Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
File:                     bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json)
Hash identifier:          IS92f3Mdj7aM05zGRgxDCYJPQ14fiqsiDgCkoTS3l84=
Subject key identifier:   92:5A:DC:3E:33:5B:E0:D4:16:7C:8A:F2:61:68:7F:BA:87:26:6B:12
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1881
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
Manifest number:          1841
Signing time:             Sat 18 May 2024 16:57:33 +0000
Manifest this update:     Sat 18 May 2024 16:57:33 +0000
Manifest next update:     Sat 25 May 2024 16:57:33 +0000
Files and hashes:         1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: jyTorxSObu3E8E7Mu6tTIP63nnHD1R4+CY5P6i/7s0g=)
                          2: 940E9F524A6B11EB9F7A5259C4F9AE02.roa (hash: HHIzfaN5gddvkdmtj1HC2p56AjA+gsdm+1kyaI8JOZw=)
                          3: 937E212A4A6B11EB9F7A5259C4F9AE02.roa (hash: 9DQB9DuKSoqxgZJJOr90gzu1VlQR9WIAGcGAAQ4Ws4k=)
                          4: E611E95E6B9E11EB87785D16C4F9AE02.roa (hash: QCmoFg3FDxBzzbonXwQBplZ5NT6duyhP6XqwmXC0rGo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6273 (0x1881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: May 18 16:57:33 2024 GMT
            Not After : May 25 16:57:33 2024 GMT
        Subject: CN=6648ddfd-0109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:76:46:70:2c:92:c9:ce:37:f3:c2:97:11:
                    99:3c:89:fb:4e:dd:8c:fb:57:f3:7f:24:cd:2e:20:
                    e3:fb:69:25:ab:e2:d3:bd:46:f6:3c:d3:bf:cc:d5:
                    3e:a2:79:43:a6:ea:6a:be:61:11:15:2c:b2:c5:e7:
                    be:fc:0d:43:e6:da:4a:b4:93:01:58:e8:91:2c:e0:
                    46:91:9b:ed:be:9c:f0:21:5c:dd:0d:e1:10:ec:75:
                    2d:33:5f:b4:66:f4:cc:b9:cf:f6:eb:16:da:41:9c:
                    fd:9b:fa:e4:4a:d5:0a:d1:ff:12:70:60:f1:0e:a0:
                    a9:8d:bf:2c:4f:61:db:62:1e:84:92:e5:a4:28:a8:
                    c9:97:16:be:cc:3c:1d:04:e7:56:3c:da:cf:e9:ff:
                    2d:02:37:fe:21:0d:44:fc:bd:94:30:91:80:49:1c:
                    e1:7a:14:65:4d:db:2a:b2:17:e9:fb:39:59:18:9c:
                    e9:cd:c6:ba:05:4e:c2:9d:98:cd:b5:65:cf:cf:85:
                    c6:05:b6:a5:b8:1f:ce:2c:96:cd:c4:d8:33:7d:6e:
                    18:e8:50:8c:d2:da:92:73:de:6b:9e:03:b7:eb:a0:
                    97:07:0e:76:4a:84:8e:91:7a:05:da:f6:f5:fb:24:
                    ba:67:00:91:0a:0c:7b:e5:7b:17:f9:87:e5:dc:5a:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5A:DC:3E:33:5B:E0:D4:16:7C:8A:F2:61:68:7F:BA:87:26:6B:12
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:d1:59:e2:b6:9c:96:76:e9:7a:d0:d7:dc:e7:65:ee:9c:
         57:8e:c7:61:5a:97:83:ef:82:74:db:53:49:42:8d:0b:d1:54:
         da:1f:10:6a:e7:14:e0:46:66:95:ed:b8:18:e3:6a:d5:52:ec:
         3e:d6:53:a7:d5:81:fa:c4:c0:17:0d:40:1f:46:8c:ce:bc:af:
         9d:c6:07:c8:97:36:ef:40:e8:16:1c:49:7c:75:1c:5c:ac:c5:
         3e:ae:79:ec:fa:a9:36:f7:f6:f5:a5:48:04:be:bf:00:c6:c9:
         df:5e:22:49:4b:f7:fa:c9:81:fd:a3:91:42:31:29:34:33:ee:
         e0:f6:0a:11:87:70:1f:5d:0f:b9:9d:9b:92:de:51:33:82:b4:
         17:8d:9e:a5:7b:3e:08:74:4a:24:5c:b4:cc:51:cd:2a:33:27:
         eb:c8:26:25:a9:18:37:ea:21:47:ee:a6:5f:f5:d8:41:9f:9d:
         54:1f:f6:d7:08:2a:fb:f7:0c:6e:e1:be:50:cf:c2:5a:b1:12:
         6d:9b:79:81:6b:e7:39:c1:d2:52:88:f0:41:83:66:b5:14:56:
         2b:38:38:e9:bc:80:0e:ac:e7:11:9a:44:c1:ac:74:4a:81:70:
         e4:21:80:5c:a9:01:a1:d8:ac:57:b4:67:c8:d4:46:b3:57:f9:
         75:58:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org