Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File:                     7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier:          RsvqEY5nZ2OqJppocH2UCzaN/AAYj5RKsff9LBHVeWM=
Subject key identifier:   D3:89:04:93:D6:66:68:51:C8:DE:ED:54:DD:F0:5E:37:D1:E4:EF:4E
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer:       /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number:          1DB3
Signing time:             Thu 16 May 2024 16:36:19 +0000
Manifest this update:     Thu 16 May 2024 16:36:18 +0000
Manifest next update:     Thu 23 May 2024 16:36:18 +0000
Files and hashes:         1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: ZsPCkZstFQeaD/Ig9KWcsGNVWb2FwTPNtKJWDd9UCeA=)
                          2: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: S+EQjcmJkNrMzgltgGdP7/GhPbOf1V3I0dt132szI0E=)
                          3: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: LR600adR+ShF8XijoU+qNRm44FU6lvyeemQI8bDAVec=)
                          4: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: bKaucMpWR58sm2zOkgSf5zGN9BOOpNYSzXQ2mkNyEe4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Validity
            Not Before: May 16 16:36:18 2024 GMT
            Not After : May 23 16:36:18 2024 GMT
        Subject: CN=66463602-391d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:ed:3e:fb:93:dc:d7:4a:bc:2e:6c:50:aa:
                    ca:c1:1a:44:49:47:fe:9e:4e:9c:8a:92:25:db:2c:
                    3b:2c:59:75:f6:9a:14:8a:69:7a:5b:81:aa:45:80:
                    69:e4:4e:a3:76:7e:ae:f7:0a:a3:7f:00:b3:61:d7:
                    e9:0c:67:cf:9e:16:a3:f7:aa:b1:f2:3d:92:fe:23:
                    e2:b2:35:71:f6:42:21:0e:56:17:f9:40:3d:9f:50:
                    ed:4e:f6:18:83:ce:e5:21:e4:a2:4c:0a:db:6a:be:
                    66:79:bc:c2:47:75:c0:b3:1e:03:77:fb:aa:1e:7f:
                    45:52:2b:fa:9f:a4:0e:da:ad:88:70:70:08:21:3d:
                    30:0d:32:31:72:ea:00:a0:d5:dd:3a:26:b0:d9:27:
                    70:92:18:1f:83:61:96:87:31:c8:07:f6:3a:51:d4:
                    dd:ed:ca:4b:fc:92:db:49:04:79:fc:93:2f:a9:5f:
                    f4:f7:da:2e:fe:5f:12:bf:68:be:d4:6f:cc:3c:47:
                    d2:6d:95:60:f2:76:c5:5c:83:b3:72:c5:3a:85:40:
                    43:63:36:6f:d7:ec:65:83:d5:af:65:e3:2f:42:2e:
                    47:10:8d:81:96:dc:fb:e0:81:57:f5:7e:5e:69:0a:
                    09:da:5d:66:70:6f:04:5e:3e:1a:4b:7b:78:59:ac:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:04:93:D6:66:68:51:C8:DE:ED:54:DD:F0:5E:37:D1:E4:EF:4E
            X509v3 Authority Key Identifier:
                keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:76:c3:80:14:e4:08:4b:87:58:29:0b:f6:a5:70:cd:09:
         7a:c6:14:9a:3b:40:ca:15:a4:85:46:14:55:24:cd:62:d6:74:
         c5:3c:33:ff:87:2c:bd:96:47:6b:0b:1c:9b:45:09:74:29:fd:
         af:eb:07:d4:92:03:81:1b:f0:e7:0f:0c:f1:58:a9:ac:f2:dc:
         f8:cd:48:25:d8:99:1b:84:e7:2d:60:4e:31:61:f4:ed:40:94:
         52:26:42:dc:d4:53:53:60:66:18:fd:a1:a7:be:30:41:f7:a3:
         95:6c:ee:8a:28:36:a4:3a:69:be:2f:8a:49:33:1b:72:a0:6d:
         bb:3e:b8:24:6f:1f:73:46:70:bb:38:72:44:00:1d:50:6f:b3:
         2c:28:ff:ea:4b:39:57:11:54:37:75:7f:72:69:fe:87:9a:c4:
         15:53:99:c1:f9:00:1d:18:11:d0:a7:ac:74:ed:a6:b8:d3:71:
         ec:f4:c0:54:99:13:38:56:5e:a4:51:08:c9:62:d2:54:dc:f5:
         70:11:09:84:79:99:fd:18:ca:d4:19:d3:4e:52:59:42:18:39:
         08:72:bc:8b:55:95:9b:40:5a:5b:71:ce:0a:c7:73:dd:ba:c7:
         83:6d:0d:e8:fc:70:13:ea:0a:09:8c:58:20:b5:44:9e:33:14:
         15:a0:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:01 2024 by rpki-client on console-fra.rpki-client.org