Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.mft
File:                     foEDyGWbLfZyc7UEr3XGZmUxARY.mft (raw, json)
Hash identifier:          TGYQf8l86my9IGQezGW7P4ft68ETWs7RQKRg/FXscOE=
Subject key identifier:   A4:67:BA:17:5B:21:1F:A8:65:5A:98:99:E5:EE:37:14:9F:91:CA:BF
Authority key identifier: 7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16
Certificate issuer:       /CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.mft
Manifest number:          0561
Signing time:             Thu 25 Apr 2024 00:42:18 +0000
Manifest this update:     Thu 25 Apr 2024 00:42:17 +0000
Manifest next update:     Thu 02 May 2024 00:42:17 +0000
Files and hashes:         1: foEDyGWbLfZyc7UEr3XGZmUxARY.crl (hash: 7dqkkro9SABx876hU9TnF9x1Gu0JWcoG115z2ZGPPpk=)
                          2: 9F14DAB096EC11EBA1E20768C4F9AE02.roa (hash: +c21vM5S8FUhwBd9fOdz/34SgW1Gp00db237o8I2yzQ=)
                          3: 9FD744CE96EC11EBA1E20768C4F9AE02.roa (hash: we6sPidoqk7Ad1RQiQ/gR4dEywgbUcN6wPOmveCv5l8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.crl
                          rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
        Validity
            Not Before: Apr 25 00:42:17 2024 GMT
            Not After : May  2 00:42:17 2024 GMT
        Subject: CN=6629a6e9-aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ae:3d:93:16:75:40:fd:c8:23:cf:2d:02:44:
                    ad:e4:30:cb:b0:8e:bf:a9:63:65:b1:d6:f6:52:80:
                    ed:1c:80:45:4c:2e:05:e9:d8:d9:fd:de:5b:00:72:
                    69:02:35:b5:4f:64:1a:c3:d9:a5:78:34:a2:3b:5d:
                    e4:29:ac:b7:ed:16:94:f6:5d:a2:f9:7a:0e:fb:35:
                    34:2c:46:d5:5c:cf:c3:3b:a5:22:c9:49:9e:29:0b:
                    81:d9:95:bc:dc:8d:81:9a:0f:bf:2b:ed:2f:aa:16:
                    84:2a:50:46:b1:37:6d:0b:c5:74:fc:1b:ed:1e:30:
                    f8:1c:b1:b7:4f:f2:4b:4b:82:62:73:c3:25:ba:4f:
                    a1:cf:db:59:20:ae:98:7a:63:bd:02:b3:a2:43:34:
                    0e:31:e9:15:7e:0a:0c:2f:ac:d1:e5:96:1c:f9:5c:
                    1a:67:65:a7:0b:cf:fc:6b:a8:5a:a2:60:44:aa:ab:
                    1a:f9:02:ba:31:3d:e0:22:e7:d7:59:1b:cc:bb:48:
                    41:48:42:23:09:50:bb:85:75:0e:76:bb:2f:86:56:
                    7d:97:f4:4a:88:0e:36:47:6d:10:2e:fc:67:6a:26:
                    55:27:8a:24:e3:c8:3b:5d:08:96:c6:a0:24:8d:22:
                    6a:5c:bd:f0:41:2f:27:b6:fd:4e:8a:e3:53:33:53:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:BA:17:5B:21:1F:A8:65:5A:98:99:E5:EE:37:14:9F:91:CA:BF
            X509v3 Authority Key Identifier:
                keyid:7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:7f:fc:54:da:6a:e4:4a:13:14:18:a4:fe:2b:29:b3:72:
         22:66:cf:9a:da:77:5d:82:cb:e0:31:df:3c:42:8f:49:ec:95:
         f7:ea:34:9c:13:88:d9:6e:96:f9:6b:b4:d2:a2:af:b7:7b:f1:
         3b:62:68:0a:50:0e:15:f8:1f:fe:6b:25:ae:50:c0:26:87:f0:
         d9:f6:7e:f7:52:19:cc:79:2d:c1:64:2c:d6:bb:62:42:0a:bf:
         e6:27:d5:21:8f:7a:53:87:d3:e5:9b:4c:6a:2c:32:3c:0e:ac:
         67:18:fb:09:a5:9a:5c:87:d1:e4:63:93:7f:b9:22:de:a0:2f:
         8d:cd:e7:2d:47:5a:cb:e1:bb:50:89:82:37:87:a2:57:c2:ba:
         45:ac:5a:4a:a0:c1:87:59:62:d5:c8:da:f9:eb:57:69:36:1a:
         c1:76:62:74:4e:10:73:c2:bb:df:3f:f5:9b:61:11:0d:9f:87:
         15:cc:af:e7:a5:3d:20:29:3f:b3:e8:5e:c3:14:ef:83:96:9f:
         34:cd:5a:92:b1:19:9a:2e:db:81:42:53:44:36:e8:bd:42:de:
         fa:e0:83:a1:6b:b9:4c:d1:4b:49:f7:c2:d4:9b:c6:3b:0f:e9:
         00:3a:54:bc:d4:b4:2e:29:95:60:ec:7b:dc:0c:5a:5a:75:6c:
         41:7f:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:19 2024 by rpki-client on console-ams.rpki-client.org