Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          1jWGmyQPnWos77oLqOUM4nYcyL1vpejEr4O2lOIpQV0=
Subject key identifier:   13:DC:A7:02:7C:8D:D3:22:A0:7E:93:7E:94:36:62:27:35:8E:17:66
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       048A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          0487
Signing time:             Sun 19 May 2024 01:38:15 +0000
Manifest this update:     Sun 19 May 2024 01:38:14 +0000
Manifest next update:     Sun 26 May 2024 01:38:14 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: 9+LDxT+IGvzNmj7XN3TQ8fQDT61VA4KO5K5rksInzoM=)
                          2: 97C000E2F04B11EB86639633C4F9AE02.roa (hash: PkjqH3EJAjQOc/tjlzvvU5oaDFQLw6bHlCx1WKPqyPE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: May 19 01:38:14 2024 GMT
            Not After : May 26 01:38:14 2024 GMT
        Subject: CN=66495806-f79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:ed:13:ad:be:c1:b0:08:cd:f8:4c:d9:b6:
                    cd:84:93:65:24:37:2f:b8:2e:34:03:f9:ae:3f:ed:
                    e7:51:6f:09:64:5c:06:b9:7d:b9:fa:a7:26:0b:a0:
                    65:cd:ea:d0:d3:de:21:d2:0f:f0:8a:18:dd:eb:17:
                    bc:19:52:22:4b:b2:f4:d4:e1:16:00:6a:4e:8b:86:
                    aa:3c:8a:37:0b:24:29:b0:61:a9:7f:cc:34:ae:f4:
                    d0:2a:3a:06:c7:ca:04:7a:0b:5b:7f:63:af:ab:4b:
                    08:0d:49:4a:c3:6b:d3:5b:ef:5b:39:33:46:93:56:
                    e7:b2:dc:06:3b:80:bf:fa:d0:a5:ee:6f:a1:32:8e:
                    37:e4:15:8c:e8:c9:12:cd:10:7b:0c:82:95:8c:1b:
                    8f:42:e2:d9:93:1a:3b:32:c6:5c:ec:a2:8d:94:8f:
                    e8:3a:25:84:69:67:cf:92:e5:2f:df:23:6d:6e:ba:
                    b9:30:8a:78:b4:24:63:b7:74:41:bf:1a:fb:15:6f:
                    15:2c:e5:e5:b2:8e:49:bc:91:15:59:66:1f:f0:dd:
                    eb:f9:cf:6e:50:b0:ae:17:ef:ac:dd:ed:2b:09:c8:
                    01:66:52:3b:b4:11:ec:ce:7b:73:9d:4f:8c:26:8f:
                    49:de:7d:81:f6:bf:d4:58:e2:e6:bb:04:db:62:45:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:A7:02:7C:8D:D3:22:A0:7E:93:7E:94:36:62:27:35:8E:17:66
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:43:28:3a:10:51:89:8a:0c:bd:18:6e:29:2e:47:c7:e2:b3:
         96:7b:b0:83:91:3f:59:80:15:fb:be:eb:2c:ad:44:ce:3c:b0:
         f8:0e:14:a2:22:0c:91:8e:53:b9:cd:43:c3:53:fc:85:3c:99:
         1e:b8:b3:62:4f:98:4e:f6:93:7c:36:17:a6:07:21:47:d6:c7:
         ab:27:72:6e:40:bf:9e:57:76:2b:65:53:72:6c:04:fc:ea:65:
         e6:21:35:04:14:6d:b9:4b:34:7d:77:0d:f5:6b:61:1e:50:a9:
         6f:5c:85:2c:29:00:a8:50:2d:04:2e:49:29:01:b8:ba:1e:9a:
         17:38:14:af:e0:b2:9b:0b:2f:78:8e:20:55:31:2d:ac:e4:55:
         02:a8:f7:df:9b:09:3d:c2:a7:b8:7b:45:0f:c4:1a:fb:1c:ad:
         89:f8:26:cd:e3:34:f8:a3:90:36:46:72:7a:59:5a:10:3c:42:
         bf:9f:38:5b:e0:1d:ad:f3:a8:55:5c:89:44:12:3c:84:ec:c7:
         d9:43:18:a1:0b:64:0c:95:27:86:e2:b6:6b:43:ee:f9:93:9b:
         e2:3d:a3:d5:17:27:60:83:5f:4a:d8:03:f3:ad:3b:61:ae:08:
         07:a1:73:1d:0c:26:91:db:77:52:42:af:49:7d:28:0f:97:02:
         7d:2b:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org