Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
File:                     130F57124A8921F00083A228FEBE2B78373015E3.mft (raw, json)
Hash identifier:          8AY9bs/p07Sild30MoKB5r0x3/3/U4IyUIrt/7kU2UY=
Subject key identifier:   CC:E8:B8:FC:71:B3:68:26:B5:96:99:02:08:80:F2:35:8E:39:93:41
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       021B7921AD4D425A280CAF20142E61738CEEDFBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
Manifest number:          CE
Signing time:             Fri 17 May 2024 07:22:51 +0000
Manifest this update:     Fri 17 May 2024 07:17:51 +0000
Manifest next update:     Sat 18 May 2024 10:05:51 +0000
Files and hashes:         1: 130F57124A8921F00083A228FEBE2B78373015E3.crl (hash: sRD1EeY8Lx7wGijIMU58OczY0ZCAzCuq7PTuy1ehsh4=)
                          2: 3130332e34392e34322e302f32342d3234203d3e203230343733.roa (hash: HGKDj3rQnp5EOXE26UHhh9HgiC921vZpFKzbpn1KsmU=)
                          3: 3130332e34392e34332e302f32342d3234203d3e20383334.roa (hash: wLKOf6b+Tq8kG6f6p6KIV/MBe2YDc6UiXHLukzm4qFY=)
                          4: 3130332e34392e34312e302f32342d3234203d3e20323036313530.roa (hash: xaNH/rPLz8DN/CCQywOGQqW+JYkn0mMbcUzrLsXjocY=)
                          5: 3130332e34392e34302e302f32342d3234203d3e203630373831.roa (hash: 5x0PESxgsU2fyNXBtLbl3ofnoMKnashULR0dafxPv+Y=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 10:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:79:21:ad:4d:42:5a:28:0c:af:20:14:2e:61:73:8c:ee:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: May 17 07:17:51 2024 GMT
            Not After : May 18 10:05:51 2024 GMT
        Subject: CN=CCE8B8FC71B36826B59699020880F2358E399341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:a5:01:5b:c1:2c:63:7f:f8:7f:e6:35:05:
                    00:2e:32:0e:0c:b3:62:cc:1d:4b:75:1b:bf:b8:ec:
                    e0:2c:b6:3b:cb:84:0b:16:68:71:77:93:e3:a3:19:
                    13:8a:6c:fc:e1:dc:e4:36:6f:f6:59:4a:e1:fb:cb:
                    ab:c7:b1:bb:39:91:1a:f3:c0:4c:37:dd:74:3a:9a:
                    fb:89:9b:74:ab:b9:df:f8:22:31:3f:1b:71:d1:0d:
                    b3:0c:28:49:d3:1c:a7:fa:f2:34:d9:93:27:2c:b7:
                    5e:ac:14:ae:f2:9d:8d:02:a7:6f:3c:af:54:7e:69:
                    e8:e5:54:d1:a8:d1:e4:ef:d0:d1:d4:3d:50:ad:a3:
                    08:bc:43:fc:58:07:6a:e0:33:ec:cb:a5:25:78:5f:
                    20:d0:d2:3a:bf:88:a6:77:86:93:7e:59:df:8f:3d:
                    84:a0:bf:e2:f7:6b:7e:7c:bb:2b:6c:aa:4e:dc:f4:
                    1a:44:0f:e1:bd:7a:05:11:01:0d:3e:3d:b1:99:93:
                    ab:4e:80:c5:b4:7e:bd:c2:2e:b0:cd:c2:a4:b8:6f:
                    1f:43:89:76:fd:b9:ae:1c:71:cb:46:63:e6:16:a1:
                    d8:52:f8:1a:48:ca:94:b1:ca:2c:8b:44:99:22:f4:
                    12:81:e9:7e:49:15:e1:bc:fe:15:74:d2:7e:00:c1:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E8:B8:FC:71:B3:68:26:B5:96:99:02:08:80:F2:35:8E:39:93:41
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:00:18:5e:c5:d2:2c:60:fd:c3:9a:be:38:64:3a:94:32:48:
         14:eb:1b:74:16:8b:80:17:35:c1:e8:6c:12:79:a9:57:e9:29:
         c1:f5:1a:4c:a4:f2:eb:a7:d5:7b:b0:e7:f0:29:b7:b3:d0:31:
         35:e3:1b:3d:94:00:61:58:56:22:5f:9e:5a:29:4d:8e:64:10:
         4e:c8:14:55:3a:56:96:d0:87:51:2d:8c:a1:da:da:ad:c6:98:
         7e:90:de:d3:5c:4d:f5:fe:97:60:44:81:a3:65:3c:44:de:bc:
         c1:80:98:4b:68:5e:c4:bb:fe:db:70:6b:fb:9f:da:c4:92:2b:
         66:40:91:e6:f2:00:9f:0a:5a:6a:1d:dc:a3:3f:ef:ff:d8:29:
         ca:ab:f1:a1:f3:1f:d6:9f:0c:0f:b6:74:51:8b:58:e9:3d:4f:
         d8:04:1b:1c:f7:cd:e4:e1:08:04:01:7e:9b:ab:b9:bb:61:ee:
         cd:61:f5:ac:7a:c3:fd:64:2e:9b:32:a8:cb:d7:a5:cb:37:36:
         de:f8:de:d7:d3:d7:61:33:30:5e:5d:a2:5f:e6:ce:ec:63:1f:
         fa:82:45:60:d8:4d:e0:a3:f3:e0:bf:22:c3:35:4a:50:9d:4c:
         fd:87:2d:c0:2c:ea:e1:25:f8:19:c1:e1:41:f9:39:05:fb:f1:
         4e:80:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:25 2024 by rpki-client on console-fra.rpki-client.org