Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File:                     O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier:          /D0By0IsSzlqu1doA4k539mayiYbfkrEpr1xUCj3khA=
Subject key identifier:   9C:18:5C:6E:D7:A5:7E:36:05:FA:75:88:3A:F2:1A:87:AD:C9:F0:30
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer:       /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number:          0634
Signing time:             Mon 06 May 2024 23:48:32 +0000
Manifest this update:     Mon 06 May 2024 23:48:31 +0000
Manifest next update:     Mon 13 May 2024 23:48:31 +0000
Files and hashes:         1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: r2FgBysOkNMgqJHZA3eimQNpQE2h2azTSNLrkfMrAXo=)
                          2: 9FF4AFDA483311EB9674A51BC4F9AE02.roa (hash: RS6NRFfudX3JngWmT6ARTZq8KRoAPpWvEskFjajmRsI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
                          rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
        Validity
            Not Before: May  6 23:48:31 2024 GMT
            Not After : May 13 23:48:31 2024 GMT
        Subject: CN=66396c4f-375a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:05:c0:8b:cf:00:12:e7:39:33:3d:1b:52:
                    fb:1a:84:5c:03:b3:62:62:11:0d:54:c9:bf:e5:25:
                    0a:f0:26:5f:5b:ad:37:08:9b:24:2f:1a:1e:59:fc:
                    59:e6:69:eb:a4:1b:0f:0a:e0:ed:7d:a7:f6:92:f3:
                    dc:88:c2:43:6b:ae:60:39:44:43:c1:ae:c2:19:30:
                    33:34:50:ab:41:f9:44:01:f5:c9:58:c1:ef:31:31:
                    d2:f4:1f:19:6f:9e:27:f8:46:45:e3:7f:1d:14:0c:
                    56:38:75:9b:38:f1:41:ab:3c:f9:e9:1a:0d:ae:48:
                    7b:3a:67:f5:17:af:0e:6d:a1:5c:4a:8f:aa:4a:9a:
                    44:5b:eb:df:38:a5:53:4c:da:7a:85:55:e0:9c:ee:
                    c3:0c:89:77:76:91:c1:ca:92:6d:04:c0:60:67:35:
                    50:2a:1d:ff:3a:43:b6:c6:cb:51:2b:2b:ab:d8:fc:
                    c1:0d:83:e3:86:a9:d3:ff:3c:e3:75:37:a7:bb:9c:
                    2e:46:20:a2:35:41:70:09:2a:f4:1e:87:00:1a:a0:
                    6e:6a:2b:64:97:73:2f:66:96:a4:de:b2:63:9c:7b:
                    2d:d6:00:1e:76:8d:8c:c8:8b:e0:5e:fe:42:1c:76:
                    a1:ab:50:5a:54:15:be:02:39:7e:95:da:ae:a2:2d:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:18:5C:6E:D7:A5:7E:36:05:FA:75:88:3A:F2:1A:87:AD:C9:F0:30
            X509v3 Authority Key Identifier:
                keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:15:c4:03:8c:44:27:d1:96:b5:67:1e:df:0b:61:13:3a:
         61:11:d9:c3:a3:8c:3b:57:d6:10:72:d8:85:28:d6:c0:dd:5f:
         16:55:fa:c6:90:28:6c:20:d9:aa:a6:a1:c6:1c:e0:19:49:10:
         02:19:8e:4f:be:18:45:2d:e5:da:57:30:ba:24:b4:00:16:c6:
         cc:3f:69:a7:15:43:8c:f6:4f:08:5f:52:96:74:f9:39:94:90:
         b9:f7:fa:c5:71:a4:cd:f1:33:39:2f:90:3d:bc:23:dd:c3:8e:
         ba:6a:6d:24:eb:3a:48:33:a5:0c:87:37:06:96:d0:37:59:b3:
         77:f4:6d:46:69:c2:09:06:f4:45:ca:ea:4d:e8:d5:97:da:ad:
         90:07:73:4d:13:d3:75:03:be:9a:be:7d:27:5f:ad:1e:95:18:
         43:55:6d:79:4a:38:f0:2f:a9:39:41:b9:82:2b:01:5a:34:2b:
         2c:8c:30:b2:64:6d:c2:6f:73:d5:ae:49:08:40:e4:b0:2c:a2:
         47:d9:fe:0a:10:c4:9d:d8:6f:4e:a8:97:d8:95:d9:a7:ed:f6:
         10:8f:65:74:2e:0f:00:39:c0:7f:33:dd:b7:4c:46:e6:12:ad:
         e1:49:5e:75:ec:96:3a:da:13:e0:2e:fc:be:40:44:9c:bc:00:
         cb:8a:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:13 2024 by rpki-client on console-fra.rpki-client.org