Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File:                     K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier:          fyPrDMB5Xxmyd66nYOt8ukOEaGQouQXthHPYbz07/HY=
Subject key identifier:   D7:2A:B4:BB:26:C4:50:33:D3:07:71:55:A2:E2:04:81:7D:D4:8B:D9
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer:       /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial:       03A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number:          03A3
Signing time:             Sun 19 May 2024 02:32:56 +0000
Manifest this update:     Sun 19 May 2024 02:32:55 +0000
Manifest next update:     Sun 26 May 2024 02:32:55 +0000
Files and hashes:         1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: cVZ++A6OmTUUhFoh1QxrAh6qVa4dSG5HUfmlP8nzMA0=)
                          2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: AKgYP14OAlRk/lcaz4LVDHsyIfRAFrNi3p9qKvKafh4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
                          rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
        Validity
            Not Before: May 19 02:32:55 2024 GMT
            Not After : May 26 02:32:55 2024 GMT
        Subject: CN=664964d8-2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:79:af:d3:94:2e:c7:2d:e4:b2:54:c4:d9:
                    e4:66:f2:90:71:e2:a9:14:7b:0b:a1:99:6a:00:4e:
                    5b:eb:2c:51:91:66:84:ea:23:c9:41:fc:3a:82:e9:
                    14:fe:43:21:4f:f6:db:aa:e1:e5:a2:7f:08:8f:30:
                    60:26:a4:39:61:fd:bc:90:37:2d:8d:70:b8:9b:e9:
                    82:a6:cd:ea:d2:05:13:c5:a1:63:12:78:54:5f:29:
                    bd:c9:e2:1c:48:2d:77:36:93:23:2c:e4:34:51:d6:
                    a2:2b:66:53:cc:e2:ad:c0:10:5f:7c:0e:c4:80:be:
                    00:86:b9:19:f2:20:e2:f4:23:fb:c2:8b:62:e7:45:
                    27:81:26:b4:43:a4:5d:b8:ee:8f:5d:a4:a1:64:bf:
                    7f:20:ac:94:3a:7d:1d:13:2f:ec:43:8c:d0:fa:6f:
                    df:ab:64:af:be:3f:38:50:ad:0b:b7:75:6a:c6:e7:
                    14:6f:9f:13:d3:b3:d3:90:4a:f1:bc:f6:24:c7:bd:
                    1a:17:73:17:5e:47:a4:98:74:c6:59:9a:0e:69:01:
                    45:a7:85:3d:32:dd:63:9e:9b:7d:1e:e7:31:b8:16:
                    79:69:65:dc:d5:1f:69:7a:2b:4f:a1:ac:e2:14:9f:
                    09:e4:1d:5b:35:31:d6:47:e6:26:f4:6a:a1:1b:d3:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2A:B4:BB:26:C4:50:33:D3:07:71:55:A2:E2:04:81:7D:D4:8B:D9
            X509v3 Authority Key Identifier:
                keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:c7:28:8c:37:82:ef:8c:8c:4a:61:58:87:09:b7:42:00:
         4d:cc:d6:22:9a:64:74:78:a4:c9:8c:f9:ef:1e:37:cc:47:53:
         b3:43:87:7b:66:da:cd:6a:24:47:31:df:3e:b4:ba:0d:80:71:
         5c:9e:9f:be:e6:9f:4b:2c:b3:ed:6a:66:19:2e:43:90:bc:88:
         15:89:4f:85:95:75:33:f0:8a:c9:69:bd:19:3f:47:15:87:d9:
         78:09:7a:17:a3:dd:c0:1d:31:39:e0:4e:4a:86:16:00:9f:ed:
         a2:0e:a3:0c:33:6c:60:2d:7b:2e:75:45:24:02:ce:42:9f:23:
         4b:cb:71:3e:66:d9:c0:42:ae:88:37:50:26:82:64:4b:44:75:
         2a:e0:0f:8f:f9:ea:46:ca:02:70:b5:7f:53:1a:82:e6:b2:d6:
         5c:1f:d4:e7:11:b4:ab:19:93:a7:c9:a0:3e:d6:cc:19:e9:ed:
         10:dd:14:c8:03:1d:ab:9b:94:cc:2c:1f:5c:2d:bd:af:b3:27:
         bc:ad:6e:37:24:18:83:2f:55:04:61:e1:fc:80:1c:0b:30:cd:
         a1:45:91:53:37:8a:49:2d:65:bc:62:cc:5a:dd:4b:02:0c:70:
         74:82:53:0a:53:01:60:9d:f0:1c:fc:67:5d:37:78:c6:7a:8f:
         e6:41:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org