Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          N7S6pY2o9jy/CB5Ie5f3W4yjtVQSNpSAz4WLd7+7Sco=
Subject key identifier:   C3:23:34:61:03:8C:FD:29:7B:D8:CC:C8:CD:B9:C0:7D:DD:6C:98:EB
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          0113
Signing time:             Fri 03 May 2024 05:21:19 +0000
Manifest this update:     Fri 03 May 2024 05:21:18 +0000
Manifest next update:     Fri 10 May 2024 05:21:18 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: S5QP3oFQ/Nr4rlyhdkxLI8giSmS8uCJwr628WdZ4pJs=)
                          2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: uBw9Aqk4dRdoE/7YoKcX1Ka7LHHB4GelESZKav8niz0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: May  3 05:21:18 2024 GMT
            Not After : May 10 05:21:18 2024 GMT
        Subject: CN=6634744f-ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:b7:79:16:ae:1b:93:d2:cc:bc:1f:87:c4:
                    c8:cd:85:ff:5f:4f:56:81:24:bd:86:68:ff:8c:92:
                    2c:d8:de:83:e3:bf:38:eb:6b:e8:7b:b7:bf:50:28:
                    f8:8b:fa:94:66:c2:3e:52:82:f7:6a:bc:7d:64:56:
                    bd:1f:de:f6:6b:7e:88:0b:1f:65:51:3f:a7:81:ad:
                    2f:af:1a:c6:8f:2f:6d:76:9c:e1:fa:73:0a:e9:81:
                    8d:3e:fe:d5:f1:c3:ca:65:e6:df:d6:98:c9:de:49:
                    46:80:b6:6b:92:48:fb:83:ef:e5:75:49:4f:25:df:
                    64:90:db:a2:0e:c6:ac:6e:78:e5:27:aa:bd:b2:f6:
                    cb:c9:54:c8:63:ca:32:c4:f8:43:39:cc:0a:d5:11:
                    49:05:f9:54:87:86:1a:b3:a8:c4:ea:fc:96:78:0b:
                    b5:a9:ca:6a:2e:ce:85:77:92:c9:20:0b:57:b9:15:
                    1c:e4:5b:97:3b:45:0d:b8:d4:c5:62:ba:28:ae:b2:
                    21:b0:98:0f:09:25:0c:6c:03:c1:78:c3:d8:55:31:
                    32:24:6e:3e:64:c4:90:5f:f8:72:95:e3:04:74:73:
                    9f:c5:1a:6b:8e:88:87:a6:4d:7e:3d:ad:05:ae:0f:
                    fa:22:52:2f:03:c3:fc:a9:5d:b7:54:72:3d:a9:2b:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:34:61:03:8C:FD:29:7B:D8:CC:C8:CD:B9:C0:7D:DD:6C:98:EB
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a9:f9:63:c0:1e:7c:e2:94:5f:3c:40:7c:44:08:b2:9e:8e:
         f3:5c:f3:9a:69:3e:09:77:02:53:60:f8:f4:e6:cd:f5:9c:23:
         46:6c:40:53:4d:97:22:f3:61:20:1b:f5:3b:ec:7f:88:5a:7c:
         7a:00:94:ce:14:d4:ff:74:e3:12:bf:78:c0:93:f4:d6:4a:ba:
         f2:25:c7:e5:36:77:25:47:c7:db:0d:a6:54:25:52:62:a5:f9:
         15:c1:b8:96:9f:dc:4a:38:02:9f:ef:ac:09:83:0e:89:89:14:
         9e:45:4c:a0:a1:fb:8f:27:77:6f:87:81:fb:8b:fa:c9:0b:5d:
         67:7a:8a:33:3d:45:54:f3:bf:ec:7b:ef:fc:9f:c4:b3:52:05:
         0c:f0:e1:4f:20:8f:1f:99:eb:a2:b5:ab:5c:b5:94:aa:f2:52:
         27:3b:0e:20:da:be:f1:3d:ae:4a:a6:e7:a6:5c:ff:d8:fc:f5:
         ee:bb:b8:86:1c:29:17:19:4f:ad:1a:dd:cf:ce:77:c8:5d:64:
         18:d8:38:d1:15:5a:9d:e6:6d:16:06:b5:0e:36:f6:e2:04:26:
         f7:41:2b:f5:bd:2d:cb:f0:08:f1:80:9a:21:37:0f:0a:3f:d6:
         dc:e6:3d:78:d1:98:34:a8:4e:74:f8:02:fe:3a:a7:d2:1d:f2:
         ad:a4:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:18:27 2024 by rpki-client on console-ams.rpki-client.org