Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File:                     ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier:          dpM26uKftf6Me/BEdmdbGEqOgoIFuaGgoh41+1+wwxc=
Subject key identifier:   51:2B:8E:A7:06:1E:59:9E:87:F1:25:97:B5:1C:86:55:40:C0:69:16
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       0369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number:          035F
Signing time:             Fri 31 May 2024 03:29:38 +0000
Manifest this update:     Fri 31 May 2024 03:29:38 +0000
Manifest next update:     Fri 07 Jun 2024 03:29:38 +0000
Files and hashes:         1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: 220jTBvrT8755CK+XaoWZPxE5qHG9Dn2U0QYTko4EK4=)
                          2: 266A625CF25611ED95804341C4F9AE02.roa (hash: tapgQdUV2Yd542wXP2Lz7pxKBXtOXYVylkyP5cUGAuI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 03:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: May 31 03:29:38 2024 GMT
            Not After : Jun  7 03:29:38 2024 GMT
        Subject: CN=66594422-74f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:26:64:5e:bf:4c:76:11:46:ac:7d:30:0e:
                    fe:98:a4:c5:f9:55:f7:cc:64:d5:ca:c2:53:4c:f4:
                    c4:37:43:d0:a0:18:fe:60:dd:af:94:c1:c4:f7:e8:
                    d3:c4:18:38:9e:0d:e9:56:d6:1e:75:ce:42:26:7e:
                    52:8a:41:04:81:34:37:73:eb:65:2c:a9:f5:2a:0c:
                    a6:3c:ed:f4:19:ff:c9:45:b6:df:23:38:45:8c:94:
                    ab:19:58:9c:a4:28:76:6b:e2:3e:01:78:83:77:10:
                    bb:35:7c:ac:c0:ab:f1:e4:9e:4c:2d:93:1b:31:1e:
                    17:10:b5:22:27:5d:44:25:b0:12:a9:e3:12:28:62:
                    0e:30:a5:ef:2c:3d:05:4b:7d:8d:61:ca:9a:15:95:
                    0d:b6:27:2e:d2:4a:8b:34:d4:4c:ce:fc:8b:5c:42:
                    42:65:3b:99:60:d0:78:f3:78:8b:44:64:54:15:c7:
                    58:70:0a:f3:5d:0c:6a:e1:a9:9c:77:93:d8:48:1b:
                    d5:c2:1b:e0:ea:1a:19:aa:61:83:7b:7b:1b:c5:70:
                    6c:50:c0:57:9a:58:2d:99:44:25:d0:e0:36:a2:93:
                    fd:27:b0:e5:21:f6:5e:36:22:76:62:78:ef:b8:b3:
                    58:b4:a0:18:fd:43:5d:76:a9:a8:5f:2a:65:3f:cd:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2B:8E:A7:06:1E:59:9E:87:F1:25:97:B5:1C:86:55:40:C0:69:16
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:27:e9:b4:e7:3a:9f:af:8f:28:63:f7:97:49:fc:28:6e:
         6e:49:f0:d1:32:41:43:40:09:b4:49:73:5e:97:e9:d5:f4:0c:
         14:e3:86:1c:7b:54:cd:eb:c0:fc:f0:14:73:2c:0c:02:b3:87:
         4e:e2:a3:7c:59:30:03:96:81:ac:54:f3:7d:03:7f:10:15:11:
         46:9d:72:98:3a:c9:01:61:2e:84:84:bc:0a:1f:97:18:86:90:
         f3:ac:49:ef:62:f1:8b:32:da:63:a3:80:42:e5:bf:6e:8a:27:
         32:2f:e0:5b:3d:73:bc:28:17:58:54:a5:b9:3d:48:d9:ca:c1:
         f5:6d:e2:11:5a:0e:df:06:bb:89:51:6f:2f:4d:e3:c0:b1:ab:
         09:a3:43:f2:df:3e:c2:4c:91:ec:09:d5:d8:9c:9c:86:cd:f8:
         07:27:fd:7e:e6:88:85:72:5f:bc:29:27:7e:fe:f9:cf:38:82:
         c0:ef:8d:08:1f:a4:6c:e0:9f:b8:d4:7a:83:9a:74:2f:f0:02:
         bb:fe:cd:86:ba:3b:16:1b:a6:55:bc:08:57:1e:7b:4e:2c:1c:
         04:94:29:60:ef:cb:e5:88:21:38:fb:0f:57:a4:94:73:cc:02:
         b0:a4:dd:b8:0b:33:21:11:d7:04:7e:bb:c6:d8:86:fc:33:28:
         4c:16:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:53:59 2024 by rpki-client on console-fra.rpki-client.org