Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File:                     KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier:          QYV/O0S1vRRHepHEfl1GOHGEDTnjyib6Tj3S0z3PmH4=
Subject key identifier:   D5:ED:F4:79:16:BF:BD:47:F2:AF:59:02:FE:03:B2:0C:C8:02:09:1C
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer:       /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number:          069E
Signing time:             Mon 06 May 2024 23:21:54 +0000
Manifest this update:     Mon 06 May 2024 23:21:54 +0000
Manifest next update:     Mon 13 May 2024 23:21:54 +0000
Files and hashes:         1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: tm+xd5ZWJT2pYROg3/hTGmD2fUmGcaHIBZvbt8MKg5k=)
                          2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: 6O8csL9rEmKpGA0+g6+1hX4YH6tXwN3WNyqAyDg62Rk=)
                          3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: D6LW0lHvJZ2QNOTyemz9aNxZKdOYYCFmrW4bdydyxQw=)
                          4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: hjbGiC9tNJEkFKnIMNevejeQRVm3trPrZNT8kiV/az8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
                          rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
        Validity
            Not Before: May  6 23:21:54 2024 GMT
            Not After : May 13 23:21:54 2024 GMT
        Subject: CN=66396612-491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:55:76:12:66:2f:fa:34:24:5f:82:0e:66:
                    7d:3f:ea:8e:90:19:25:91:2a:ce:1a:42:5c:38:e9:
                    38:96:9e:4d:bf:18:76:3f:e5:c2:ea:9f:03:d3:34:
                    f5:b1:96:ed:30:3d:a3:0a:7e:cd:84:50:e1:88:d2:
                    1b:43:aa:6c:36:f5:9a:67:c0:bd:5d:3a:28:9b:53:
                    6d:d2:32:54:44:2e:6f:b6:28:9a:c3:15:fb:4d:14:
                    d3:ca:d3:b7:f8:8b:75:c1:7e:6b:4d:58:b5:9c:d8:
                    01:99:96:c4:81:c6:33:1c:50:d8:1f:35:a5:f0:39:
                    86:e0:14:87:7d:99:f1:12:9f:03:f1:e1:44:53:91:
                    67:65:bc:7c:b0:fb:31:4c:fe:2c:a2:28:3c:3e:d5:
                    67:bd:d3:61:8b:be:34:a4:b4:e5:2f:99:18:5b:d6:
                    84:bf:b5:12:31:6f:7d:c5:67:e0:1c:20:62:98:7d:
                    3e:74:47:3d:a0:f1:ed:ac:17:db:fd:68:11:4e:b0:
                    ae:b2:41:85:40:55:e7:42:52:24:0c:1e:38:ab:75:
                    36:e1:92:1d:1f:d7:69:d8:02:11:3e:c4:37:2f:b7:
                    ed:f1:86:71:e7:65:16:ef:30:fa:82:24:a5:cd:d5:
                    e4:52:b3:74:66:b8:21:b7:6a:7f:ed:c3:d4:93:7b:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:ED:F4:79:16:BF:BD:47:F2:AF:59:02:FE:03:B2:0C:C8:02:09:1C
            X509v3 Authority Key Identifier:
                keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:be:56:ce:da:e8:90:55:e8:40:ce:33:99:c6:4c:dd:d5:
         7e:33:ae:86:21:a2:50:48:be:af:a0:ab:e6:79:e1:04:28:62:
         18:cc:dd:e1:43:b7:77:4b:4a:70:25:b0:f0:f1:51:2e:43:9c:
         35:79:96:bd:4f:d8:6d:69:3d:fc:07:6b:d3:ba:0d:c5:9f:16:
         10:6b:35:26:75:68:34:d5:e4:da:90:c3:d6:d1:f8:4e:9c:3b:
         95:0e:de:fa:ea:2d:88:cc:a5:8e:d4:13:62:a0:fd:71:4b:36:
         ad:10:58:9d:c9:2b:b8:e5:09:ca:f1:58:50:25:76:2c:dd:9f:
         81:82:d8:94:2e:1c:65:b7:d5:15:75:0d:9c:d2:9e:8a:a4:07:
         c8:05:6d:37:99:f1:b1:d9:f6:5e:37:91:4c:0a:d2:f4:d5:c9:
         fe:ff:15:48:cb:78:85:29:5b:8c:cc:46:b3:2e:1e:57:99:be:
         eb:38:5d:dc:f9:84:62:df:56:5f:cc:c6:67:0d:e7:6b:42:39:
         26:46:99:3d:38:cc:c2:a9:4c:9e:6d:96:09:9e:b1:cf:69:25:
         25:1e:30:1e:67:3e:04:da:79:ee:47:8c:c8:1f:47:97:6d:47:
         3c:a6:51:a0:66:93:aa:42:cb:13:cd:25:41:92:2b:16:f9:9f:
         10:26:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:14 2024 by rpki-client on console-ams.rpki-client.org