Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File:                     UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier:          yVyRtZrA3eNuQltvg1xQNV5swY0LoDRMiFECirREKco=
Subject key identifier:   99:95:CD:04:BE:E2:18:85:89:4D:FB:B1:2F:A8:B5:53:97:AE:FB:3F
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer:       /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number:          178A
Signing time:             Thu 16 May 2024 18:12:36 +0000
Manifest this update:     Thu 16 May 2024 18:12:35 +0000
Manifest next update:     Thu 23 May 2024 18:12:35 +0000
Files and hashes:         1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: XJA+NtZvv0Hu1s/NMe7CzvNjgL+MD2OO9SElYxesuiE=)
                          2: 8993C094D12E11EB879C5D76C4F9AE02.roa (hash: ALhKU2ckwZ0gJQ0/rib0E/3bQFT0LZ5Bl9cHlvSl2/Q=)
                          3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: zVypx1jthStqt4cyr5Z2sav6JsTBbixhZiV2nbloQxA=)
                          4: 27417E7AC57F11EEB0E1FE57C4F9AE02.roa (hash: hoxcY/toLvvg/Njx3O6+f8ZVfz5t1CD1YYlKXtkW5uI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
                          rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
        Validity
            Not Before: May 16 18:12:35 2024 GMT
            Not After : May 23 18:12:35 2024 GMT
        Subject: CN=66464c94-31db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:78:03:22:2f:3a:61:9e:6c:2e:12:f4:9d:
                    53:8d:78:b1:f5:f5:d4:c1:33:50:7e:e1:a6:0e:c0:
                    b2:fe:7b:22:35:d8:a5:0a:31:81:84:86:11:fa:4b:
                    4a:d7:13:f0:4d:bd:be:1e:61:90:31:e9:65:02:ad:
                    02:26:a4:7e:3f:09:28:76:0d:25:24:78:e4:67:5d:
                    0c:6c:0c:ec:5d:8f:b0:e0:05:15:f7:44:c8:72:ae:
                    87:42:3f:d9:58:8a:41:ed:af:10:cc:73:40:29:3c:
                    e4:a6:d7:e3:a7:9a:99:9f:91:bf:f1:03:17:e2:a4:
                    74:de:bd:40:cc:a3:f5:55:23:b3:68:3d:dc:dd:7a:
                    4f:6f:81:b6:08:24:9e:e0:1b:cb:34:12:44:0a:46:
                    6b:71:a2:4f:7c:3a:1c:de:04:31:c0:5f:54:b2:78:
                    48:6a:98:1b:1d:89:80:4d:0f:f3:f2:7e:4b:94:32:
                    80:58:b0:73:21:6f:a0:50:b9:ae:65:27:9e:b8:d7:
                    61:3c:d5:3d:2a:06:f9:11:cd:c7:ed:f4:b1:19:0b:
                    a8:88:e8:77:97:b4:0f:69:99:a6:8a:a4:c2:d2:24:
                    31:16:46:c8:0f:79:fc:7a:37:f7:00:96:2e:05:67:
                    37:0f:92:73:0e:ea:42:08:6f:79:a7:14:cf:19:ef:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:CD:04:BE:E2:18:85:89:4D:FB:B1:2F:A8:B5:53:97:AE:FB:3F
            X509v3 Authority Key Identifier:
                keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8c:ec:b1:a7:7f:5c:cc:01:8a:89:d3:0e:87:0c:40:71:a2:
         56:d5:f3:49:ec:e4:a7:ad:bd:ee:36:78:7e:53:27:8b:1f:c8:
         13:29:59:57:69:b5:64:16:83:5d:73:48:38:f5:80:e2:5c:2e:
         70:a3:6c:b0:1b:fb:ae:a2:de:76:31:19:e7:70:76:f2:65:f7:
         30:18:d6:37:8c:fe:14:16:f0:d5:a1:89:07:c6:af:0d:0b:50:
         c1:63:31:4b:a3:3c:8b:e7:a6:f8:45:22:b9:06:eb:37:2a:b7:
         b6:ac:47:5e:a4:ca:df:f8:e5:98:a6:65:f0:28:10:6e:e4:12:
         24:9f:e9:9a:67:a4:c3:0a:ca:9b:6c:30:f9:1c:5b:a0:7c:2a:
         f1:1f:f0:b3:cb:6b:61:13:74:3f:6b:7e:12:c8:7a:e7:02:31:
         5a:9e:f5:bb:29:6e:6c:6b:b0:52:40:8d:14:17:4d:10:e2:88:
         3c:85:c7:0d:5e:d5:2e:20:0c:dd:53:25:be:43:4e:8b:b2:cf:
         a7:07:a4:b2:44:e4:20:a0:ec:35:e3:81:f0:48:01:43:9e:95:
         ca:97:39:15:83:4f:92:01:c8:76:93:2a:75:cf:3b:59:48:42:
         0d:4a:02:eb:d1:fc:80:ed:43:1e:45:a7:96:ab:91:9f:04:02:
         72:57:44:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org