Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
File:                     lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json)
Hash identifier:          U9pJJvPtJosG4poZ5SYpOHCgxuzKCcITJL0Gl6pH3/k=
Subject key identifier:   91:C3:86:37:52:23:B0:F0:52:8D:5B:39:DC:B8:C0:CD:4B:AA:CE:68
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
Manifest number:          0108
Signing time:             Fri 03 May 2024 05:41:16 +0000
Manifest this update:     Fri 03 May 2024 05:41:16 +0000
Manifest next update:     Fri 10 May 2024 05:41:15 +0000
Files and hashes:         1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: 2xHtZ0e80rG3OsA4w1xia9d1t2opnahknc0muCVKDPY=)
                          2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: UV7m9UL6VQkCLJOeRN4XING/h7wyzD1/+qKh16w25VE=)
                          3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: X4f4JpNrLXW6Kc1FSQUgNny44PNWQc3+/3wUXFRNjBI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
                          rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: May  3 05:41:16 2024 GMT
            Not After : May 10 05:41:15 2024 GMT
        Subject: CN=663478fc-da20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:b4:1f:58:1b:c8:50:68:ae:7e:8c:e5:f1:
                    c0:c2:dc:44:38:28:56:c7:12:ae:b0:21:ff:ac:b5:
                    2d:0f:65:fe:74:35:13:e6:1b:e0:69:78:61:07:24:
                    5f:07:fc:63:a0:f6:ac:81:7b:ad:81:64:ea:8b:df:
                    6f:b6:4c:d9:49:60:13:a8:9c:a1:c9:9f:c8:00:5f:
                    13:1c:40:9a:c5:bf:97:8c:f2:42:4e:81:69:92:a6:
                    26:9c:e5:7e:75:92:c2:32:77:e3:b2:89:49:d7:a0:
                    c9:54:d2:80:82:5b:6f:67:e9:69:b9:1c:11:c6:62:
                    64:6d:e8:43:c6:a6:33:90:a8:45:c9:a8:70:f4:76:
                    4a:49:45:4b:3a:5e:cd:92:be:74:9f:02:9f:bd:cb:
                    4f:c7:44:4f:50:dd:7a:a6:4f:87:22:c5:c0:b6:3c:
                    ae:7e:02:04:e7:bb:96:b4:5d:7a:6f:b3:13:0e:1b:
                    0c:ed:b5:09:99:70:b3:37:59:ad:2e:b9:79:31:7d:
                    f4:fb:57:48:d2:2e:5b:8f:53:57:82:12:61:e1:2f:
                    41:42:c3:ac:31:ff:cf:6f:57:6b:76:e6:03:44:7b:
                    05:a4:87:39:0b:45:de:d5:77:d7:63:25:51:fc:78:
                    57:5d:0a:6b:2f:38:6b:30:0e:f5:d4:73:20:e9:1d:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:86:37:52:23:B0:F0:52:8D:5B:39:DC:B8:C0:CD:4B:AA:CE:68
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:d2:28:c2:41:f2:79:31:7b:01:38:ca:8e:57:e3:13:78:
         a3:2b:2d:24:10:47:c7:e2:87:1a:47:24:99:b9:6c:5c:32:21:
         6b:b5:32:06:62:81:45:0d:00:6f:ac:15:b4:e9:9a:f0:98:e4:
         0c:40:83:ad:42:b3:06:9d:95:e9:7a:af:6d:ae:1a:26:09:3c:
         74:39:fb:7a:3f:55:58:a7:6f:62:bc:0f:0d:af:5d:01:24:42:
         62:4c:b7:88:3f:4c:f0:52:4d:a2:5a:07:9f:6c:04:ab:4b:b2:
         37:9e:02:3e:c0:01:61:d4:0e:35:eb:b0:3c:fa:16:95:94:ae:
         18:bf:d9:fe:94:10:65:0f:03:52:33:c4:f6:84:5d:18:84:00:
         75:3d:5c:46:e4:03:a6:20:07:9d:98:15:53:ac:dd:44:25:53:
         a0:36:1a:0f:15:1e:f0:d7:40:a0:d1:6f:6e:63:31:f4:cb:66:
         51:b0:be:2f:9a:ee:64:e0:cc:f2:4f:63:25:fc:4e:58:0b:2f:
         1c:ca:4a:ae:7f:28:48:86:d1:7d:bb:76:60:d1:79:c5:92:ed:
         dc:f1:cc:b4:45:04:d3:f9:77:41:c9:74:ac:e6:a8:b8:ef:78:
         0b:e0:f3:07:9e:ca:fd:ae:52:31:d1:30:c4:e0:46:dd:62:2f:
         2e:da:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org