Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
File:                     JieQzZFM6o7BHiWGm4mN4AAfvQk.mft (raw, json)
Hash identifier:          JN2SEAS9mGzShGSHoE0GuXVqhoDbWb3fZvdsrunys2c=
Subject key identifier:   21:2D:6A:6A:48:8A:F0:7F:99:97:35:E7:42:CB:35:70:27:B3:6A:E9
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       18AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
Manifest number:          187D
Signing time:             Thu 02 May 2024 16:58:38 +0000
Manifest this update:     Thu 02 May 2024 16:58:37 +0000
Manifest next update:     Thu 09 May 2024 16:58:37 +0000
Files and hashes:         1: JieQzZFM6o7BHiWGm4mN4AAfvQk.crl (hash: ViPWKKYsX0K2JgrbQBDRmx5sAXrvAWgirUuOORU+qPY=)
                          2: 7F716274C95611E9A630AC3DC4F9AE02.roa (hash: 0MbEEF6kdeQjNwgqumeC95sMb4C/GqBWTbNRh51G8ek=)
                          3: BE466468B8D611ED876CBD7CC4F9AE02.roa (hash: B8J4z4SHT1xw/Zl5RJwd8aAIUXPGiKqlrnvZuj9+G/g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 16:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6315 (0x18ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: May  2 16:58:37 2024 GMT
            Not After : May  9 16:58:37 2024 GMT
        Subject: CN=6633c63e-e566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:f4:c5:91:b4:31:93:71:ec:ba:aa:1b:7d:
                    22:ba:60:38:8a:6b:aa:b6:f4:77:e2:97:26:30:74:
                    ff:fb:fa:35:90:54:bd:e3:1d:6e:4b:89:07:24:76:
                    89:80:1f:60:6e:9c:f1:fb:3b:c5:21:1c:40:55:18:
                    10:ae:5f:83:5b:9e:8c:c6:90:54:83:e3:12:a2:ca:
                    e4:e2:3a:f2:8f:c5:d4:61:5f:5a:6e:52:0e:ff:b5:
                    dc:89:f9:df:e3:33:e8:b7:01:7d:2f:82:04:e5:ae:
                    45:08:4e:2d:0d:75:a4:43:f4:b2:19:1e:eb:6f:29:
                    d3:8d:cb:47:ac:63:55:b1:f6:d3:e2:26:7b:80:07:
                    59:d5:67:90:1f:64:67:82:3e:53:f3:d0:14:fd:3b:
                    57:97:1b:34:aa:ab:c7:8c:04:7d:e1:5b:fd:b4:77:
                    5d:f2:d9:2e:1b:eb:cf:34:f7:39:8c:0c:12:22:14:
                    53:34:6f:37:0d:66:5e:b9:d4:b8:e4:df:e9:81:4b:
                    3c:41:ef:8d:ee:3f:97:cb:a5:32:c2:de:db:74:30:
                    c0:b9:20:b7:05:e0:7e:e3:40:37:f9:2b:99:9b:b4:
                    35:38:9d:26:7f:75:89:97:07:e2:5d:d9:f0:ce:17:
                    ea:4a:b6:2a:59:c5:cc:2c:ac:39:b6:ef:20:d6:7f:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2D:6A:6A:48:8A:F0:7F:99:97:35:E7:42:CB:35:70:27:B3:6A:E9
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:fe:1f:75:70:77:b1:23:7d:67:59:c3:ed:89:60:71:a4:d0:
         6f:c2:c3:d9:a9:7d:8f:7a:47:0b:bc:c4:10:4a:76:fa:db:36:
         7a:4a:38:4a:88:a5:c9:a9:e3:c6:c3:92:ec:57:8c:4f:e9:e6:
         ae:c1:ee:32:7d:19:05:08:4d:62:a4:ee:35:69:a5:9b:02:f3:
         c1:6f:c4:79:e0:fa:27:81:92:22:96:25:27:ec:ee:08:63:c5:
         d0:6d:f4:cf:78:63:a2:02:a2:0f:fb:49:26:31:26:39:8a:a8:
         e2:d8:55:62:86:a2:85:3c:a6:ed:c6:a1:2c:4d:38:a3:38:04:
         c0:ca:da:1e:23:c8:88:e8:de:6d:34:85:bb:9d:cf:b3:2d:09:
         f1:96:60:17:e4:1a:dc:a1:48:04:92:6f:ba:83:32:49:67:2d:
         08:05:b8:11:18:cc:13:85:18:eb:02:27:01:d8:9b:db:27:5a:
         5d:4a:a3:11:90:43:fb:f9:e3:4c:0e:dc:35:1b:5a:d1:ac:cb:
         68:b8:24:24:1b:a7:38:1f:26:19:32:9b:a7:70:2a:62:e8:e6:
         ad:08:e9:e9:b5:0b:c1:97:f4:8b:48:b8:b9:cb:19:97:ee:6d:
         7b:77:01:b0:c9:ad:75:a4:1a:3f:26:ae:4e:bb:d3:b3:1b:38:
         3c:ab:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:43:05 2024 by rpki-client on console-fra.rpki-client.org