Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
File:                     9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json)
Hash identifier:          TTE4xhqcYYAkr52Bx0j1wgFcYLafn/806P25Fx679xc=
Subject key identifier:   79:1B:62:EA:0D:82:A0:4A:B7:3E:48:7C:D5:AE:FC:15:25:24:0E:2B
Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
Certificate issuer:       /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Certificate serial:       192E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
Manifest number:          18F0
Signing time:             Sat 18 May 2024 16:52:46 +0000
Manifest this update:     Sat 18 May 2024 16:52:46 +0000
Manifest next update:     Sat 25 May 2024 16:52:46 +0000
Files and hashes:         1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: kIrDe0DLAdEB2RpKePNU4Z7dDRrGCNo9/ZhkJmbDM6w=)
                          2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: ycf4uNB94KvPwxW8YXzbudskFauWyZrYISPykOvSjI4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
                          rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6446 (0x192e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
        Validity
            Not Before: May 18 16:52:46 2024 GMT
            Not After : May 25 16:52:46 2024 GMT
        Subject: CN=6648dcde-d1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:f2:6b:56:b9:d8:63:5c:cb:0e:7d:73:08:
                    c6:43:bd:83:40:2d:42:68:f7:95:f1:5c:6d:92:b4:
                    37:92:70:68:89:bc:fc:96:32:76:00:e3:b2:49:df:
                    5e:5a:13:cd:5e:f8:18:ad:06:61:11:a3:4c:85:e2:
                    29:d8:c1:fd:9e:8c:cb:1b:cc:08:4b:df:bb:83:e9:
                    be:35:5f:3d:2f:4c:4d:bd:10:4d:d1:c7:e4:ae:c7:
                    86:30:1b:84:4d:3d:58:f8:58:21:44:27:b9:f2:a1:
                    4c:a3:fc:de:0d:29:4c:61:ad:43:46:32:1a:a8:7f:
                    62:4f:52:a0:87:0a:aa:38:32:43:5c:a6:bc:d7:df:
                    d9:22:46:39:81:0f:63:16:a7:16:39:4b:c9:86:01:
                    f6:1e:b0:27:a1:76:c8:04:9b:f2:44:78:bc:9c:49:
                    0b:7b:48:75:5d:df:6a:b4:90:07:d3:10:0b:97:bb:
                    0b:da:fc:53:84:43:e4:66:66:23:f7:61:aa:6e:47:
                    4e:1c:8b:0c:b3:a4:b2:6b:8a:f9:5f:58:c0:78:d6:
                    2f:bf:ec:2e:e6:85:90:61:a1:e1:ec:b2:3a:ce:e8:
                    29:88:b8:4b:42:b9:62:2e:33:e0:c8:4c:9b:7d:a6:
                    f5:1d:45:ac:41:40:11:b1:8a:7c:c9:1c:a4:a0:b7:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:62:EA:0D:82:A0:4A:B7:3E:48:7C:D5:AE:FC:15:25:24:0E:2B
            X509v3 Authority Key Identifier:
                keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:39:22:e6:9d:f0:58:59:a6:ed:21:40:05:fa:43:66:19:c1:
         49:3e:4b:bb:a5:39:ae:12:7f:4b:05:77:a6:af:bc:32:5c:73:
         b7:16:5b:c9:63:9a:35:d9:ef:b4:b7:bf:51:ac:58:e5:1c:6b:
         45:6e:8f:d4:fb:0b:3b:c9:b9:f6:1b:33:cf:c8:53:ef:79:2f:
         b5:4e:33:fc:da:2c:33:24:2b:b5:db:26:06:0b:56:6f:28:c9:
         26:b4:71:aa:f1:99:24:af:bb:dd:31:3c:93:2d:6b:93:3e:75:
         b0:cb:67:c2:cb:07:26:e7:43:5e:1e:89:c8:f3:5c:74:ff:19:
         dc:69:44:f2:b6:19:19:5c:46:13:77:4a:74:1a:ee:2e:3b:73:
         dd:67:e8:2e:ec:7d:e3:b2:2c:5b:15:27:d9:5e:f5:5f:80:93:
         2c:7a:c6:38:d5:dd:e8:e8:d1:0e:d6:56:fe:6a:15:57:ce:6f:
         8e:e9:2e:b3:c5:93:c0:2b:9e:d1:0e:35:b0:e8:ea:35:22:d4:
         5b:b2:9f:49:e5:3d:4c:fb:0f:c1:c3:75:7e:f9:0e:ac:c8:b1:
         53:71:12:b0:8d:d7:b5:67:76:fb:40:93:22:40:07:08:9a:1e:
         0e:b8:79:a0:aa:29:0f:81:11:6d:88:a4:2b:99:f4:99:fb:62:
         9f:6e:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org