Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File:                     xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier:          WG523JaAtypybVGTqBPR/nSLWbUSgPHofPJtGVku36w=
Subject key identifier:   4F:56:03:D4:85:C4:FD:A0:35:41:D9:BD:A8:D3:4D:30:A0:82:33:3C
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number:          071C
Signing time:             Thu 30 May 2024 23:03:49 +0000
Manifest this update:     Thu 30 May 2024 23:03:48 +0000
Manifest next update:     Thu 06 Jun 2024 23:03:48 +0000
Files and hashes:         1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: nHW1SKJrqV8Xnf93bZ46MPKQisCuAinTFIKqXxh2G+0=)
                          2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: brPu6LMewuIfxHrXmRE8x19Fml8l4eLFZ7G6TE2HhMQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 22:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: May 30 23:03:48 2024 GMT
            Not After : Jun  6 23:03:48 2024 GMT
        Subject: CN=665905d5-1394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:53:e0:a2:98:78:1d:34:11:92:bf:21:5d:
                    2b:0d:08:9d:3c:d9:5a:84:1b:53:cf:e5:c6:a2:e8:
                    97:e4:93:d2:4c:2b:57:f3:95:58:d0:9c:50:bb:b1:
                    1c:8d:71:02:44:7f:46:1a:1f:bb:49:71:f5:fe:29:
                    f0:25:5d:81:ab:14:07:a5:a6:45:47:80:d4:b1:3a:
                    3f:4e:67:41:a0:36:42:65:e8:11:79:32:c8:77:a7:
                    e4:a4:8b:0f:ec:98:91:f6:e1:a8:9e:f8:68:f3:f3:
                    e6:bd:3a:5b:57:f7:4c:ba:16:a7:1b:ad:99:8c:81:
                    61:2d:a7:b9:f6:0b:d6:d5:27:33:52:22:26:74:a9:
                    90:cb:08:a0:12:61:96:52:0a:cf:d9:f1:79:0e:12:
                    e9:77:59:67:7f:4d:62:aa:be:48:d9:72:6b:e9:72:
                    45:a1:40:aa:fa:9b:cb:4b:65:1c:65:cb:b5:13:c8:
                    08:d0:83:5b:4b:d9:08:69:8e:a5:a4:11:92:77:20:
                    e3:50:a6:e6:09:81:ca:43:12:c3:b8:cd:a6:8c:bf:
                    3e:98:cc:37:b8:4a:e2:99:63:69:83:0b:57:ee:48:
                    52:e0:3b:70:d4:44:21:4c:7b:9c:b6:bc:3e:ed:a0:
                    47:a8:d6:20:50:e2:7e:71:07:1f:c2:a1:20:e6:fb:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:56:03:D4:85:C4:FD:A0:35:41:D9:BD:A8:D3:4D:30:A0:82:33:3C
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:17:dc:dd:fa:d1:1f:1d:6b:57:22:f2:67:be:a6:54:83:
         84:cd:c3:04:3f:0b:36:75:f0:f6:c7:a1:6c:6e:39:52:2a:f8:
         ea:26:ea:cb:7c:bb:23:fd:a9:e9:65:33:96:fa:92:a7:2d:1a:
         33:5c:07:c5:d3:22:f9:4a:dd:d5:4e:af:7a:6d:67:5f:71:09:
         f4:71:8d:83:06:83:41:7f:ce:79:d9:b9:6b:01:2b:c5:54:72:
         a3:3a:cd:5f:09:56:d0:2c:a3:ce:3d:cb:a5:50:5b:b4:b7:6e:
         95:79:36:c2:1b:cc:92:1c:fb:20:61:3b:d5:7d:24:17:80:74:
         0f:fc:f9:38:73:d0:42:d1:3f:97:35:59:33:ab:b7:47:1d:12:
         c6:1f:4e:f3:d8:e1:6f:7c:e8:6b:cc:7a:14:99:db:fb:e6:dc:
         ce:81:0c:2e:89:18:42:01:da:a5:05:3f:1d:d1:4c:51:6b:00:
         a6:6a:a5:f3:4b:1e:36:68:69:d1:6c:7c:66:1a:85:64:9f:1c:
         65:98:43:06:4e:89:3d:70:c3:a0:db:da:8c:6e:4a:ec:e2:9f:
         23:18:68:a4:8b:42:d7:d5:8f:90:82:be:ed:75:b1:91:61:ca:
         84:f5:f1:f1:31:a0:0a:c0:d4:11:71:d3:75:81:35:2a:c1:57:
         35:0e:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 00:28:34 2024 by rpki-client on console-ams.rpki-client.org