Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File:                     pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier:          gpJDrsmteE7ulIZypMHkLFjLS+OD0o7x2n3+nj8TdHA=
Subject key identifier:   17:33:2E:47:C6:37:C7:01:E6:1D:15:34:B5:4B:E3:5D:E0:3E:DC:3E
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0CAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number:          0C8C
Signing time:             Sat 18 May 2024 18:53:47 +0000
Manifest this update:     Sat 18 May 2024 18:53:46 +0000
Manifest next update:     Sat 25 May 2024 18:53:46 +0000
Files and hashes:         1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: nkkRCE3NUhm3ZjBKle7+9duq6DEqf/DbiPQpWzzHuQw=)
                          2: D452D772061511EFAB39B411C4F9AE02.roa (hash: gEMQt+bWWAQxuw72suhIgEESj0b3qvYkvHc3zvvSsHo=)
                          3: D94D78866E4911EE8988954AC4F9AE02.roa (hash: j2q9q5UQtgIaZYDaxiTpFFtnOsxW/vGcYVBPEPpAfOA=)
                          4: 3971266E4A4A11EE9424B146C4F9AE02.roa (hash: fd0Lwdq/7SZ2UavzVgoHYT6CmTGiRbUxqj79hmV6+p0=)
                          5: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: MMURfJSKmXIALtdxYffDlMp75DQKdDxlaB+1HF062RY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3244 (0xcac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: May 18 18:53:46 2024 GMT
            Not After : May 25 18:53:46 2024 GMT
        Subject: CN=6648f93b-c6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:81:72:7c:57:f6:73:5e:d5:ea:6f:ea:82:
                    c9:3e:74:90:c2:9d:f9:95:05:0c:2f:61:6a:6c:b9:
                    f0:a8:5c:37:0b:87:77:49:b2:c4:6e:de:b2:bd:26:
                    a2:6b:6a:e0:d7:ed:ad:90:ae:43:b6:f6:b3:ab:8b:
                    4d:bb:f7:b1:8b:f7:88:c8:81:5c:f6:f2:08:99:69:
                    bf:ea:53:6b:bb:95:19:08:4a:98:66:bf:9a:fc:ad:
                    5c:8f:cd:dc:15:55:b4:d5:ca:6c:e6:3f:42:fa:22:
                    bf:cf:c3:8c:c3:6d:29:66:bb:b6:cf:ad:d1:aa:c6:
                    06:07:79:de:19:ca:c9:6e:3c:1c:51:d3:2c:e0:0a:
                    24:aa:86:d8:20:0f:4e:bc:3b:ac:9d:45:31:e7:1a:
                    2d:cc:81:9c:df:13:ea:8a:c6:19:a9:84:f1:28:98:
                    30:61:46:c6:fb:7f:3f:cf:9e:bf:d0:80:67:b3:50:
                    e5:98:4b:ad:1e:d2:ef:3b:29:87:78:7f:2f:5e:08:
                    4d:70:65:15:26:df:b9:7a:48:67:59:1c:57:3b:79:
                    42:cf:e2:f2:31:04:48:74:6e:ba:aa:52:6c:f5:e7:
                    b6:55:c0:83:b4:c2:94:88:d5:bb:80:53:2a:d6:0b:
                    a3:57:77:7f:50:c1:08:0f:fc:c3:7b:b5:76:b5:b3:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:33:2E:47:C6:37:C7:01:E6:1D:15:34:B5:4B:E3:5D:E0:3E:DC:3E
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:47:91:61:09:68:cf:5b:12:15:0f:b3:aa:47:47:21:30:
         85:7e:88:47:91:49:7b:df:07:89:c0:71:11:25:a0:e2:be:d4:
         2a:a7:4a:f9:32:7e:9b:2b:d2:e5:9c:21:62:5d:bf:fa:de:10:
         2d:93:fe:7e:5a:db:bf:f3:b7:9c:fc:c8:97:94:7f:cb:b4:35:
         06:77:cc:ec:e6:45:2e:e1:d0:d2:47:39:5e:ba:39:f8:7d:6b:
         98:15:29:57:c0:ac:b3:fa:36:51:70:2b:f5:6a:94:88:32:45:
         96:b0:9b:00:a3:4e:b7:55:eb:77:8c:b8:06:9f:dc:db:f9:49:
         5c:15:ad:98:bc:81:99:9e:d4:7c:a9:04:70:0f:5d:90:23:03:
         28:be:98:e0:df:7b:e3:58:3f:0f:35:ea:6b:a7:6b:d2:54:ca:
         ff:b0:94:11:29:1c:8c:b3:d2:f3:44:2c:38:70:f7:4a:d0:d5:
         d7:dd:7e:5f:2f:ea:b3:f8:24:38:d8:34:b3:0c:57:08:eb:1c:
         6f:55:14:db:1b:4e:91:36:85:1a:bf:f9:ae:73:c2:c7:b8:35:
         cf:85:f4:00:f8:54:2f:b3:20:4c:f3:74:af:ea:98:63:30:bd:
         61:dc:12:f3:05:f2:a1:2d:e5:28:61:67:ae:95:72:91:ce:e6:
         db:82:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org