Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
File:                     9i_LOgjeVciXseoID_HMnYub2NU.mft (raw, json)
Hash identifier:          q7wyqjywlrOg7DHdMVbSznouWLpcL+uG/WnaXtxMc6w=
Subject key identifier:   24:25:E2:90:83:EB:20:AA:99:E2:FC:CE:8D:96:67:11:86:72:AF:2B
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Certificate issuer:       /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
Manifest number:          0221
Signing time:             Sun 19 May 2024 04:04:33 +0000
Manifest this update:     Sun 19 May 2024 04:04:32 +0000
Manifest next update:     Sun 26 May 2024 04:04:32 +0000
Files and hashes:         1: 9i_LOgjeVciXseoID_HMnYub2NU.crl (hash: iF/Lus0GBVi/YawRN5qoU4wPqoEZY4f20reS6VXUkKg=)
                          2: 38A83FAE0E9211EEB070CC49C4F9AE02.roa (hash: pYbmLhX5/nEytGnA62Y2OOPybBLa+nm0sSYSRV4/Am0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
                          rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
        Validity
            Not Before: May 19 04:04:32 2024 GMT
            Not After : May 26 04:04:32 2024 GMT
        Subject: CN=66497a51-25eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:2f:89:44:9e:ef:6b:40:f6:f7:4d:f1:fa:
                    ac:cd:b3:fb:14:c3:9d:41:1c:13:09:52:96:47:a2:
                    2f:69:6d:3e:30:25:33:df:3c:08:54:50:db:7b:73:
                    8f:03:2c:04:66:01:a1:05:fa:44:f0:e7:fd:8a:04:
                    9d:d8:72:e0:24:b6:69:38:7f:7f:c2:6e:c0:c0:b7:
                    60:bb:61:e7:75:1e:69:44:84:bf:ac:82:b1:d4:1e:
                    3b:34:1e:96:6b:76:26:28:f7:2f:41:58:f4:28:d4:
                    0a:a7:ea:18:62:7a:af:02:97:53:f5:6c:92:48:2f:
                    f3:66:1b:de:87:f0:29:a7:56:e2:9d:b0:7a:aa:d1:
                    bb:ff:41:04:25:35:33:5f:c8:47:67:fb:c1:95:40:
                    7d:4a:8e:a3:24:0d:e0:41:56:1e:ad:d2:02:08:82:
                    1f:c1:e9:9b:bd:ef:26:55:e0:03:db:f7:ec:93:3d:
                    a9:93:4a:e1:73:32:89:e5:bc:c5:0d:c8:59:95:4b:
                    d3:f2:f7:19:44:a6:36:e8:72:ef:5b:07:5c:cb:fb:
                    0b:ec:1d:23:2a:83:41:6e:64:e2:29:45:86:14:42:
                    ed:8c:c5:ea:19:6d:36:63:d0:c6:aa:ed:1a:5d:81:
                    a7:b1:9a:ba:b8:53:ed:25:11:c7:0f:7b:ac:85:73:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:E2:90:83:EB:20:AA:99:E2:FC:CE:8D:96:67:11:86:72:AF:2B
            X509v3 Authority Key Identifier:
                keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:da:08:99:be:77:df:a0:8e:16:64:0e:46:63:29:c3:0d:
         9b:02:ca:65:5f:74:80:d9:eb:e8:2f:d8:94:e2:14:d1:87:31:
         9a:74:9d:f6:bb:f1:2b:05:03:ea:f4:55:7a:ad:f7:c5:3f:6c:
         74:06:24:94:46:61:2d:34:ca:60:5b:86:b4:ef:ce:59:97:e6:
         8e:18:d7:6a:16:de:7f:ce:0e:98:c3:3b:c2:ff:f5:62:c7:80:
         e6:3e:e6:c7:f4:21:7d:b8:4c:d5:00:dd:67:d3:32:45:4c:17:
         f3:f8:b5:f8:cb:df:7a:72:4a:01:a0:a7:1e:30:3c:75:ee:3c:
         1a:b6:b8:01:5e:a8:fe:66:86:e6:87:64:bb:05:3b:3a:28:db:
         e7:55:2f:63:80:84:01:34:01:3c:63:c9:6f:cb:6b:f6:ef:4c:
         a7:03:28:95:e4:e3:e6:4a:70:43:1a:91:67:cf:01:21:93:f3:
         0a:f3:c7:37:04:89:86:5f:15:31:c5:c6:ae:7d:72:c8:a0:35:
         cc:8c:bf:de:c2:60:d1:e5:81:07:93:a4:07:98:a6:84:da:d4:
         78:23:e1:c5:fd:f3:0a:2a:64:37:2e:cd:78:07:cf:eb:bd:b2:
         5e:c1:64:29:85:52:6d:67:6f:65:4e:e5:f4:53:7e:0f:13:1c:
         b6:2f:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org