Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          jDWe1ueJKf7vsRSaDeOagtH7cL3k054Bo/DnFXENLu4=
Subject key identifier:   9E:37:23:37:A3:B1:BA:45:F1:7F:7A:71:9B:B2:CF:4D:33:81:2E:07
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0158
Signing time:             Sun 19 May 2024 04:51:18 +0000
Manifest this update:     Sun 19 May 2024 04:51:17 +0000
Manifest next update:     Sun 26 May 2024 04:51:17 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: AQQbGBJDZ0/nLaFMRmtmrugoS9hukfCz4SgNXK/fIxo=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: tFNYEcp1qebl+b5vQFwsNNGqa31iH52HgM1l7UFEEsY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: May 19 04:51:17 2024 GMT
            Not After : May 26 04:51:17 2024 GMT
        Subject: CN=66498546-08d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:06:8a:02:8f:4f:71:69:ef:3e:29:1a:19:
                    da:6e:b4:51:00:2c:30:c5:b5:a8:d5:1d:c3:ba:66:
                    4a:fa:7d:2f:7c:b6:89:97:a4:d6:4b:8d:36:db:76:
                    c0:dc:8b:e6:8e:64:e3:d9:b5:76:83:4c:bf:75:de:
                    8f:75:96:1a:63:52:aa:21:d8:c5:e8:39:3f:dd:6f:
                    ad:b3:44:df:cc:9b:59:f6:88:7d:fc:13:f6:fe:f7:
                    21:bc:8e:d0:ec:31:17:de:cd:e7:a1:94:ef:6b:39:
                    88:b5:91:7d:b7:5c:b7:d1:55:19:f3:87:49:c5:af:
                    35:4b:79:10:ed:08:2b:c8:90:db:34:4c:53:5f:ff:
                    f8:cb:2c:68:66:f1:12:16:e9:8f:90:7d:dd:51:f0:
                    aa:c6:76:2f:c9:16:1e:20:9a:b7:f6:50:d5:04:fa:
                    3a:d4:5e:41:5a:24:f4:2a:77:d1:75:5c:ef:02:7c:
                    05:10:72:21:65:cc:8c:5a:a8:95:15:ed:8c:e8:31:
                    95:68:43:27:37:e1:fc:66:13:6d:2d:38:b2:3e:17:
                    36:73:8c:d1:b6:60:2a:7e:17:01:3e:99:b1:76:a7:
                    11:c5:0d:20:69:b1:73:b3:97:a6:ec:3a:55:a5:d5:
                    d3:88:1f:ed:65:02:14:bc:ec:21:f5:78:17:cb:1e:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:37:23:37:A3:B1:BA:45:F1:7F:7A:71:9B:B2:CF:4D:33:81:2E:07
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:86:ef:35:0a:6f:e9:eb:1b:80:7d:85:81:67:3f:0e:30:
         b9:41:d7:6f:7d:a7:ab:12:90:b0:74:53:cc:bc:3b:40:34:62:
         c6:d0:a9:f4:74:d6:80:43:d2:9d:1f:57:48:57:67:88:ed:c0:
         ed:7b:1c:5b:a3:cc:96:db:7e:fe:59:88:aa:95:64:23:1b:29:
         2f:29:de:d2:f2:bf:b8:40:b9:3e:7c:c1:7c:f7:bb:47:84:92:
         01:ef:65:88:d1:36:bc:93:b5:23:e8:6e:32:2f:fb:55:20:82:
         52:8d:9e:4d:39:20:66:44:d3:ce:dd:d9:98:9d:46:42:12:47:
         a6:1e:b9:17:53:b1:37:26:c3:ac:5c:6b:89:97:a1:fc:c4:e3:
         c8:c0:bf:15:65:c6:05:ac:e8:22:0c:0a:99:14:20:eb:e1:c3:
         21:4c:7e:3e:11:63:d6:a1:6c:1a:64:cc:8f:c4:27:20:af:79:
         85:88:bd:98:c3:5e:da:75:23:3c:80:d6:80:12:c9:3d:a3:c7:
         8a:64:ae:2e:47:ba:48:18:e9:6f:7d:e5:e3:60:b1:aa:42:87:
         d4:6b:9f:f0:a4:7f:af:7e:dc:b7:54:54:1a:5c:50:c5:f4:d9:
         05:9c:fb:c7:6d:a9:eb:b9:51:c8:2b:f8:3f:d5:5e:bc:17:f3:
         3a:99:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org