Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
File:                     8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json)
Hash identifier:          woExHMS4LglQMdmAwRZjVxi6+42t8crPD1Naw2as03M=
Subject key identifier:   12:3C:D8:A6:A9:7D:7A:F1:5D:06:F3:07:FA:F6:1F:F8:72:CA:B2:72
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
Manifest number:          016E
Signing time:             Fri 17 May 2024 05:03:51 +0000
Manifest this update:     Fri 17 May 2024 05:03:50 +0000
Manifest next update:     Fri 24 May 2024 05:03:50 +0000
Files and hashes:         1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: hWtUMqn/h41ox9eOlralX/k7Y1g1L1/wPrVHnHrNfGw=)
                          2: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: RRFN/7h+ZgjbsWUzSwsUYT9FZUv4xZbXsQu+3aX5MFA=)
                          3: C6537C4AAC5B11EDA8C03215C4F9AE02.roa (hash: 5vBxFMnpycwlDLPFtcSdU/UMyJ9E4X2NtB+rwKhh7hE=)
                          4: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: 2f2WOuj9RVti36OwIIpEOoxX/x8mySU8Vp1hEEUkOaY=)
                          5: 574C50C2D46111EEA07A4568C4F9AE02.roa (hash: yAg/Axjbi58irXuozneFKa6Pv1ujK2zAVJ31mXGoztk=)
                          6: A2B5487CD45F11EEAAFF7048C4F9AE02.roa (hash: XBA3WXeLjsi+UEfhTxd9PG2HHdAEDmE90S1tqLTM9xc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: May 17 05:03:50 2024 GMT
            Not After : May 24 05:03:50 2024 GMT
        Subject: CN=6646e537-1311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:33:69:8b:99:bf:20:3c:73:e5:aa:5e:cd:
                    1f:29:d3:8f:b3:5a:44:8e:3b:6e:1a:52:a5:75:de:
                    22:37:db:47:83:83:db:a9:2e:fe:72:f7:3e:d2:8c:
                    ff:45:6c:ee:98:64:5d:54:f2:76:43:fa:41:84:cd:
                    ff:07:eb:3d:07:88:7e:ad:66:35:37:fe:08:b9:d9:
                    5f:73:a4:9e:21:5e:65:96:3e:66:be:71:01:e1:65:
                    1b:6f:80:a4:78:4e:2e:b7:c5:c9:bb:55:d0:fc:7a:
                    25:9d:51:2e:9f:9d:ad:38:e6:14:33:2e:23:f0:a5:
                    bb:fa:6f:c9:90:f8:04:53:0c:41:47:8c:f4:43:b5:
                    03:41:76:fa:03:7e:57:f5:68:09:de:53:93:98:ad:
                    af:07:f2:18:fa:3c:a1:ce:9a:c8:37:d9:2e:70:10:
                    2b:94:78:71:60:1e:1f:3d:ab:ac:a5:01:56:28:fc:
                    61:96:8f:36:04:c0:c8:76:e9:80:69:7e:ee:ce:cb:
                    09:c4:9e:1c:c4:ad:b5:e3:93:3e:1f:c9:d9:e1:ac:
                    ca:8a:d6:aa:2f:42:78:15:78:8d:b9:e8:ae:d0:cd:
                    0a:21:85:35:34:31:9a:15:4c:97:7f:ca:6b:7c:6b:
                    64:e2:d3:12:f9:18:2d:45:c7:2d:a8:06:38:df:a0:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3C:D8:A6:A9:7D:7A:F1:5D:06:F3:07:FA:F6:1F:F8:72:CA:B2:72
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c2:a4:31:e0:72:bb:4a:45:b3:83:86:87:5d:e3:b3:0d:28:
         16:66:fe:26:d2:55:99:50:22:7b:67:6d:75:c9:ea:9c:e5:11:
         ae:e7:79:0a:78:6f:bc:cf:09:25:17:8e:1a:20:a9:eb:84:63:
         2f:c9:cc:34:5c:6c:48:4a:48:82:6a:22:0e:49:7a:ff:62:ce:
         ad:8f:bc:71:2f:ba:85:a1:e5:6d:61:49:f1:c5:59:31:5b:18:
         6a:45:dd:a1:62:a4:dc:0a:11:53:e9:08:23:79:56:4c:92:e0:
         c2:95:07:12:7c:83:e8:b8:7b:20:9f:e9:90:4d:99:f7:83:3f:
         d5:c9:e5:9c:69:f4:7e:fe:ab:d3:a5:cb:04:64:74:c6:86:36:
         54:b4:95:a8:4b:f7:ae:6e:6c:38:67:30:c5:3b:f8:e4:c6:73:
         64:b1:d4:ea:d6:b1:55:5a:a2:d3:b1:fd:ab:2c:e5:d0:cd:f0:
         2e:4e:57:00:1a:4d:e1:c3:2d:89:53:85:76:e7:8a:41:76:d4:
         23:5b:6e:ec:50:2e:63:24:a8:cb:d1:22:28:f8:a4:d7:b7:7c:
         a9:3c:d3:36:97:d9:cf:0e:bc:fa:71:a2:5a:e2:c8:ea:a5:31:
         2a:05:16:d0:95:69:8d:cd:c5:77:b1:65:bb:9a:5e:9c:fd:a4:
         69:d8:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:25 2024 by rpki-client on console-ams.rpki-client.org