Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File:                     BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier:          4SAXEbv8dWPhkSqslpcAjppaWPYv7MUxFb6u5mZtlJk=
Subject key identifier:   E7:ED:86:C7:40:D6:01:5A:EE:32:4C:4D:14:37:4C:E7:BC:05:73:47
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer:       /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial:       0580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number:          057C
Signing time:             Sun 19 May 2024 00:34:56 +0000
Manifest this update:     Sun 19 May 2024 00:34:55 +0000
Manifest next update:     Sun 26 May 2024 00:34:55 +0000
Files and hashes:         1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: L48Ph4mOZSiorVX8qaFWaBuIWg5rw35/UC2J5F3QISU=)
                          2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: QPUpI+0BADqLngv5PXDDeoaYIHHd1ixVl03M1AWIdPw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
                          rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
        Validity
            Not Before: May 19 00:34:55 2024 GMT
            Not After : May 26 00:34:55 2024 GMT
        Subject: CN=6649492f-6ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:b8:bc:36:3c:b1:09:9c:3d:51:c3:14:69:
                    7f:61:91:45:45:7d:53:fa:5d:e1:c8:b5:cc:04:bb:
                    bd:a0:8a:98:70:7b:e3:78:fc:05:d9:58:cc:c2:30:
                    6c:a3:1b:f2:69:1b:d1:ba:05:03:87:5e:c9:00:9f:
                    39:f9:42:0a:f7:b9:16:5a:1a:6f:ab:60:89:6f:10:
                    05:25:bc:11:28:b2:fe:49:78:2f:50:ab:f4:5c:57:
                    34:fa:26:97:18:dc:11:b2:fa:07:3f:ef:9d:b6:ca:
                    fa:d9:e9:d1:f5:9a:b3:dc:f2:f4:b2:12:e6:7e:3c:
                    4e:fe:57:fd:63:0e:41:17:98:df:3c:b7:39:7f:74:
                    22:1c:17:9b:f7:13:a1:71:da:d0:a9:af:29:82:8c:
                    f1:fc:f2:23:31:f3:7a:22:70:40:de:ee:fb:e9:d9:
                    bb:eb:92:d6:8a:fb:9c:e2:05:f3:18:8e:27:f8:66:
                    31:23:9d:ce:56:94:1d:2f:80:45:5d:04:d5:3f:18:
                    74:52:ef:11:1f:64:94:3d:00:12:80:0f:1e:c8:f7:
                    25:3b:03:e5:34:30:f3:f6:bb:67:b3:3a:dc:8d:22:
                    cb:ef:f0:51:a3:db:d8:1f:f5:42:09:33:1d:b7:cc:
                    11:51:ef:ca:05:82:8e:c2:31:56:a7:be:07:bd:d8:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:ED:86:C7:40:D6:01:5A:EE:32:4C:4D:14:37:4C:E7:BC:05:73:47
            X509v3 Authority Key Identifier:
                keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:ec:93:1e:be:ea:38:b2:b2:57:72:dc:1f:e3:1c:12:b5:
         bb:8c:8b:16:05:13:b2:79:6f:b6:3a:0e:ce:98:a5:5e:e5:10:
         ae:a5:cf:d5:c3:da:08:73:ce:c1:52:d0:35:ab:56:b4:af:f0:
         e7:67:1c:55:e5:3b:d9:f3:8e:32:27:bc:00:3c:9d:88:c9:4c:
         da:11:ee:fc:de:ac:0c:41:08:07:20:c5:63:5e:8e:03:0f:b0:
         ac:d5:5c:72:70:32:b6:1b:a5:c8:35:6d:52:b0:19:e6:02:0d:
         d5:37:1a:e3:79:fd:ad:34:f9:43:57:bb:8b:8d:0f:11:19:b2:
         fd:17:73:94:9c:4c:09:10:b5:12:40:0b:b8:78:f7:73:e8:dd:
         ae:0a:a2:ec:6f:b8:7a:56:ce:00:d9:86:04:03:fb:cc:65:4a:
         3e:83:cb:90:1d:79:0c:77:35:93:92:d7:c6:29:83:ba:ed:a6:
         5e:fb:e1:ec:83:56:31:ea:8b:d2:ff:c0:18:1d:cc:ab:84:b8:
         b8:89:49:9c:c3:0a:30:3b:6d:03:60:fd:74:6b:03:a0:c4:0f:
         0a:c1:b1:e8:d6:20:88:65:2e:94:f6:47:c5:e9:c0:29:30:b0:
         0e:ce:d6:cc:59:a2:fe:da:c9:62:9d:d0:ed:a0:02:2f:a9:2a:
         1c:81:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org