Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          ECAxSnStdGg2WTxPKmv7MLymqHZstMT5fDw85ciKDv4=
Subject key identifier:   D2:36:8E:1C:1B:FD:0A:D0:C8:35:AF:50:F5:D3:92:0F:81:A8:70:8A
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       09F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          09EE
Signing time:             Thu 02 May 2024 20:47:50 +0000
Manifest this update:     Thu 02 May 2024 20:47:49 +0000
Manifest next update:     Thu 09 May 2024 20:47:49 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: gPa/ABOE5JyQWRJXCHfmP5nxPVyi/HJGNNGX1oYzONo=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: fMtMptIHUKeWVI+alGgrp4O9sIjM2WxWj7VtBIe6rMg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 20:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2547 (0x9f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: May  2 20:47:49 2024 GMT
            Not After : May  9 20:47:49 2024 GMT
        Subject: CN=6633fbf6-c48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:ca:ed:42:df:b0:eb:ec:59:18:56:82:41:
                    bc:fc:8d:51:af:df:c8:d0:69:07:5e:b7:90:6d:68:
                    8d:77:f0:9b:c4:92:6a:c8:7a:d0:43:73:e8:5e:a7:
                    00:f4:7f:13:d5:b8:a1:74:00:8b:b3:3a:25:59:91:
                    95:68:aa:6c:a7:31:ad:5c:dc:c0:25:7a:63:06:30:
                    9d:4b:f9:0f:6d:1f:41:1a:16:c3:31:a4:45:7a:3d:
                    df:36:8d:05:36:ab:07:12:e4:84:3c:8f:ca:57:99:
                    85:0f:06:a2:06:35:89:cd:ed:ec:ba:e1:6f:66:c1:
                    02:46:b1:47:d0:1c:38:21:45:06:01:ca:88:da:80:
                    9c:17:60:a9:80:45:fd:23:b4:47:66:dc:2a:e1:23:
                    1b:77:c2:0a:dc:fb:40:06:a6:24:2e:d3:d4:9a:77:
                    8d:a3:46:d2:e3:1f:26:4d:ab:55:19:16:d0:ea:9a:
                    66:a5:a5:a4:3e:7d:d2:75:f4:a7:f8:e2:3b:6e:3f:
                    07:ff:33:26:d4:77:98:70:20:03:c1:2e:d1:a2:d5:
                    9f:75:4d:ea:42:ee:d5:46:ca:8a:13:f0:4d:7f:e8:
                    32:1c:4a:ef:d1:a9:53:13:ae:62:12:e4:81:ba:03:
                    e2:d1:a5:e9:1a:11:48:7b:7b:7e:b3:ee:0c:e4:fa:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:8E:1C:1B:FD:0A:D0:C8:35:AF:50:F5:D3:92:0F:81:A8:70:8A
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:ab:1f:9f:82:4d:02:b0:52:93:f8:a5:5a:2a:04:3b:62:
         c1:37:38:51:24:03:d8:85:f3:e5:22:7b:a1:6f:42:db:93:fb:
         bf:bf:4d:e5:fb:a3:a7:5c:4d:2f:39:eb:21:fe:96:d8:6f:ef:
         ad:20:d8:21:4d:1b:9d:e5:12:0f:f1:d2:de:5d:75:76:0e:54:
         3d:03:ff:cb:1b:54:67:46:e9:19:92:53:9f:1e:22:2e:10:fd:
         60:90:2f:48:c2:5c:20:86:d7:97:be:65:c3:83:67:74:ee:87:
         95:49:f5:b2:1c:57:23:01:a5:65:71:81:05:56:f1:b1:09:d3:
         5c:b3:dc:c2:f8:c9:98:65:6c:3a:72:13:86:77:87:46:6e:3b:
         cf:b1:63:78:0d:03:7f:eb:2a:81:20:d2:ca:c6:14:99:ac:b0:
         ce:c1:48:c1:8f:20:c4:88:63:dc:c4:f4:56:59:96:4d:5e:25:
         ed:22:23:19:95:70:73:11:82:8c:82:79:f8:09:3a:4c:18:97:
         30:ca:84:0e:23:3b:76:7a:e6:d0:56:68:cb:a1:83:be:db:c8:
         52:28:73:dc:77:d9:02:1b:35:98:00:f9:d9:91:74:2d:ce:d6:
         9b:6a:82:53:f5:6e:06:77:cf:db:14:d1:64:fc:4d:f7:38:56:
         8e:d4:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:13:16 2024 by rpki-client on console-fra.rpki-client.org