Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
File:                     LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft (raw, json)
Hash identifier:          rXk0vWEi9TY3G3q+xR9kog4sYOqPoYU62/diVaLYi9E=
Subject key identifier:   84:62:1F:31:D6:AE:08:63:0E:2F:FF:FB:91:FD:26:BB:63:67:A2:91
Authority key identifier: 2E:03:41:8E:5D:1E:AC:81:4A:2D:D5:63:E4:43:CD:C1:33:AF:E8:BC
Certificate issuer:       /CN=A919610F/serialNumber=2E03418E5D1EAC814A2DD563E443CDC133AFE8BC
Certificate serial:       049B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgNBjl0erIFKLdVj5EPNwTOv6Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
Manifest number:          0497
Signing time:             Sun 19 May 2024 01:35:08 +0000
Manifest this update:     Sun 19 May 2024 01:35:08 +0000
Manifest next update:     Sun 26 May 2024 01:35:08 +0000
Files and hashes:         1: LgNBjl0erIFKLdVj5EPNwTOv6Lw.crl (hash: Rh2vo7PoONeB3V8xxSuGk08QXAen+8lejb93OWP1eag=)
                          2: D6536448EA8D11EBAC8C0747C4F9AE02.roa (hash: 9NDPQAAJi9F3/fcT5q4pSPI8MTpeGGhpA9fI73K323E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.crl
                          rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgNBjl0erIFKLdVj5EPNwTOv6Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919610F/serialNumber=2E03418E5D1EAC814A2DD563E443CDC133AFE8BC
        Validity
            Not Before: May 19 01:35:08 2024 GMT
            Not After : May 26 01:35:08 2024 GMT
        Subject: CN=6649574c-8124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:db:b9:0a:ec:81:b9:61:73:02:01:12:a0:
                    5c:34:ef:c4:08:c7:12:29:c1:4a:e8:3c:4e:be:90:
                    2c:20:56:e3:79:f3:8f:bb:83:f2:75:7b:6d:f0:1b:
                    1d:7c:2c:e8:ff:6a:be:61:d1:8e:14:aa:b7:f2:26:
                    e8:62:b7:f7:b2:06:54:b2:ea:e5:69:5c:c7:59:ef:
                    7e:e8:38:31:55:6f:f1:cb:3c:93:6c:e9:6c:b6:83:
                    a2:c2:aa:15:b6:e4:83:6f:b8:ed:63:b0:3d:39:d6:
                    29:0b:5d:71:4f:9b:39:9e:b7:26:e9:d5:d3:ed:d3:
                    30:a3:b5:15:86:da:9f:46:0d:b1:23:b8:69:74:65:
                    9d:68:64:12:a9:33:35:fb:46:b9:6e:15:05:34:3e:
                    53:2c:cd:34:cb:2e:e8:7f:98:46:c3:cc:84:69:2a:
                    a3:cb:eb:ad:61:2d:21:a9:4b:1a:62:1e:99:50:14:
                    b6:a2:bb:80:62:da:64:a3:87:69:2c:ad:ca:34:aa:
                    39:34:88:78:17:17:16:21:50:8e:dc:88:d8:28:7a:
                    f3:f5:2f:fb:d0:98:09:0f:8c:82:b7:f4:8a:20:71:
                    e9:2a:7a:14:0c:e7:7c:c7:05:49:f0:fd:cb:a6:35:
                    50:02:b3:37:fc:0b:45:12:c7:e5:2d:8b:d2:05:58:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:1F:31:D6:AE:08:63:0E:2F:FF:FB:91:FD:26:BB:63:67:A2:91
            X509v3 Authority Key Identifier:
                keyid:2E:03:41:8E:5D:1E:AC:81:4A:2D:D5:63:E4:43:CD:C1:33:AF:E8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgNBjl0erIFKLdVj5EPNwTOv6Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919610F/0420E6C8EA8B11EB8F82B540C4F9AE02/LgNBjl0erIFKLdVj5EPNwTOv6Lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:5c:6d:70:55:1c:6b:d5:68:9c:06:ea:17:ba:24:30:6b:
         59:a4:f4:1b:27:e0:7d:5e:be:54:82:e1:a0:e3:9f:76:0d:0a:
         27:da:fa:f1:1d:5d:98:95:56:dd:9c:f1:c5:0f:93:bf:d4:17:
         c4:1e:e0:27:e3:ee:c6:ec:ab:85:a5:97:6d:dc:95:9c:eb:f3:
         71:d4:90:90:17:14:dd:70:96:4e:12:b8:23:e0:74:50:3d:a6:
         2d:44:13:3e:26:5b:91:80:9d:6a:ea:10:0b:26:9c:6a:78:24:
         ce:e1:f1:87:3c:fb:2c:d9:a7:79:65:4b:15:a7:78:20:4a:8a:
         b7:46:e0:1e:90:9e:fe:03:61:12:e7:39:72:00:e1:39:5d:21:
         22:35:14:9c:89:1c:fa:86:51:d2:00:7d:4a:a9:aa:34:33:d5:
         de:18:9d:65:ee:ca:3d:94:48:b5:c4:a4:05:50:18:dd:7a:36:
         8e:f9:bb:2d:21:72:04:94:39:a4:a5:76:af:46:ce:ad:e4:bc:
         de:6b:b3:9f:fa:73:e4:af:a4:04:d3:94:0c:75:44:02:4c:26:
         45:3a:dc:3e:93:d4:1e:1e:30:d5:09:70:4a:68:6a:db:da:d8:
         fd:4a:d8:50:74:dd:e2:46:79:74:20:6a:6e:20:6b:a0:7b:44:
         09:0a:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:09 2024 by rpki-client on console-ams.rpki-client.org