Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
File:                     nte69j9VTx_qVw4Zuvae3tDZ5L4.mft (raw, json)
Hash identifier:          WvcB7tZNQWwa5UyIcd6+rVIgLGVZ0NSwu2byEAxL1Es=
Subject key identifier:   88:AF:45:A0:66:F7:D1:40:67:0C:1D:1E:8C:25:8E:07:5D:F7:30:CB
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Certificate issuer:       /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial:       0AA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
Manifest number:          0A9B
Signing time:             Tue 30 Apr 2024 20:31:10 +0000
Manifest this update:     Tue 30 Apr 2024 20:31:10 +0000
Manifest next update:     Tue 07 May 2024 20:31:09 +0000
Files and hashes:         1: nte69j9VTx_qVw4Zuvae3tDZ5L4.crl (hash: 3B9R3vZOSzFJnGxVAebRNU8eYjtrsPmTtLaA1pl1JZg=)
                          2: 97285ACA5BB111EEB6671243C4F9AE02.roa (hash: jGbYSk9KdMSBjG+BeH7pkeg3xid/VEVNnqkWWM42xDY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl
                          rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 20:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
        Validity
            Not Before: Apr 30 20:31:10 2024 GMT
            Not After : May  7 20:31:09 2024 GMT
        Subject: CN=6631550e-62b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:ce:f3:ae:f3:a9:0c:ae:9f:61:29:21:7e:
                    70:90:b3:cd:61:a5:4e:64:37:2c:53:d6:a7:21:61:
                    2d:46:e1:7e:3a:c8:6f:12:0a:e8:6d:50:08:e1:b7:
                    9a:ed:a2:dc:ba:7d:50:60:70:7f:5f:d1:a2:ca:b6:
                    36:0b:ac:f3:0a:e5:b4:3f:b5:0a:c2:57:42:0a:95:
                    dd:42:67:2a:97:42:1d:84:dc:7e:a9:0b:63:99:1f:
                    25:58:ad:1a:57:bc:a9:1b:f1:6d:4c:f7:ed:6c:12:
                    95:7f:11:27:9e:72:6d:ed:d5:c6:f3:65:08:5a:13:
                    79:7a:6b:1a:38:2a:bd:1a:30:79:a3:77:4b:b3:94:
                    6c:6b:ae:ac:ee:64:13:b6:18:5d:86:94:10:b7:56:
                    0a:94:8f:fc:d0:f9:d2:82:5f:d4:e5:92:1f:ac:54:
                    35:cf:cd:e2:4d:b8:13:06:db:f9:bb:99:ec:54:a8:
                    48:ff:6f:c8:ac:91:08:1c:89:01:b3:3c:98:4f:7f:
                    15:87:f4:d3:71:2b:a9:b1:bf:4e:0f:6f:3e:bc:12:
                    87:ee:95:16:63:b8:99:71:4a:8c:4c:5f:7b:08:c8:
                    c2:7c:32:35:38:7f:51:35:9d:51:a7:8b:49:08:2f:
                    de:fe:fc:8a:85:01:d9:0b:f3:bf:19:2a:1a:5e:f3:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AF:45:A0:66:F7:D1:40:67:0C:1D:1E:8C:25:8E:07:5D:F7:30:CB
            X509v3 Authority Key Identifier:
                keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:6e:1a:f9:14:e2:44:8d:80:7b:73:45:ae:38:4d:da:07:
         83:0e:1f:16:0e:f9:e2:ee:b6:1b:a2:87:02:2c:10:12:89:86:
         fa:18:d3:83:81:f5:62:34:b3:11:a2:72:3b:c1:94:6e:0a:1f:
         a7:75:4c:dd:0d:02:f1:eb:dd:5f:d2:2f:91:1e:bd:c5:f5:51:
         a5:50:bc:69:1a:78:97:a4:43:16:6c:10:e5:2e:71:fc:d5:50:
         68:91:f5:82:52:c8:e3:a3:0a:d0:b1:f2:1c:24:c8:74:e7:15:
         ef:18:a1:5a:f9:e1:3f:fa:86:aa:d0:86:0a:c4:de:d8:93:83:
         51:63:eb:bb:ab:59:f6:05:68:f3:59:b7:b8:65:1b:23:f5:41:
         a5:05:c1:09:4e:05:4f:40:72:4e:3e:05:3a:4a:81:f8:7f:b6:
         e8:bf:4b:b4:af:4f:dd:39:b0:f1:52:75:a7:ba:d2:d5:0e:54:
         bc:1b:79:1b:7d:f1:2c:61:af:67:21:d7:55:f3:34:5f:ec:de:
         13:0c:1c:df:ed:c6:bf:5c:da:74:7a:33:d2:3d:2f:20:c6:e1:
         e3:8c:6b:a1:cd:30:92:f9:84:67:c7:c1:a3:d0:63:c4:2f:e6:
         38:d3:fa:2f:01:36:fd:1e:26:8f:bb:b5:d2:7a:97:71:55:87:
         51:f6:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:37:55 2024 by rpki-client on console-fra.rpki-client.org