Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
File:                     6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json)
Hash identifier:          8zTTjDaftVtfx1S4jEbjsntMRLH8pk3AiqLCJMS/SUc=
Subject key identifier:   69:2C:05:E6:2D:B9:82:5F:26:E6:5B:DC:79:19:29:2B:DA:C6:AB:CE
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Certificate issuer:       /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
Manifest number:          26
Signing time:             Sun 19 May 2024 08:30:06 +0000
Manifest this update:     Sun 19 May 2024 08:30:05 +0000
Manifest next update:     Sun 26 May 2024 08:30:05 +0000
Files and hashes:         1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: T3vggIvkzWcjHM7RMVDoGXl+Np5hvOoZtsRasoc4yp0=)
                          2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: dIUYiId8RjG/rRRcBbL4lrgGKfhPhp142Gso46BMRME=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
                          rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
        Validity
            Not Before: May 19 08:30:05 2024 GMT
            Not After : May 26 08:30:05 2024 GMT
        Subject: CN=6649b88d-47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:98:02:76:95:f8:76:b6:17:b6:87:29:16:
                    6c:31:a7:9e:a0:13:cd:ee:58:8f:a8:77:ee:0c:87:
                    3d:e3:d6:f9:75:e8:b9:03:3c:e5:ce:c8:ca:30:09:
                    7a:52:ab:7d:ec:7a:b9:d8:69:07:07:94:17:c9:14:
                    09:a6:61:3f:85:7f:00:5c:5c:8b:4b:a2:fa:6a:9d:
                    af:42:cd:f8:00:6e:4e:81:d5:82:18:c8:de:36:cb:
                    a7:d6:23:05:92:9e:85:f8:c5:cd:52:3f:dd:d3:98:
                    e8:83:e1:7e:e5:02:36:5e:21:0b:46:c4:54:e2:5d:
                    08:77:21:92:be:18:3a:71:d6:3d:d0:1d:11:9b:49:
                    a6:fe:d0:90:6b:c3:a5:87:08:46:24:65:4a:9a:a6:
                    af:79:e5:ec:13:63:a8:a4:bc:85:62:a5:86:03:09:
                    ef:1b:f5:68:56:f2:6d:c2:dc:db:16:19:2e:d0:e7:
                    84:38:91:18:53:66:41:ee:c5:c8:b0:94:cc:07:c9:
                    cb:68:1d:7d:da:67:40:85:56:35:5b:a2:14:f0:bd:
                    a5:53:2f:5e:18:02:ed:d8:4d:ae:f2:bc:e8:87:42:
                    60:ae:19:e8:0f:68:a2:5b:9a:c1:55:39:55:d1:ba:
                    5e:52:76:bf:2c:c5:a4:73:88:72:8c:51:e1:0c:2a:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:05:E6:2D:B9:82:5F:26:E6:5B:DC:79:19:29:2B:DA:C6:AB:CE
            X509v3 Authority Key Identifier:
                keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:51:f3:f7:1b:1e:39:94:56:63:9e:03:0c:60:96:d6:1b:c8:
         33:80:54:07:3b:39:d9:42:ed:16:45:b2:85:b9:1f:9b:88:fa:
         a8:61:d8:f4:3a:45:fe:fe:cc:3f:7c:90:14:01:fd:aa:a0:07:
         b3:5c:9c:73:1a:db:77:e5:b6:83:c4:d8:21:4d:1e:ad:f5:f2:
         e9:69:63:e0:81:1b:65:f7:6a:88:96:a4:31:61:9d:0d:82:a1:
         1f:d6:26:c9:08:5f:2d:4d:d9:0f:11:b0:90:4f:7b:bf:ad:79:
         ba:3f:e0:23:e6:ba:cd:53:35:5c:fd:8e:30:d6:b0:27:b0:97:
         2f:96:1f:b8:b5:85:b0:f4:74:26:e4:46:7f:60:87:d0:18:4d:
         51:4c:ad:2d:49:af:a1:ec:21:71:fb:60:c5:37:e1:43:8f:91:
         49:ac:f6:e9:c0:8e:ce:59:b0:44:c7:cd:d2:b9:44:25:21:00:
         4e:c8:20:85:d1:cc:12:a9:ed:65:15:ca:d5:29:2b:68:90:55:
         0f:af:8f:13:92:eb:35:e5:13:29:16:0c:bb:56:04:97:30:2b:
         38:c7:9b:91:2f:67:32:4a:34:5a:1b:fd:cf:21:da:04:3b:09:
         21:27:c8:a5:80:3d:01:9c:92:cb:e9:9a:95:42:58:44:72:05:
         b9:8d:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org