:
         36:c7:3a:10:e2:c4:8c:0b:8f:4e:a5:09:ae:9c:6c:2d:ae:dc:
         dc:a0:40:54:28:8c:ae:4f:81:05:0c:82:15:09:f2:e5:61:d7:
         ae:f1:aa:a5:a8:d7:a0:11:92:93:29:da:b1:05:fd:d8:2c:76:
         06:e9:3b:f7:6d:81:59:81:55:85:fc:d5:6b:ec:14:7f:7a:75:
         ce:0d:b0:ff:40:06:fa:73:1b:b3:b2:34:8f:c4:36:70:0c:b4:
         ba:d5:f2:b9:24:f1:26:44:9c:e8:ab:c8:30:11:f9:e3:27:78:
         76:69:5a:53:ad:7e:e9:f4:0a:38:ae:80:7c:bd:4c:64:49:95:
         fe:98:52:bf:22:19:b3:fd:f3:89:97:ed:2d:ec:5a:f0:14:12:
         c2:0d:70:76:df:20:c2:cf:c1:30:ec:f7:8b:f6:18:af:06:07:
         2f:c9:a7:a3:03:b4:07:84:41:8a:f3:63:46:7a:1e:c0:55:37:
         7e:06:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org