Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File:                     EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier:          AStRoN67uYdTi2grL9Y/tlK1WrZD9ryvCtx4ExW/xK4=
Subject key identifier:   E7:D1:C0:AE:5C:98:35:CE:5B:9F:57:2E:EF:55:E6:80:8C:54:3A:25
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0B1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number:          0B0B
Signing time:             Fri 26 Apr 2024 19:52:28 +0000
Manifest this update:     Fri 26 Apr 2024 19:52:28 +0000
Manifest next update:     Fri 03 May 2024 19:52:28 +0000
Files and hashes:         1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: gsCA14fe62EPOXApTdmG26VtaUzCNlAnM9yrBaX4GyQ=)
                          2: A80715221A7711EAA20A077FC4F9AE02.roa (hash: oOAOfj2Fb6WqqoSTANNGosErePG33nN7BkMZewQ2Jsc=)
                          3: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: 8Xyzk1L+JNQfdD42/eX0feZyOdxHJzv1XzZ/tUy/AcQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
        Validity
            Not Before: Apr 26 19:52:28 2024 GMT
            Not After : May  3 19:52:28 2024 GMT
        Subject: CN=662c05fc-9d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:80:01:52:3c:91:0f:60:19:d2:b8:dd:cd:
                    82:96:fe:41:d7:77:55:ee:a1:68:dd:8e:d5:a9:f0:
                    ae:cc:d4:45:35:2c:15:5c:7d:c9:79:a5:64:9d:81:
                    2b:2d:c5:18:8e:75:2f:e7:e8:6a:6a:83:34:81:31:
                    90:52:02:d5:4c:1c:41:43:9a:47:5c:37:e5:94:ed:
                    28:3f:13:3d:7e:17:28:ad:78:ae:3d:55:33:16:52:
                    f1:a1:70:8f:cf:87:34:68:9a:28:9a:9f:b0:f4:fe:
                    99:3d:89:37:14:20:f3:71:fc:e3:6f:de:22:c7:01:
                    b0:90:82:b5:10:19:75:6b:87:9e:87:26:54:49:23:
                    4f:8b:e3:55:51:5a:15:e5:a0:3d:b9:32:5b:35:88:
                    1c:1e:5b:21:4f:48:b1:84:cf:b1:d0:e8:c9:0f:6f:
                    0e:73:8e:aa:f7:50:d3:14:b7:e3:ff:10:9f:6e:ff:
                    47:88:c2:27:86:8a:7e:ea:9a:80:9d:92:99:70:79:
                    7f:4a:53:8d:3d:62:cd:34:db:f3:14:69:92:0f:61:
                    62:c3:31:93:61:c1:46:30:dd:b9:aa:e4:d2:3d:0f:
                    ef:20:c9:47:96:f7:78:f5:fc:cf:06:82:68:c5:f2:
                    0b:cb:ab:cc:3e:c3:db:1c:3d:27:ba:e7:23:2c:a0:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:C0:AE:5C:98:35:CE:5B:9F:57:2E:EF:55:E6:80:8C:54:3A:25
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:1f:3d:51:77:00:16:f1:68:83:40:22:0e:5d:08:ae:eb:
         82:7e:84:03:53:d8:b5:f2:d2:33:21:41:99:71:9e:37:7c:ea:
         65:28:d2:5e:43:ad:5b:9d:46:47:c4:31:86:15:94:5c:1b:de:
         9e:5f:d6:12:ba:45:b7:3e:dd:37:b2:31:91:ad:95:c9:7b:85:
         07:b0:8f:17:68:f7:65:11:85:88:15:81:93:bf:4b:22:af:84:
         83:9d:92:e7:8b:83:14:00:4a:8f:cc:74:32:cf:1a:d9:ff:66:
         69:6b:4f:ab:e2:15:f9:16:72:26:e5:87:ee:04:df:d8:7c:43:
         7c:e9:99:76:03:e9:95:f8:6d:3d:1a:df:5b:eb:bc:d1:17:f0:
         4a:5c:a9:c1:df:98:cc:ec:c6:45:11:69:bc:52:c3:5f:f2:ed:
         9a:74:14:ed:79:57:ba:12:fe:9d:98:26:f9:cd:68:2a:d4:3c:
         d3:f0:d4:e3:be:09:7e:7e:2a:36:9f:7d:3d:a8:b4:fc:9c:26:
         df:11:87:03:1c:75:9d:53:44:ed:d5:0c:14:e9:d4:c3:e1:05:
         03:0c:ed:82:dd:0d:f7:49:eb:aa:7a:b4:b7:85:0f:54:fb:5e:
         3e:4e:d4:63:6d:4a:cd:bc:d4:cd:3e:09:aa:e0:da:b5:b5:7f:
         55:2b:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org