Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File:                     HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier:          muNclCSg1maSL5UtW2sP8QTc+uNEnbpzLyMKZ7GCyQo=
Subject key identifier:   71:17:C7:84:8D:47:59:F2:81:BA:CB:F5:8E:6C:1B:2E:9B:FB:5C:65
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       17A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number:          1794
Signing time:             Fri 26 Apr 2024 17:01:00 +0000
Manifest this update:     Fri 26 Apr 2024 17:00:59 +0000
Manifest next update:     Fri 03 May 2024 17:00:59 +0000
Files and hashes:         1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: 7XmH7nuSfaND0tN64qOlmkJP5aCcAyvajrvwzSAvP6k=)
                          2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: Rh7aJ4hIvXLuEuUFgVNnC6P+3//xGQ+N4X6CdgBcs2w=)
                          3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: ytFM1wPJb+ZhqA3+BNReAuRWiZPk0aQTwlVWywjJ0c8=)
                          4: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: wfXqeuO++f5A3YBGSiIBBPBFFyOKEJbFfKtCHF7f7hI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6057 (0x17a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Apr 26 17:00:59 2024 GMT
            Not After : May  3 17:00:59 2024 GMT
        Subject: CN=662bddcb-e8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:87:76:82:49:22:41:ed:fa:7b:09:87:d7:
                    a1:99:5a:c4:4e:f4:9b:84:64:ed:ef:40:2b:31:41:
                    1f:d7:f7:95:de:35:2e:e6:60:3e:11:9f:a2:ea:d9:
                    67:06:07:21:7f:a1:dc:a1:2e:37:26:c6:63:08:a4:
                    63:de:06:d8:b1:e2:42:10:9b:63:aa:a4:26:3f:0c:
                    7a:51:ed:8e:2e:d6:75:91:2a:d2:3a:2e:04:b5:a8:
                    be:77:bf:bb:90:42:3d:4e:dd:5f:06:63:ab:1f:6b:
                    76:8e:74:a7:52:a1:03:12:60:ec:65:02:4e:c8:ec:
                    9e:31:ac:4b:e6:00:37:e7:20:c5:a4:62:a8:51:b7:
                    da:12:80:64:91:58:99:0c:7c:66:0f:1b:7a:35:13:
                    ed:0c:c2:27:a6:fb:aa:35:38:cc:7b:55:1d:8f:e8:
                    a1:30:cc:c9:26:51:7e:c0:60:1b:da:ac:8b:b1:d7:
                    2f:95:1a:b5:31:d7:75:dd:a2:c0:c0:c2:51:42:59:
                    7f:91:a1:0b:73:19:89:74:ca:99:38:47:36:38:ea:
                    02:88:de:b3:fc:23:67:8d:05:36:b3:b6:06:7b:e3:
                    cb:15:a9:e3:19:81:3a:c8:ed:c6:ed:39:83:81:30:
                    40:bc:e1:61:f3:32:77:cd:83:1e:00:24:ec:30:bc:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:C7:84:8D:47:59:F2:81:BA:CB:F5:8E:6C:1B:2E:9B:FB:5C:65
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:6f:9b:4d:c0:b0:c5:2b:16:ff:ba:db:4f:6f:f4:0d:26:
         50:99:ea:ad:30:08:e7:a2:d6:d7:97:13:5a:f6:03:2e:a9:de:
         51:ed:35:f7:35:ff:f5:00:b5:e2:6d:9c:61:67:f2:4e:45:4b:
         c9:8b:2c:b1:e3:9c:a5:6f:51:f8:b0:81:4e:d8:c5:b2:cd:2f:
         24:e3:f8:82:44:f8:99:42:1b:f3:f4:10:93:eb:16:9a:27:d9:
         62:98:f8:75:80:2c:f2:f5:ea:62:d3:36:42:10:f7:67:6b:9b:
         de:e9:6b:b2:02:91:dd:3b:db:68:fa:25:be:11:3e:79:f1:3b:
         0a:3a:93:2a:c8:58:c2:1f:dc:11:8d:f5:b0:11:1f:14:db:0c:
         0b:f0:bc:83:ca:f1:be:ee:aa:f6:6b:c0:6e:d7:a8:3a:5a:b9:
         54:f2:7a:dc:12:d9:a2:77:00:41:c6:c9:e3:d1:96:ef:b3:89:
         ac:22:a5:b5:77:50:da:1f:38:47:67:ac:b7:bf:5d:39:01:96:
         e1:77:5f:d9:50:ca:d6:0e:26:66:85:9a:54:67:de:eb:e3:49:
         60:a1:b4:13:9c:c9:23:17:0c:f7:44:50:34:5a:11:fd:ac:a4:
         8c:8f:20:96:92:c5:31:d5:8e:ec:25:f9:15:77:2b:4a:5f:28:
         3a:26:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:39 2024 by rpki-client on console-ams.rpki-client.org