Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
File:                     LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json)
Hash identifier:          1d9h1b0l2U/3CB9ORwW0yXwOgco04q8ym+A3CnQqNNQ=
Subject key identifier:   75:2E:B3:96:B0:D2:41:01:43:DF:94:78:FA:28:ED:D4:BC:01:3F:09
Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61
Certificate issuer:       /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
Manifest number:          0756
Signing time:             Sun 02 Jun 2024 22:44:05 +0000
Manifest this update:     Sun 02 Jun 2024 22:44:04 +0000
Manifest next update:     Sun 09 Jun 2024 22:44:04 +0000
Files and hashes:         1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: UALBI2DW5q/QQDZDDLNIIuNqnPn//uXo8LuoXktoMA8=)
                          2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: tgiKpA5/VOirxpzZclo5SCNNUmu09Z28SHd+MFyd0UE=)
                          3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: n8qFcHxdOC/HNtBruhuEeiEtGy0dZxWyfWu4yIA24vg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl
                          rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 22:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
        Validity
            Not Before: Jun  2 22:44:04 2024 GMT
            Not After : Jun  9 22:44:04 2024 GMT
        Subject: CN=665cf5b5-300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:f0:22:aa:11:4c:c5:04:b5:8b:0e:8c:26:
                    d1:f6:9b:d0:f6:ce:ea:09:8d:9b:59:5c:ab:de:8c:
                    4b:20:f9:bf:28:e1:01:d1:da:52:10:8b:b9:ba:56:
                    a6:04:50:0f:0c:b9:26:c9:41:bd:25:1c:88:ec:0f:
                    a2:63:fb:6b:9e:0d:76:6f:93:eb:27:85:35:78:a7:
                    61:66:5f:72:f5:c6:7e:73:aa:95:90:60:65:21:06:
                    fc:6d:dc:92:58:0f:d2:24:b9:86:28:85:19:fa:a1:
                    20:c8:23:1e:a4:c7:8b:c7:01:69:74:2d:76:e3:93:
                    64:de:3f:6d:b8:9a:0f:cf:d3:70:d1:97:8a:35:a8:
                    16:14:b4:4d:47:76:a4:58:64:61:ee:c1:87:c0:c7:
                    f6:64:14:c0:3e:79:5f:f3:96:d2:4f:0e:85:ec:73:
                    6f:ba:8d:e2:96:27:0b:cf:61:33:95:8b:d9:bd:10:
                    e8:92:66:85:5b:f5:51:69:e2:ba:42:d1:e5:78:59:
                    79:87:cc:60:3c:4e:9b:88:69:75:a3:fd:dc:09:a3:
                    48:d9:3d:58:a2:bd:dd:1a:8c:06:03:fc:26:5b:c8:
                    c4:c4:89:d3:66:6f:94:0d:ea:14:7a:49:38:49:97:
                    c8:4a:9c:dc:dd:be:a9:02:93:bb:5e:71:21:a8:82:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:B3:96:B0:D2:41:01:43:DF:94:78:FA:28:ED:D4:BC:01:3F:09
            X509v3 Authority Key Identifier:
                keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:79:3a:ff:34:64:68:cd:d2:e5:7b:9d:55:89:98:5c:36:
         e0:d8:82:be:58:66:f5:04:63:7d:29:67:5b:df:ab:4d:49:86:
         95:8f:75:93:37:b8:2f:0a:b9:a6:bc:10:e7:54:3f:7d:5a:ae:
         66:33:20:cd:92:18:6a:82:ca:63:63:f0:08:1b:34:71:be:21:
         33:07:26:fc:f4:75:48:d8:a6:86:bf:eb:04:68:7c:58:dc:81:
         9a:9d:61:b8:6e:70:54:04:cb:53:12:d7:d1:78:60:d2:45:7b:
         32:34:b6:13:9e:f9:a4:e9:9a:83:2e:57:0f:1a:db:81:51:93:
         31:3b:88:e5:cd:f0:ce:e6:74:49:77:28:67:24:49:93:7a:87:
         6a:42:9d:ff:df:10:68:1d:91:11:d8:9d:e9:3b:83:43:e9:69:
         a9:30:31:ad:64:f0:d4:5e:b3:ce:b4:85:2f:d4:86:51:fe:27:
         8e:50:a9:ad:3c:72:cb:96:5b:c0:3e:71:70:c5:4f:a7:fa:0c:
         f3:ad:c3:6e:f5:4d:20:13:d8:f7:d8:fb:de:2c:51:18:d3:e0:
         f7:40:42:50:c0:d1:b4:a4:99:11:fa:38:4d:02:ba:11:10:5a:
         86:17:90:2e:38:41:87:0d:3b:f5:5e:b9:f1:cc:da:51:4c:63:
         4e:f4:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:55:10 2024 by rpki-client on console-ams.rpki-client.org