Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          LayogatQ45gkH0xncCdjCbgC/5RlUsZTSLIJ0905zC0=
Subject key identifier:   2E:CD:C8:27:6B:B8:5E:0B:DB:5F:B8:16:8F:FC:D3:4C:01:16:17:D9
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          0102
Signing time:             Fri 31 May 2024 06:19:47 +0000
Manifest this update:     Fri 31 May 2024 06:19:46 +0000
Manifest next update:     Fri 07 Jun 2024 06:19:46 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 0esVb9gaW174YZUXECBBlzEVmQs7CQhJ0JVcQlzJD48=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: aWeGcwo+7uKNQSW4Ntew9XLYTtyOnPpUefRzhFuvQqc=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: epiQvTpBAPUjrJhksVffAMtVFi86tak47vpaBV0eqns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 06:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: May 31 06:19:46 2024 GMT
            Not After : Jun  7 06:19:46 2024 GMT
        Subject: CN=66596c02-ecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:36:2a:20:de:fb:d0:36:d9:e4:9b:81:db:
                    27:8c:28:b7:7f:15:08:fb:09:43:19:e7:c4:85:a5:
                    ea:e5:81:d1:ff:c0:41:80:43:fa:24:e5:a5:22:d9:
                    fd:23:60:ac:fc:6b:ec:9d:a5:9a:5f:6e:5f:66:94:
                    a0:65:97:f0:86:5c:04:a0:c7:de:54:73:c2:13:1a:
                    d3:63:3e:68:45:20:b3:b6:30:a5:b3:a1:34:1a:09:
                    20:9f:10:f6:0d:63:5a:af:23:1c:1d:06:a5:58:85:
                    d2:25:63:50:99:42:18:49:4d:07:db:c5:63:47:4a:
                    7d:a0:ec:ca:29:5f:30:a8:cc:09:58:96:c8:74:6b:
                    c1:ec:81:f1:88:93:a9:19:13:32:d6:f8:a0:d3:1c:
                    58:19:17:75:20:13:f8:42:53:29:60:a1:36:42:6e:
                    c7:59:e0:50:91:00:0b:fa:12:fd:1d:34:e1:93:c5:
                    9c:72:62:0f:ee:a9:c4:9c:dd:20:fc:0b:3d:c4:30:
                    09:9a:e4:42:94:56:8c:ad:5f:a9:71:dd:74:37:7c:
                    1b:30:f8:ce:eb:2a:9d:90:b0:bf:b5:d0:a7:a1:d6:
                    2b:a6:f9:39:fb:e3:17:03:21:86:fa:f0:cc:44:8c:
                    3e:15:2f:74:e6:45:8d:a3:f3:3b:82:04:b6:26:c3:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:C8:27:6B:B8:5E:0B:DB:5F:B8:16:8F:FC:D3:4C:01:16:17:D9
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:11:bc:63:7b:a6:df:35:9c:69:a9:66:8e:14:41:91:52:78:
         18:3f:e7:87:6b:38:43:ed:5a:1d:d7:c9:a4:6f:86:42:c3:b4:
         02:48:3c:b2:d2:da:26:05:01:e4:32:4d:65:a2:9b:64:5e:27:
         e3:16:cc:27:82:e9:cc:71:6c:a6:2a:a9:f1:ae:82:75:41:1b:
         27:c3:3b:87:48:10:a9:c5:54:5f:77:03:d5:e5:94:6e:5d:85:
         ec:bc:2a:e9:1b:90:1f:98:3c:ff:7b:23:78:ce:b3:b7:d1:c4:
         d0:73:03:26:20:62:92:40:61:23:cd:26:a9:13:bb:c1:0c:43:
         57:54:2c:b4:0e:8a:24:56:92:bc:f5:0c:8d:36:3b:19:37:f7:
         52:f2:e2:69:3a:8a:0e:62:8b:a0:68:c8:31:9d:34:07:ef:3d:
         69:ff:7b:5d:53:11:e8:c6:de:5b:c7:e3:e6:9e:55:47:71:70:
         1c:57:37:12:dd:51:18:a2:c8:0e:ec:51:5c:0d:ef:f0:c5:62:
         d2:84:68:33:38:b0:55:cc:a0:ff:02:c8:fd:3a:5f:39:3e:4e:
         d9:1b:66:32:b4:14:24:50:3a:d4:e4:92:b8:cf:8e:d1:fc:cb:
         22:b8:7e:3b:53:aa:a4:2e:a3:cc:e8:73:23:90:41:6e:01:24:
         a6:ff:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:02:38 2024 by rpki-client on console-ams.rpki-client.org