Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
File:                     mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json)
Hash identifier:          KyUUuxCZgnxCUV0RQ8hPUEuD+ALKqUB2N2lqwtnZe9U=
Subject key identifier:   1E:AA:3E:0D:95:35:7F:0D:04:8D:51:C2:52:18:8B:50:F1:3D:66:65
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
Manifest number:          065B
Signing time:             Sat 18 May 2024 23:34:24 +0000
Manifest this update:     Sat 18 May 2024 23:34:24 +0000
Manifest next update:     Sat 25 May 2024 23:34:24 +0000
Files and hashes:         1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: dPrGLB8+XbGoT6sCNX9lFyMZTZ8UBRVd+RF3OACiSjE=)
                          2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: 3Ta/Rhmk9vEVGlhgqjD5ilg1rp+9RihhDEFlOfVXjec=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
        Validity
            Not Before: May 18 23:34:24 2024 GMT
            Not After : May 25 23:34:24 2024 GMT
        Subject: CN=66493b00-762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:3d:be:ac:c5:75:44:e8:6d:c9:4a:06:91:
                    9c:4f:69:1e:f5:85:d7:e0:27:bb:5d:81:12:ad:eb:
                    71:8c:e0:07:62:f8:46:ac:d4:67:6f:ca:c6:3c:f9:
                    94:46:43:18:bc:c6:31:58:a2:af:54:99:2c:e8:e8:
                    78:03:e9:c2:d6:8e:22:cd:37:9d:61:56:82:3c:bb:
                    5f:09:4e:a0:cf:e1:3f:ed:b0:16:f6:15:dd:b8:34:
                    da:57:d3:cd:bb:f9:4a:27:79:6a:50:58:d5:0d:f1:
                    db:95:7f:c2:18:5d:1c:d5:94:14:62:72:0b:b0:d5:
                    56:04:92:62:a0:55:2d:c6:c5:1e:5a:ec:67:97:c2:
                    5e:7c:e2:f9:08:a7:fa:c7:d7:07:93:17:31:a0:2a:
                    e1:a2:10:c7:dd:9e:00:17:75:af:a1:46:0f:a5:23:
                    19:3d:ae:39:bd:29:99:42:9a:b3:70:ba:21:b6:47:
                    98:9c:a4:49:27:eb:fa:61:af:a4:b5:4c:c4:2f:15:
                    69:7a:69:65:b2:51:09:85:53:e7:5a:87:ae:80:3e:
                    d8:dd:c4:61:19:2d:c7:77:ca:4c:c1:49:6a:0e:3d:
                    9d:ad:96:f4:4d:27:38:6e:93:4c:d0:8d:15:ff:ac:
                    50:05:f4:ad:14:f5:b2:e8:98:d5:87:cf:d4:66:79:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AA:3E:0D:95:35:7F:0D:04:8D:51:C2:52:18:8B:50:F1:3D:66:65
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:15:9d:a9:e6:bc:66:73:43:45:5b:0f:a4:bf:1d:fb:55:b4:
         6f:2e:9a:a6:6b:2d:df:af:33:a6:f4:ba:68:70:a2:13:9b:dc:
         53:00:83:8b:7c:18:3c:46:df:6f:e6:50:ba:d1:6c:0f:c0:f4:
         74:ac:87:c9:1b:ea:70:8d:23:3d:db:7b:00:4d:e0:8b:50:7f:
         96:df:be:d3:5a:45:ab:58:7e:9c:f2:9f:3f:d9:8b:b6:46:d2:
         15:91:61:8d:2a:21:fc:5c:d2:76:d4:57:a7:86:f7:71:f5:c5:
         7e:67:ea:e7:98:0e:02:22:8b:93:5f:67:f0:92:90:59:e3:b6:
         35:4d:15:d7:e1:b6:54:da:18:3a:a1:f9:3d:71:1d:84:08:68:
         93:b9:2c:04:9b:c2:0c:34:ec:89:c8:c6:20:9e:21:89:38:17:
         24:4f:f5:34:aa:8d:6b:e9:3a:78:e7:4a:c1:6b:60:f8:dc:c4:
         c5:e8:02:52:b3:a1:46:8b:5f:0b:20:db:7b:06:da:83:9e:be:
         0b:dc:64:f5:5e:a8:b7:0b:b9:e8:40:2a:36:bc:5b:f9:b0:2c:
         5b:a4:7f:b3:fe:46:c4:91:88:dd:e8:e0:d2:dc:ec:06:75:40:
         f9:90:55:c3:5b:8b:b0:29:0d:a3:f6:e4:3c:0e:9d:c4:79:c4:
         bd:28:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org