Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          tfuXYyQVOKfR4grmA/Ey8URDDDFPcwYqhEScT7SlxQQ=
Subject key identifier:   27:03:7F:C5:40:FC:C2:8D:6A:5B:03:D1:74:E2:27:02:FD:B2:A6:DE
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       0557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          0552
Signing time:             Wed 01 May 2024 01:10:54 +0000
Manifest this update:     Wed 01 May 2024 01:10:54 +0000
Manifest next update:     Wed 08 May 2024 01:10:54 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: /lVEFSQt+u0dggHcwh/nUgyRSDZ8u/A2F0E/kOmlfzQ=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: jPyurVfkc85baAwHPvIc7125qWCdlwHoxkJxd7xe8Gw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 00:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: May  1 01:10:54 2024 GMT
            Not After : May  8 01:10:54 2024 GMT
        Subject: CN=6631969e-85e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:7b:e2:9c:f5:ad:31:2b:eb:8f:81:4f:b9:
                    56:2c:97:f0:19:64:43:14:2e:18:fe:86:56:14:99:
                    47:3d:32:36:5d:f9:75:5e:93:63:17:be:3c:d2:f3:
                    b2:14:48:9c:64:19:61:d5:69:50:86:d1:2a:a9:72:
                    54:b6:ac:f0:c8:25:4f:cd:b1:22:f3:83:66:d0:bd:
                    55:46:b3:ff:9a:62:18:c2:c5:93:e9:8b:55:13:51:
                    79:46:ef:1d:62:55:89:01:c1:0e:b8:22:ef:66:15:
                    9f:09:ce:8b:56:ce:66:29:13:76:f2:e4:3f:2c:ce:
                    bb:61:24:d8:68:37:cc:02:22:31:09:88:68:44:4f:
                    0e:09:a7:83:a3:1b:69:6d:0d:45:ad:cb:a0:87:34:
                    1a:b0:d0:d9:bc:1a:14:c2:66:36:6c:68:b1:93:83:
                    c9:72:ca:1a:16:8d:21:b6:71:14:ed:2a:bf:7c:b0:
                    57:bd:80:7e:3f:36:ab:57:c0:a4:c9:8a:64:7c:76:
                    a1:ee:55:a3:99:47:6a:d1:83:52:b3:a7:72:71:e7:
                    7a:83:c3:fe:f0:9c:cc:8c:5c:6e:49:69:82:8d:df:
                    29:1c:c1:52:20:af:db:b2:e8:a0:50:ee:06:90:2f:
                    30:49:5b:18:92:1f:9d:31:17:5d:48:fa:cd:6a:90:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:7F:C5:40:FC:C2:8D:6A:5B:03:D1:74:E2:27:02:FD:B2:A6:DE
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:4a:eb:b2:cc:63:2b:8a:ee:a5:3c:75:39:c5:19:57:71:
         28:6e:7c:9c:84:29:87:f5:22:88:d6:49:c2:13:dd:be:78:49:
         b9:ff:0c:bc:68:c3:87:02:d9:dc:d0:bc:9b:11:04:45:8f:26:
         2c:a2:54:fb:2b:24:fd:1d:73:a1:f1:de:4e:84:3a:de:a6:57:
         e2:b4:56:4d:0b:af:4d:b0:46:bf:d5:5b:ed:bf:af:b2:59:e9:
         1d:ec:3a:cd:7a:66:13:c7:6f:dc:b0:7a:bb:77:b5:58:bb:ee:
         cd:3a:38:36:c4:be:c7:10:0b:ce:bc:c6:d8:fb:a0:47:8b:49:
         fd:0c:46:c7:78:e0:87:fc:12:4b:e1:c9:82:17:8d:1d:97:d1:
         8e:f9:e1:27:bd:36:af:8e:71:44:55:ca:d4:69:30:55:57:29:
         54:70:2c:87:73:31:99:83:5b:70:65:cf:3e:b0:45:c4:4c:d8:
         33:84:37:0b:a2:4d:18:9f:22:0e:b6:8f:e8:49:59:de:7d:01:
         9d:df:cf:1d:88:49:17:0f:de:f4:1a:f6:6f:66:80:95:61:00:
         ff:44:46:d7:a4:10:ab:98:18:41:1a:9c:de:c4:fd:22:6d:da:
         a0:4f:9b:a8:b3:92:7f:da:0c:95:ce:8d:9f:21:d0:52:48:e1:
         4d:be:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:08:02 2024 by rpki-client on console-fra.rpki-client.org