Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
File:                     Dt_0_kQphXb27203ZxJoAmiGgYo.mft (raw, json)
Hash identifier:          xoCCgWyugb/3ZeomOZLq+5E7jGwZmORi9J0EQLNyr5o=
Subject key identifier:   5F:A9:B1:EC:E2:C2:F3:57:1F:95:0A:A8:FF:87:BE:C8:5A:1E:AD:E9
Authority key identifier: 0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
Certificate issuer:       /CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Certificate serial:       1017
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
Manifest number:          1009
Signing time:             Tue 30 Apr 2024 18:14:32 +0000
Manifest this update:     Tue 30 Apr 2024 18:14:31 +0000
Manifest next update:     Tue 07 May 2024 18:14:31 +0000
Files and hashes:         1: Dt_0_kQphXb27203ZxJoAmiGgYo.crl (hash: hvJ+zj1plW78nTEVa8Cq83hmHL4CJEZ7sPng5dXI6aA=)
                          2: 7BACCD3C1EBF11E98AA24870C4F9AE02.roa (hash: gap02AhofWMQGlOl4qSY7XXO/OafSby+cCR4qtpHNGU=)
                          3: 7B1F34FE1EBF11E98AA24870C4F9AE02.roa (hash: RAjPaN25uQB9B7uH9YzPEJVbt+LzoDIE020j5YWyze0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl
                          rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 18:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4119 (0x1017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
        Validity
            Not Before: Apr 30 18:14:31 2024 GMT
            Not After : May  7 18:14:31 2024 GMT
        Subject: CN=66313507-2dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:47:47:7c:c6:89:25:95:db:88:cb:63:68:
                    01:2e:17:1f:a1:4d:af:35:b5:10:b0:b2:1a:13:0e:
                    e1:5b:f2:32:c0:16:c4:52:b9:3b:a5:9f:a5:b2:a7:
                    f3:ca:c0:b3:2f:4f:50:3b:45:e2:83:7a:a2:5b:a1:
                    09:fd:7b:64:bd:5e:ad:d2:6c:58:47:cb:48:e5:8b:
                    4a:26:94:70:be:b0:9a:28:7c:cd:59:ca:c3:0a:80:
                    81:0e:17:8d:33:6e:89:14:7a:be:f6:5e:f7:8c:82:
                    8b:91:db:68:ee:fc:4a:78:97:a3:89:60:4c:54:c5:
                    23:54:af:3e:10:bc:da:55:63:fd:8b:1e:03:81:05:
                    a2:37:46:3d:14:bd:84:d5:18:94:45:59:2d:18:cc:
                    53:47:75:11:d9:2f:31:57:59:e3:78:51:98:bf:d2:
                    2e:67:12:7c:e4:2d:5e:8d:4f:55:ea:9a:9e:8d:8f:
                    5a:23:37:25:d8:65:7b:73:55:9f:b1:77:5c:e1:aa:
                    1e:00:51:d7:c9:4f:13:0f:e5:51:0a:58:d7:88:a3:
                    f8:61:14:a8:be:e3:e8:76:6b:25:04:36:85:a4:55:
                    80:c0:49:cd:08:d1:ed:74:92:c8:9f:88:c7:78:1e:
                    ae:d8:fb:50:31:a7:dc:65:a6:d3:eb:6d:f6:e0:ef:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:B1:EC:E2:C2:F3:57:1F:95:0A:A8:FF:87:BE:C8:5A:1E:AD:E9
            X509v3 Authority Key Identifier:
                keyid:0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:2f:de:6d:5f:d6:d9:a5:62:41:0f:15:32:b3:a5:b4:c6:fa:
         16:39:8e:65:91:1e:34:35:ea:1a:c4:4a:96:06:5f:04:b9:33:
         49:73:7b:00:00:9e:b2:43:55:96:bf:5e:2f:80:b7:11:c1:d5:
         75:7f:da:df:7f:0e:77:3b:8f:3d:30:b2:e3:5d:79:ce:d1:50:
         0f:b0:18:4b:2b:c2:5d:cf:a6:10:5a:e4:31:73:fc:0d:4d:3c:
         38:38:1e:60:c6:24:90:a9:fc:9c:e9:a1:26:43:29:21:8b:83:
         a0:4c:50:25:d4:e5:3a:f6:f5:90:fe:7e:82:c7:5d:a6:a7:df:
         a4:5d:37:73:15:99:78:be:88:9c:27:c8:6f:3b:f5:a2:90:72:
         58:39:d4:70:14:3b:3f:0d:84:75:8e:10:ea:76:5c:76:9a:89:
         22:5a:a7:78:a3:ba:dd:d2:ca:4c:9b:73:d1:3e:d0:bb:5a:37:
         e5:32:b6:9f:5e:74:7f:10:95:2f:ed:e4:ef:70:71:f9:4f:90:
         41:18:85:85:eb:ac:ed:44:dc:87:2c:40:7e:23:83:02:71:29:
         ea:08:1e:42:26:5f:42:da:e2:7b:8c:23:e3:8c:b9:e2:ae:ed:
         a7:96:26:f3:02:72:bd:85:ed:55:02:ea:dc:fa:02:2d:68:d1:
         a1:25:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:22:13 2024 by rpki-client on console-ams.rpki-client.org