Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File:                     h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier:          p8SDMTDDRwf2C+4u9Mb4D85cDUGIvovjRyUahC2WtPE=
Subject key identifier:   7C:49:8C:F4:20:5B:75:7C:20:0F:AE:FD:1A:23:C2:5E:F0:4E:BB:35
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number:          0119
Signing time:             Fri 03 May 2024 05:32:27 +0000
Manifest this update:     Fri 03 May 2024 05:32:27 +0000
Manifest next update:     Fri 10 May 2024 05:32:27 +0000
Files and hashes:         1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: NQ8OCQ8G2VQjIBq0ocDvAT2qVyHpDHApOGS5ovKZBpY=)
                          2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: ywhvDJvQxyWr5M5HeSY6XX6kpPDyeGDW1U6yRs4SzyA=)
                          3: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: HEP7ygO7vwbJNA6a1Yh81guofjc2KZAgniicQPiMuwk=)
                          4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: bgF9MEhNt9OhTuD+qzVTZBt1Y1hR4lpAcvN75ie3PMk=)
                          5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: 4nca+zjw/oceArKoao4vA7g0YEPiT0qMny/vAkel68o=)
                          6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: vZLrRb8D5tduBuTVKoErlXudBIz+MpXOKS0TeU5hY9o=)
                          7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: ua1AQMU7bCCk0fcUdLe1mRz8NyiPnpe550PawenVzJc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: May  3 05:32:27 2024 GMT
            Not After : May 10 05:32:27 2024 GMT
        Subject: CN=663476eb-e1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:3c:36:1c:76:b7:f6:52:3d:31:69:af:79:
                    ea:14:81:49:21:2a:50:81:dc:e7:94:84:23:64:58:
                    8c:9f:63:97:38:a2:ea:9a:c0:ac:94:67:ba:d4:b2:
                    df:34:28:b9:af:c1:d7:b1:55:35:15:c0:5e:bd:bf:
                    72:f2:a4:73:d7:99:b9:9b:4e:80:82:fc:8f:c2:84:
                    1e:5e:e7:6c:d6:c5:98:4b:34:6c:e1:34:b2:37:c6:
                    fe:70:33:6e:7d:e2:cf:99:1f:a5:41:93:3a:a0:bf:
                    af:a8:85:a3:cc:b2:74:67:4a:49:2c:7d:d9:d7:4a:
                    b6:07:dd:93:49:33:b1:5c:a7:a9:c0:34:ce:41:7e:
                    42:26:84:15:14:73:e6:57:83:86:51:18:6f:4b:e6:
                    88:ba:89:70:39:2c:67:0e:39:f4:fd:f0:ff:3e:68:
                    ff:b2:56:3a:ed:2f:4d:7c:a3:92:55:69:68:64:c9:
                    82:51:d8:0c:3b:0e:28:7a:20:37:ec:1c:87:3e:0c:
                    d7:84:d3:66:4d:24:7a:36:26:31:21:5f:9f:a2:8c:
                    43:4b:69:f2:98:b8:c1:36:cf:cf:31:e4:d8:81:4e:
                    81:0b:24:79:e6:b1:b5:f1:ca:6d:b0:ec:ec:ba:5d:
                    99:c0:45:57:28:ae:28:17:97:39:0c:f7:fc:44:82:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:8C:F4:20:5B:75:7C:20:0F:AE:FD:1A:23:C2:5E:F0:4E:BB:35
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:c3:78:a2:02:f4:35:de:f1:6d:66:78:1b:d9:7f:c1:c2:
         c5:1e:f1:13:68:07:08:eb:01:55:f4:b0:6a:9e:b6:27:4a:5d:
         5e:76:6c:d2:c6:eb:26:30:50:28:0b:1c:41:28:3d:e5:da:23:
         0f:a1:0c:9c:84:03:c5:e6:a6:b9:14:fe:3d:f5:86:14:7c:e1:
         b3:82:f6:77:2a:ca:e4:2c:a7:27:b6:23:cb:95:93:74:b1:67:
         71:fd:33:67:59:7d:e8:22:0b:1a:fc:a4:0d:ea:43:5d:00:42:
         ef:59:de:8b:17:dd:8b:8e:14:a9:d2:25:34:92:d3:ce:46:5c:
         e2:10:5f:92:8d:6c:a4:ef:7e:b3:88:8e:a1:ca:f5:13:9e:c1:
         28:b7:91:ea:44:a2:a4:81:59:30:42:00:55:4a:9d:01:30:29:
         56:f8:33:d3:14:44:31:76:68:c9:f9:d3:e5:cd:aa:5a:b3:a2:
         6b:fc:8c:30:f2:22:d5:c3:21:89:03:be:71:71:1c:e1:df:59:
         94:2a:8a:17:04:52:d7:e9:71:fb:a6:66:ca:36:32:ed:8c:ef:
         33:79:c6:a1:57:72:97:87:cd:7a:1a:7a:83:82:f3:5c:a3:7b:
         d0:33:5c:2a:d8:3d:9c:62:66:c6:45:87:bc:33:56:a8:71:05:
         d8:99:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:18:27 2024 by rpki-client on console-ams.rpki-client.org