Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
File:                     f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json)
Hash identifier:          /zY9eCmRYfnFlUQMdnrTVlJmUiJfbTYxXraag4vwEcA=
Subject key identifier:   0F:2C:80:9C:2B:0F:80:14:50:D1:9E:C1:EE:A5:CF:C6:83:DB:B1:66
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
Manifest number:          6B
Signing time:             Sun 19 May 2024 07:31:59 +0000
Manifest this update:     Sun 19 May 2024 07:31:58 +0000
Manifest next update:     Sun 26 May 2024 07:31:58 +0000
Files and hashes:         1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: UsXJ5M6umh0edJ7zrIySuJiDCc/1ZJUBtP2j7ETjMIA=)
                          2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: vsKfFCQHXUJoMCmvwJp4+1zKcYj11D7GJ21Jh4nT+4I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: May 19 07:31:58 2024 GMT
            Not After : May 26 07:31:58 2024 GMT
        Subject: CN=6649aaef-24a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:09:71:73:3d:5b:05:d6:73:30:74:bc:17:3f:
                    43:e7:93:ea:3d:4b:97:9d:ea:b6:e9:36:32:cb:3a:
                    07:a1:e7:c8:d1:b5:c0:8b:71:c2:62:5f:86:10:ec:
                    75:4d:5e:e4:bc:b5:3a:32:15:1c:4e:a2:c6:ad:ed:
                    43:6b:c7:bf:b8:09:26:ff:cd:57:44:dd:35:41:82:
                    a5:83:16:e1:3a:84:9d:c1:f1:a8:d2:cc:40:23:49:
                    9f:30:36:a8:8e:01:b3:f6:d9:75:25:ed:5e:62:aa:
                    e6:dd:14:17:bb:32:7e:5a:b4:7e:80:0d:b4:87:81:
                    a0:2f:b9:40:d5:11:fa:7f:38:cf:99:ad:dc:0e:41:
                    8b:5e:15:81:8a:38:75:cf:58:14:e0:c1:a8:6c:74:
                    3f:eb:dd:56:89:41:b7:80:53:74:8b:4d:c6:ba:80:
                    7e:79:f3:10:96:f2:3e:2f:6a:92:4c:f3:c7:8c:49:
                    ff:a6:b5:8b:15:ff:ad:52:66:8f:a1:e5:97:ce:0f:
                    92:a9:c1:5e:36:2d:78:67:26:13:a4:5f:14:f6:f6:
                    4a:94:7b:6f:05:5e:73:ca:b8:2d:1f:55:a9:51:10:
                    0e:44:cb:f1:b4:14:c6:42:32:40:e8:e4:57:ff:e2:
                    79:1d:20:f5:9d:16:3a:56:26:0f:5d:3b:a5:9c:d4:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:80:9C:2B:0F:80:14:50:D1:9E:C1:EE:A5:CF:C6:83:DB:B1:66
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:e1:28:e3:a3:09:61:4e:de:b1:ed:24:3b:88:0e:a7:31:
         cd:5e:03:07:9b:be:72:ff:01:c3:e5:b5:4a:c9:2b:bd:59:9f:
         63:2e:19:06:61:dc:b9:ec:d8:36:b8:ce:90:5b:c0:2f:40:87:
         04:7d:41:4f:02:09:30:dc:69:3d:00:33:64:00:69:bc:be:09:
         f3:df:7d:07:47:9b:ff:95:49:43:7e:8f:4e:ec:0c:cc:b2:b6:
         49:8b:fa:db:75:ef:29:37:11:cd:84:5d:66:0f:12:df:22:0f:
         e4:fa:53:82:71:fe:d5:f3:93:14:e4:38:cf:c2:a2:c3:4a:c9:
         3d:28:77:ab:02:be:c4:8f:9e:f8:76:d8:5f:6b:42:6e:45:93:
         ed:39:9f:19:80:bb:e2:88:12:24:91:5f:62:55:f3:1a:00:b5:
         2e:7b:6f:3c:e0:f9:1f:b9:81:6a:bd:32:ca:7f:62:a9:7d:74:
         d1:d1:5e:a0:d9:3a:18:02:cd:b7:17:06:d7:94:53:3b:df:32:
         84:51:00:28:ac:aa:df:52:63:76:f0:d7:25:e8:28:bc:f7:b3:
         1d:a3:58:e0:47:e9:b7:9b:54:11:6d:1d:44:39:05:ea:0d:09:
         e4:6e:07:37:87:af:30:1c:e6:b3:ce:ca:47:b1:3d:08:6a:e8:
         77:52:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org