Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          B6sueMkZZ9uR4eWLDo59t9ZaHYBlI7DKuaVLj/E9Dr4=
Subject key identifier:   73:F5:9E:24:8B:8C:EA:17:26:28:3D:EF:52:B6:0B:84:68:91:58:95
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       0409
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          03F4
Signing time:             Mon 27 May 2024 02:26:18 +0000
Manifest this update:     Mon 27 May 2024 02:26:18 +0000
Manifest next update:     Mon 03 Jun 2024 02:26:18 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: nz5SVu1MSiUvwiDD43TR1t4IM4PS4YOPwCoCMvPxt3I=)
                          2: B1608652B6AB11ED9B637F15C4F9AE02.roa (hash: 1QyreGUDSJNDW4IGFxCFaKNbROA9INl5OEJ3BzRtqpE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 00:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: May 27 02:26:18 2024 GMT
            Not After : Jun  3 02:26:18 2024 GMT
        Subject: CN=6653ef4a-52f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:91:55:05:31:08:0a:a2:64:fc:9c:82:3b:
                    77:93:88:98:e9:e6:77:11:5b:a0:21:3d:a9:6f:5a:
                    19:dc:13:a1:e0:20:90:3a:83:5a:11:5a:af:de:a1:
                    06:f6:45:ac:64:80:6f:ef:92:a0:99:95:b6:1d:51:
                    8f:18:be:a5:21:88:f9:f9:6b:86:aa:6a:06:01:68:
                    39:a5:bb:d8:26:73:1f:4d:e4:10:e6:e4:40:7d:2d:
                    e8:0e:3a:e4:bf:ac:a4:ce:3a:e9:da:06:ef:ef:12:
                    d0:15:7a:ef:b8:a4:4b:79:af:12:a1:cc:eb:d6:14:
                    d5:62:d6:a1:4d:f8:7b:17:87:98:6f:1c:3e:f3:fc:
                    db:7e:66:04:f7:ba:dd:35:ea:98:0b:81:82:e2:a0:
                    6a:8d:c5:40:d5:37:1f:92:86:3a:d8:d4:2d:71:6e:
                    b5:0d:8d:e9:a3:56:41:e7:2f:0d:c6:89:b4:ef:7b:
                    08:8f:a9:f1:cc:10:eb:80:7b:bd:4b:44:33:d8:22:
                    0d:ac:9d:7a:da:3a:94:2c:f0:04:aa:65:ce:fb:9c:
                    2d:0c:d0:a9:9f:52:bd:47:48:f6:0b:5c:d3:37:45:
                    7a:70:96:e3:cc:0c:db:a9:f1:df:f9:9b:a0:cc:1d:
                    e8:ff:fb:1d:f6:6b:77:9a:35:d0:f1:79:bc:3e:da:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:9E:24:8B:8C:EA:17:26:28:3D:EF:52:B6:0B:84:68:91:58:95
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:b2:91:a5:98:d3:f0:18:8f:57:7d:cf:bf:dc:27:8f:0b:
         1e:43:a7:12:84:13:e2:38:d9:92:c9:07:1b:03:7d:17:1f:26:
         6a:ae:f1:35:d3:e0:26:b5:1d:f0:43:80:e2:92:8b:ce:8e:25:
         01:5a:f0:72:02:db:20:b1:e7:f1:63:1e:82:20:44:08:e1:4c:
         a2:b9:85:dc:8d:5e:f9:58:01:38:1f:8d:a2:ff:d7:cf:51:66:
         ca:57:03:23:8e:61:4c:0e:28:c0:8a:af:7f:f7:88:4e:72:70:
         43:86:51:05:f4:9b:4e:f6:ce:60:91:18:e7:dd:2e:8b:62:97:
         ed:98:43:1b:93:bf:e9:d9:e6:12:37:fd:f9:a9:e5:f5:a8:99:
         7c:97:a2:ea:a4:27:37:23:90:a3:52:9c:01:08:fd:3c:53:65:
         28:ee:f3:f5:85:d6:db:9e:a2:ed:62:fb:5d:60:4e:e3:a4:40:
         35:d3:3c:8c:58:7f:04:f2:1c:fd:31:7b:7a:35:08:7b:f1:6b:
         b6:ed:61:b6:fd:61:c5:c9:ad:58:05:10:9b:96:be:13:fe:cf:
         7e:f0:44:20:ff:50:21:d3:cd:16:5b:a2:bc:88:d1:22:25:1d:
         e6:cf:5d:42:f3:21:3b:29:9f:6c:87:f7:a6:39:32:2a:40:76:
         97:b3:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:57:04 2024 by rpki-client on console-fra.rpki-client.org