Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          EHLrc98M9wpVehEvVfUjTgYhH8iDy94uFf8+1Y1O2dY=
Subject key identifier:   79:A1:F4:9A:01:29:D6:DD:77:8A:80:1B:36:BF:AF:21:F9:73:78:5A
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       05E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          05DC
Signing time:             Sun 19 May 2024 00:05:17 +0000
Manifest this update:     Sun 19 May 2024 00:05:17 +0000
Manifest next update:     Sun 26 May 2024 00:05:17 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: JswgRPX7ucNnelWX+SSa9yjsNT7wefBR2pQKWSNWcUU=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: SELYIISzgBI7zrtRFkV2ypEgCIX/db0xuNfofQR/Qs0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl
                          rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: May 19 00:05:17 2024 GMT
            Not After : May 26 00:05:17 2024 GMT
        Subject: CN=6649423d-a64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:e3:5b:5e:83:8f:13:9f:20:c0:9c:31:9a:
                    d5:06:1d:c5:64:f0:c6:61:2b:1d:b9:f0:44:3b:c4:
                    2b:c7:1e:af:23:ec:3e:7d:25:46:85:cd:2d:a8:ef:
                    41:78:45:f9:45:22:2a:d7:99:8e:06:d3:b6:a6:82:
                    bf:35:21:61:7a:62:e6:dd:44:ac:fb:b4:15:cc:1b:
                    3d:64:75:b9:16:2a:30:c3:8a:e7:a8:13:a3:9b:8b:
                    c6:c7:bc:d2:02:4b:d0:58:a2:70:5b:ee:00:c0:fb:
                    d1:8f:20:77:b1:fe:10:be:9c:b3:93:3f:d8:d9:ff:
                    51:83:46:dc:14:1f:38:bf:0b:07:8e:24:74:71:11:
                    9c:cc:73:2a:70:49:c2:b7:38:ea:80:3b:bd:8f:c1:
                    c7:00:79:5f:7c:8d:a0:58:4a:2c:3d:a8:2e:1c:db:
                    5a:e5:04:f9:a7:66:a8:71:0a:71:b0:11:4e:94:7a:
                    7e:c4:aa:c8:95:ef:bc:5e:7b:9e:74:70:71:11:a3:
                    af:6f:f2:f2:7d:2a:65:e5:3c:ae:d6:41:e1:3d:9f:
                    69:31:7f:ee:d7:f6:5b:2b:04:0c:1e:3f:b1:54:c8:
                    3e:82:6e:dd:28:8e:3f:99:3e:03:7e:51:d2:d2:6a:
                    3b:0f:6a:8f:7c:39:12:dd:24:c6:fc:88:4d:ee:eb:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A1:F4:9A:01:29:D6:DD:77:8A:80:1B:36:BF:AF:21:F9:73:78:5A
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e9:8e:5e:d0:33:ef:08:b9:d2:82:10:25:d8:cc:67:1b:03:
         f8:24:c4:83:4d:a3:61:a6:e2:fe:48:b7:9f:f2:23:2f:3e:27:
         ef:7e:db:08:a3:38:b9:46:e3:bd:b7:89:c5:b0:27:1a:e1:0f:
         9e:d1:d7:ac:6e:f2:c0:57:24:e8:04:9f:a5:46:0b:10:4a:9b:
         17:f7:4e:1d:cb:53:4b:1c:b6:b6:22:29:87:0a:69:73:4a:4f:
         c1:a5:e8:34:ba:be:43:c4:6e:28:0a:72:34:41:e2:92:ec:99:
         17:a6:bc:23:dc:15:ee:ac:48:6f:1a:76:23:23:38:49:5c:88:
         95:bf:db:3a:b4:46:18:79:61:cc:34:cd:2a:fd:5e:c5:18:e3:
         1f:32:de:7f:45:71:37:a2:d5:1f:70:dd:5a:d3:bd:6e:39:5b:
         fa:90:cd:f8:0c:aa:ff:e0:fc:aa:bc:6f:f7:20:86:b3:99:13:
         7b:89:fc:27:58:e7:d8:bf:57:48:5c:a0:2d:72:b3:b6:5d:19:
         68:29:aa:8c:6d:86:6e:7b:c9:36:a6:95:4c:a7:da:74:ac:fe:
         e2:79:0a:27:04:ad:ee:0e:ca:f4:4a:20:8f:b1:37:ce:e9:86:
         85:8e:97:bf:fe:b5:8b:97:4e:e0:8f:fd:2b:ec:48:9b:ad:19:
         d9:ec:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org