Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
File:                     rruT6novxp4sGczngu713bHKMr0.mft (raw, json)
Hash identifier:          WXiQanAvFi0yyswtELia+A034lqQ8DRI/xl6w/Pixbg=
Subject key identifier:   A8:77:B7:F4:D6:2D:7F:7B:2E:A0:A3:E8:DD:A2:8B:3B:43:B6:EE:EC
Authority key identifier: AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD
Certificate issuer:       /CN=A911DFB8/serialNumber=AEBB93EA7A2FC69E2C19CCE782EEF5DDB1CA32BD
Certificate serial:       063F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
Manifest number:          0633
Signing time:             Thu 18 Apr 2024 23:43:13 +0000
Manifest this update:     Thu 18 Apr 2024 23:43:12 +0000
Manifest next update:     Thu 25 Apr 2024 23:43:12 +0000
Files and hashes:         1: rruT6novxp4sGczngu713bHKMr0.crl (hash: On+RRLe7J5gmwUEzFhtRwZ/ujOrIsDa2zXOhDUUpVMY=)
                          2: B837B23E454211EBAE62CF6BC4F9AE02.roa (hash: wp0Z602McIoGNqbrle8tmHTNDsGbKKg46E2yzJZQnXM=)
                          3: 6CF7818CA48F11EEA847593BC4F9AE02.roa (hash: qItzfnuakIwEod0dlJOvKfgIk6C6hHB2VgqOc9CmuTQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.crl
                          rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 23:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599 (0x63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFB8/serialNumber=AEBB93EA7A2FC69E2C19CCE782EEF5DDB1CA32BD
        Validity
            Not Before: Apr 18 23:43:12 2024 GMT
            Not After : Apr 25 23:43:12 2024 GMT
        Subject: CN=6621b011-3f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:aa:14:31:79:d1:f0:f7:01:ee:4f:1e:9f:
                    5a:44:63:49:2b:1a:89:58:53:e3:79:af:14:cf:7b:
                    b9:58:a8:87:95:d5:5e:7c:3c:a5:da:46:a4:19:33:
                    83:09:36:5f:32:0c:1b:43:4e:68:c2:13:7b:8d:e0:
                    7d:ba:37:14:9b:d6:4f:60:09:d9:8c:2e:44:03:5f:
                    5a:7c:0f:e5:d3:4c:93:1a:94:fa:e7:53:aa:f9:a7:
                    0d:cf:55:dc:7c:65:83:f9:e5:f7:44:b0:85:db:76:
                    73:65:e6:0e:52:75:70:7c:10:14:25:be:b3:5a:b5:
                    bc:9f:11:15:1b:c5:8f:e2:7d:b8:fd:61:17:a1:17:
                    36:bf:0c:bc:3d:98:bc:c8:fc:bb:1e:d5:53:d5:88:
                    99:6e:89:91:18:cb:f3:4a:11:47:b7:63:67:1e:4c:
                    d1:ec:ae:9a:ce:ed:d5:ba:59:b7:b8:7b:95:de:bb:
                    07:60:4d:ab:42:c4:07:08:e5:76:b9:a4:08:62:8f:
                    a5:c2:e8:24:bf:47:96:af:f4:28:30:f4:43:aa:a3:
                    7a:62:dd:cd:ae:62:5b:98:f4:a6:f0:f6:aa:bc:c0:
                    39:d4:b5:63:02:f2:07:15:a9:cd:ac:bc:7a:4e:17:
                    1c:b2:9c:1f:c6:23:e0:6c:8e:7a:aa:bd:1a:55:00:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:B7:F4:D6:2D:7F:7B:2E:A0:A3:E8:DD:A2:8B:3B:43:B6:EE:EC
            X509v3 Authority Key Identifier:
                keyid:AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:92:c1:50:fb:40:34:a0:45:5e:29:37:21:6b:b2:f3:2d:84:
         78:b3:4b:1a:96:fc:64:d8:90:a7:4d:ca:f0:c5:6b:d3:ef:b8:
         b4:f8:89:63:7a:06:45:96:5a:d6:c4:c2:72:89:34:65:a6:c3:
         14:99:fe:1c:75:2f:c9:2f:8d:f9:ca:00:56:47:a5:d8:cf:d8:
         02:82:ef:f9:af:c9:9c:80:1b:26:b8:e4:f5:54:f0:a5:6a:83:
         0f:e1:8c:97:9f:c0:1c:a0:b1:c9:68:78:d2:73:e3:01:db:af:
         97:db:e1:07:c9:c0:2e:23:ca:0f:e5:d6:12:64:f4:9d:a7:29:
         87:0e:3a:5e:2d:13:ee:c8:f3:79:bc:24:ef:4c:9d:81:e5:51:
         23:0a:c6:5e:76:b4:47:0a:e5:7e:c7:0e:a2:38:85:39:15:9c:
         12:2f:0a:dd:19:57:38:4f:79:0a:45:3e:36:a5:1f:ca:27:94:
         5a:e4:52:09:95:97:20:f5:e4:fd:f4:03:32:d4:3b:bd:99:f2:
         ff:d1:f1:f1:40:f8:d7:57:c9:a4:22:9a:62:cc:f8:96:6d:31:
         f1:7b:5b:71:8f:f4:97:fa:a6:54:de:c3:6b:a7:8e:04:36:f1:
         b9:21:cc:db:20:d2:fa:d5:2a:a4:d6:d5:1a:d8:49:e3:f5:d1:
         10:48:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:52:28 2024 by rpki-client on console-ams.rpki-client.org