Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File:                     qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier:          KvQjIVZ+OC8uolbmYNZVxFDnkcJfjJkLqSVb3JYuuOo=
Subject key identifier:   1A:19:24:6E:DA:4F:78:31:0A:68:7A:A4:F7:1C:72:D2:5A:14:0E:1C
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer:       /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial:       06D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number:          06AC
Signing time:             Sat 18 May 2024 23:27:11 +0000
Manifest this update:     Sat 18 May 2024 23:27:10 +0000
Manifest next update:     Sat 25 May 2024 23:27:10 +0000
Files and hashes:         1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: Evf5d33Cy7RcViz6fLnVNVeNVorh+3DL3mjz1nensNc=)
                          2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: 1+DFz3Ohl+K4Krz+OlUwDG7GSgikxyNy5V+bghBruP8=)
                          3: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (hash: t3kiYS7RBKX8pOw6LazGRwO8YQiJHUwwNHhDc8Cb27I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
                          rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
        Validity
            Not Before: May 18 23:27:10 2024 GMT
            Not After : May 25 23:27:10 2024 GMT
        Subject: CN=6649394e-70a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:17:8d:b5:c7:19:89:50:e8:fc:c6:cd:f9:
                    e6:05:a0:2f:0b:4b:0f:fb:1c:cc:51:e4:91:eb:04:
                    6a:c4:53:02:d3:f9:c7:de:dc:65:0d:15:0c:52:6e:
                    43:f2:ed:93:6d:fa:a4:c9:06:33:94:b4:be:64:29:
                    b7:9a:ca:b9:1e:5a:e0:ca:43:77:be:0a:d1:ea:c1:
                    ff:f6:38:b1:e9:c4:82:15:e0:54:2e:48:5b:9b:12:
                    a1:cc:2a:17:ed:dc:c3:39:93:93:ca:4b:24:42:21:
                    b9:c1:00:f4:57:39:0a:b3:fa:05:20:90:dd:cb:ea:
                    35:20:e3:38:b7:38:e5:25:bf:9e:b5:41:41:d8:08:
                    a1:66:06:87:c3:88:b2:9f:02:3b:0b:e6:a8:05:f8:
                    05:f8:3e:61:1b:d8:c5:83:60:a7:8e:00:f2:1c:b1:
                    0f:5a:1d:59:65:32:a2:e2:7c:87:1b:12:26:1f:1a:
                    51:bb:8f:2e:81:ee:d8:30:54:09:2f:b4:5d:05:3d:
                    18:5d:fd:4c:0d:66:ac:73:d3:c0:21:31:57:58:f1:
                    82:1a:58:62:14:62:46:9b:ba:e3:0b:64:e7:9c:07:
                    9e:8c:8c:df:6b:2c:85:7c:da:49:0c:4d:fb:87:b8:
                    56:af:eb:9a:f3:5f:ad:37:29:49:b8:a6:85:d4:80:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:24:6E:DA:4F:78:31:0A:68:7A:A4:F7:1C:72:D2:5A:14:0E:1C
            X509v3 Authority Key Identifier:
                keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:6b:b9:ac:d6:66:48:a6:08:50:9b:1b:83:62:fa:5f:87:bd:
         7a:bf:88:69:0d:d6:81:70:ad:de:55:35:44:e2:b6:6f:b0:a3:
         ce:8d:cb:2c:14:f5:db:d6:2a:f0:06:cd:ee:ad:ca:96:9f:1d:
         2f:41:95:be:a6:c4:e9:ea:78:57:82:6a:e8:d0:ef:d3:4a:6f:
         ec:fd:88:d6:fa:6a:e2:88:f6:ea:e1:c2:f4:c6:cb:93:ae:40:
         e7:76:c1:03:6c:e0:66:a9:ac:14:2d:2a:31:e5:d7:af:59:2d:
         07:9b:69:fb:e1:59:a9:0a:3b:8f:15:1a:a7:ee:04:e6:d8:b5:
         bd:9f:11:d7:26:ef:e7:45:c3:07:f9:15:19:2f:09:c0:23:6b:
         f0:2c:e6:64:c9:6c:22:c6:9b:f7:b1:d2:78:4c:7c:7b:36:e7:
         a5:67:54:c6:00:ee:e9:3c:57:74:b4:68:e5:93:bd:d9:6b:6b:
         5f:9f:47:b3:18:1e:80:fe:c3:c6:30:3b:b6:8f:80:2b:79:f0:
         4d:40:c9:a4:d9:a7:a7:be:35:f7:18:ae:0e:34:4f:75:fd:80:
         c4:b0:a9:0d:7e:5f:95:82:ca:67:e0:af:2b:2e:e7:99:48:91:
         45:e0:7f:cf:cd:00:87:df:12:2c:ea:67:d7:30:9f:e3:7a:64:
         27:cb:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org