Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          axYll8LfUZMjhNvNN2dut+NWw1XSGrvLkvTg8g7k/Ro=
Subject key identifier:   FF:47:08:16:E5:77:50:AB:61:AB:9B:51:06:EE:36:12:3D:98:FA:04
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          06A1
Signing time:             Sat 04 May 2024 23:35:50 +0000
Manifest this update:     Sat 04 May 2024 23:35:49 +0000
Manifest next update:     Sat 11 May 2024 23:35:49 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: mImyekMKC/d4AbcJz1hZhx2icoRAcJkffIfTKtQNlw0=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: ArPAURn9qwghaH+QIpbwEwT9i4lLsH8rSoI9hNZQM0M=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: wfQpjPJSXtVQsM4Tln4sV7emvJszpJDaJ7lPGdosEzE=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: 2a/KIdxZ2rEbKXq2jkM8n+MYeCWro/qac/0JpBEuhxo=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: BaQNhmiIXdP7/OtUHimFEFlvVA2memNm5OpAKG6uByM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: May  4 23:35:49 2024 GMT
            Not After : May 11 23:35:49 2024 GMT
        Subject: CN=6636c655-c5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:14:b7:c6:f5:d0:9b:92:c0:85:44:e8:3d:
                    29:9e:d6:c6:10:ac:39:ea:e3:2f:6d:b6:ff:8c:fe:
                    93:97:88:94:57:68:29:25:25:e7:ba:a6:b1:e3:b7:
                    7a:31:90:7e:0c:c5:e5:08:a3:c2:16:0d:6b:f3:8d:
                    90:7a:27:6a:bc:a3:09:14:e3:60:47:a0:46:ff:78:
                    ce:0f:ba:8b:c8:94:1e:d5:20:3f:29:5b:5b:9d:cf:
                    60:24:63:e6:b4:80:40:d9:21:47:21:e1:f0:42:d9:
                    1c:03:17:d4:24:b5:ca:12:bd:96:be:b7:24:ef:4f:
                    0e:6a:33:cb:93:b5:98:e1:21:2d:07:ee:ef:ec:fa:
                    66:75:6e:f4:6c:e6:7f:26:72:1a:16:ce:54:79:e7:
                    6c:d7:fa:07:31:1b:f3:11:7d:21:71:9a:dc:a6:d5:
                    5b:d7:2a:7d:7a:81:6e:0c:2e:d5:e1:2d:46:4a:5d:
                    0d:19:52:fd:e2:f8:fb:0a:a4:4d:42:d8:08:24:50:
                    eb:26:30:02:46:37:02:d0:a5:5f:84:54:ce:df:61:
                    06:3a:86:00:49:08:28:61:3e:11:e7:d9:88:35:94:
                    06:62:30:09:a1:43:26:74:56:62:a6:86:72:73:ab:
                    8e:f6:20:e9:2d:88:b9:2f:09:f1:51:11:0a:2d:d3:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:08:16:E5:77:50:AB:61:AB:9B:51:06:EE:36:12:3D:98:FA:04
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bf:a9:85:9b:e3:fd:5c:f3:ea:27:40:3d:d2:83:91:5d:79:
         02:9b:e9:60:d4:ef:ea:10:a8:fc:c3:10:5d:19:fa:45:3d:bc:
         86:4c:8c:5e:40:56:b5:c4:de:b5:e0:66:bf:a6:3b:d2:48:e9:
         6e:5c:2b:e5:89:ab:28:df:d3:d7:b4:86:ae:f6:ef:98:3e:5a:
         28:aa:6b:26:95:d2:db:33:2f:b5:6f:7a:5f:d4:c7:e3:35:6f:
         9d:4f:92:78:fa:c1:eb:c4:d2:72:ce:4b:a0:7f:7d:14:e8:45:
         e1:db:59:d7:dc:a1:75:a6:e3:9b:09:34:d0:ce:cc:9f:a1:a1:
         fd:a9:04:12:34:f7:33:f2:9e:ba:0b:7b:66:08:f2:2b:39:ce:
         95:55:91:25:d6:2d:fd:60:1a:a8:92:bb:16:07:a6:fe:d8:cf:
         00:08:90:3b:c3:d3:fd:28:db:2e:a7:84:c0:fa:18:fe:b7:76:
         86:fb:ab:b6:6b:83:83:e9:26:d5:ef:25:07:08:19:42:36:bc:
         34:08:87:5d:1f:f2:9a:cd:94:cf:e2:08:0f:d0:46:5d:0f:bc:
         11:1f:a2:1b:3d:d5:23:ee:b4:41:36:99:59:25:06:8a:7a:cc:
         8f:49:b6:ae:01:6a:73:75:66:90:66:05:e7:0f:cd:ea:d2:a7:
         45:50:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org