Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
File:                     m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json)
Hash identifier:          EzQ24AQAzBEaLP5Z/g6SvQyHrlgyuLLxqRPYRKwI7iY=
Subject key identifier:   51:A7:61:83:BC:9B:B0:3E:6B:45:E8:12:4E:62:EA:4F:40:5F:45:43
Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF
Certificate issuer:       /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
Certificate serial:       0D4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
Manifest number:          0D3F
Signing time:             Fri 26 Apr 2024 18:39:07 +0000
Manifest this update:     Fri 26 Apr 2024 18:39:07 +0000
Manifest next update:     Fri 03 May 2024 18:39:07 +0000
Files and hashes:         1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: eHxgN0pOKw3VViTRtASqfSI9hWvUUmmEYggZpvokJ18=)
                          2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: FnZHey3rMS8XYtVSXTghg880bf4pMQDXQUruX/gl9Us=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl
                          rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 18:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
        Validity
            Not Before: Apr 26 18:39:07 2024 GMT
            Not After : May  3 18:39:07 2024 GMT
        Subject: CN=662bf4cb-0231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:fb:47:7f:43:ad:d5:1e:9d:f5:7b:bc:57:
                    c2:8e:05:c4:34:a5:44:1b:6a:ae:87:83:c5:f3:ca:
                    6b:30:f3:66:b2:73:4e:05:4b:9f:18:a6:f0:9e:dd:
                    0e:55:c4:2f:9e:d1:d0:c3:39:3e:34:ae:14:3a:00:
                    d2:92:01:16:e7:ef:28:23:96:27:7c:1b:90:68:b4:
                    80:f3:e9:ed:70:35:bd:24:d4:d8:ee:d2:0d:22:42:
                    3f:c8:0f:40:b8:dd:89:cb:1e:4a:4c:a4:7a:05:d5:
                    17:6e:39:e1:5b:dc:88:9f:2a:97:61:78:43:53:32:
                    8e:78:a4:47:2a:14:11:d4:e1:0d:a5:fc:cc:3b:db:
                    14:11:73:62:2a:0b:f6:b5:69:0d:fd:72:39:03:09:
                    c1:64:73:cf:81:c3:02:0c:2a:08:66:62:9d:79:b5:
                    5d:5f:3b:fe:0b:08:55:e0:c3:b2:4b:21:1a:4c:5f:
                    f4:b4:e0:9c:be:c5:77:27:1e:53:0c:99:4d:6c:78:
                    24:3f:01:9c:68:10:0f:6e:c8:1c:6c:4b:50:fc:3e:
                    01:e7:f3:91:36:59:c2:e4:b2:b8:dd:af:af:59:96:
                    fb:eb:2f:30:3a:41:10:51:67:52:e4:a5:11:46:71:
                    3d:82:0b:ac:42:83:64:8f:d1:f3:b8:c6:bf:25:29:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:61:83:BC:9B:B0:3E:6B:45:E8:12:4E:62:EA:4F:40:5F:45:43
            X509v3 Authority Key Identifier:
                keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:e4:a6:19:bc:e9:7d:d5:d8:60:0e:7f:94:e7:8d:af:80:
         4b:f8:b8:76:b8:94:ce:13:85:b8:42:c6:c5:d8:73:43:a2:06:
         13:65:33:7c:24:dc:4f:85:0b:db:6a:3f:e6:53:2b:6a:bb:12:
         94:ca:02:6a:00:e5:16:c0:eb:7c:55:89:e5:32:16:44:5b:63:
         90:de:5c:97:5e:d9:61:31:7d:01:5a:84:33:eb:c2:38:b5:c8:
         e7:a1:1d:88:59:e9:74:0a:41:a3:cc:0f:af:aa:3d:a0:31:f3:
         a5:12:36:8d:e8:51:3d:1a:1a:6c:fd:6d:f6:c2:46:45:08:f3:
         f1:55:c6:eb:4d:2d:72:a4:a8:9b:8d:a5:33:46:94:04:38:f0:
         2f:ac:76:30:1a:11:5c:4b:03:05:43:39:fa:ee:11:75:83:3c:
         0e:99:02:ef:28:1d:81:28:fc:aa:a5:d3:5d:9e:fe:a4:5c:32:
         59:ca:a5:4f:ef:d0:b5:26:57:de:28:88:98:34:61:c2:6b:b4:
         46:0e:78:82:1d:8b:76:51:b0:e0:98:c5:5d:80:a1:dd:43:97:
         fd:48:1c:61:68:63:45:7c:e7:5c:95:93:3f:58:7c:a0:e5:6d:
         a1:08:5f:a9:5b:08:78:be:48:cb:ea:c9:53:94:df:d3:46:ab:
         3e:30:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:24 2024 by rpki-client on console-ams.rpki-client.org