Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.mft (raw, json)
Hash identifier:          +O1ixI0kAhzrFZKx7j2HOHk8qs8gAd/UzC+rQ25lfxM=
Subject key identifier:   AC:87:7E:93:5D:84:98:5D:8A:89:6F:23:77:EA:63:B7:F4:40:12:ED
Authority key identifier: E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Certificate issuer:       /CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
Certificate serial:       0987
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
Manifest number:          0980
Signing time:             Sat 18 May 2024 20:57:32 +0000
Manifest this update:     Sat 18 May 2024 20:57:32 +0000
Manifest next update:     Sat 25 May 2024 20:57:32 +0000
Files and hashes:         1: 6Shcog-fi_-sepc7SeB-zEJbURg.crl (hash: RQak5jTbDsaIOCLSYOcpaoTbLAWypM91+mVnCUHhc6s=)
                          2: 04DFAB682F3011EDBFC72D3FC4F9AE02.roa (hash: MKpHpl12+KRJL9APotxScBEd7IoRXU0Ji1Gq4Zm1D+4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Validity
            Not Before: May 18 20:57:32 2024 GMT
            Not After : May 25 20:57:32 2024 GMT
        Subject: CN=6649163c-3449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:84:04:75:9d:7e:2d:84:66:c4:77:eb:f4:
                    cb:45:f3:76:57:e7:42:74:20:a6:70:8c:99:50:48:
                    f7:e5:82:0a:01:08:5e:4b:68:15:74:35:20:d9:67:
                    7b:a1:35:7d:ce:28:54:ac:39:79:65:d4:fc:12:eb:
                    4c:00:a4:8e:b5:2d:bd:ca:98:c8:4c:9e:69:a3:f6:
                    d6:09:9b:6b:f9:f3:e1:8b:73:66:d5:14:76:3d:1b:
                    8d:62:b4:0a:47:e4:d7:bb:db:33:ac:02:ef:e5:8f:
                    5a:b9:fc:e8:20:f0:a2:5b:69:49:82:3c:ed:e5:b7:
                    bb:dd:da:75:20:1d:b3:06:f0:26:97:40:3e:6a:80:
                    59:1d:c4:1e:c9:4b:56:b8:62:7d:e7:80:8c:5e:b1:
                    de:b6:20:bf:8b:a2:29:d5:09:4b:a3:95:ae:0c:d2:
                    79:8a:56:90:e1:6c:63:16:dd:ea:02:71:39:eb:38:
                    40:4e:a0:be:1c:d2:8e:16:3e:9b:73:d1:d0:8c:63:
                    8e:6d:cf:21:e0:ea:bb:39:ce:c1:9f:69:4e:8d:56:
                    ec:37:7d:6f:fc:9a:4f:ca:49:b5:70:83:bd:b2:29:
                    dd:b7:ce:d6:df:d7:ce:60:3f:9e:56:6d:03:5d:57:
                    97:dd:4b:89:9f:6e:d9:f6:6a:00:e8:7f:47:6f:e8:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:7E:93:5D:84:98:5D:8A:89:6F:23:77:EA:63:B7:F4:40:12:ED
            X509v3 Authority Key Identifier:
                keyid:E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:57:67:f8:63:a3:3a:ae:22:8e:21:f5:ae:49:7b:3e:61:
         2a:52:47:11:da:52:9c:4f:e5:dd:e3:f7:b3:a4:72:1a:fc:88:
         3a:ee:98:76:16:a5:32:15:5f:9f:dd:d3:ca:26:ed:8a:c1:19:
         c9:e3:5a:7e:f4:3a:aa:7e:a0:14:a1:4b:a2:25:7b:62:08:b8:
         d0:2d:8a:ab:1a:c0:5f:66:51:9b:bd:37:9a:d4:57:2b:bc:a1:
         72:bc:3a:37:9f:56:c4:41:ce:2c:bf:b6:17:66:10:9e:4d:2f:
         2b:12:39:c0:a9:95:b4:9e:9d:24:d0:28:72:75:42:b8:d4:5e:
         24:ae:c1:c1:08:ef:a3:b5:88:82:45:93:42:22:6f:6e:c2:e1:
         65:a8:ca:d4:e5:a9:42:84:ae:d5:ad:b3:49:48:81:74:c9:11:
         fa:21:de:4c:2d:cd:02:df:fb:46:32:42:52:f3:5e:81:1d:0a:
         5c:0e:63:e8:e9:5d:db:42:a5:36:24:dc:26:03:43:55:05:85:
         8c:34:ca:38:fd:cd:b3:48:fc:c7:4b:d0:7d:64:ff:de:c9:fe:
         77:fc:06:1c:32:24:bf:d5:a1:e6:2f:9f:06:b7:eb:3f:70:71:
         96:db:59:b2:3b:f5:39:db:e6:0e:38:82:58:11:23:75:c4:27:
         c4:71:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org