Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          yX8JhT7lPBCdkNEw6MYKPw3MZIX27wnb1vKrbYdkcnU=
Subject key identifier:   CC:1A:29:C0:10:1B:F7:81:DB:B2:99:5A:44:18:BB:26:74:66:68:D2
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          0261
Signing time:             Wed 01 May 2024 04:11:05 +0000
Manifest this update:     Wed 01 May 2024 04:11:04 +0000
Manifest next update:     Wed 08 May 2024 04:11:04 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: pnOFTixGPicYfp/du99Hx6ijtLQQxxy9oGzis91IX34=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: SLqS7NJXbWiwGAP0jdIIiTALETHoykNIuAQN8LdlYGg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: May  1 04:11:04 2024 GMT
            Not After : May  8 04:11:04 2024 GMT
        Subject: CN=6631c0d8-c8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:f8:03:5c:f8:42:b4:39:01:62:87:e2:c3:
                    19:f8:95:3f:f1:cf:e3:3d:f9:92:3a:69:96:5b:47:
                    9f:9c:7c:bc:73:e6:5b:2e:ad:5b:81:36:b8:b1:fa:
                    3c:58:fe:13:0c:46:4a:f4:2c:48:f4:c4:93:89:e0:
                    10:61:58:8e:00:8e:33:51:0c:62:2d:a4:e0:af:7f:
                    08:d2:a0:e2:aa:1c:95:ab:c5:65:73:84:28:fe:9c:
                    a1:0e:8a:71:8a:43:8a:cf:d4:65:8a:ae:81:92:89:
                    60:c0:e3:22:7f:0a:02:38:2f:71:9c:7e:64:a9:32:
                    92:a2:94:73:bf:67:a9:03:86:e9:9a:96:90:22:0c:
                    91:86:a9:9c:93:77:b0:98:aa:52:38:04:9a:d7:1b:
                    30:7f:cd:6d:bb:1d:92:d4:29:52:41:91:f7:01:31:
                    35:43:47:7b:94:e1:ed:d9:29:5b:7f:7d:ae:b7:9e:
                    65:31:18:f9:fd:a7:5d:02:91:4e:1e:56:89:a1:72:
                    6a:d6:d4:eb:64:5d:3b:df:70:37:ce:69:17:0b:5f:
                    bc:f2:e0:6d:c9:f9:b0:f6:6e:f7:e4:f1:12:c2:03:
                    b5:e0:85:60:59:14:16:d5:49:ad:71:c7:a9:ec:fb:
                    03:0c:2c:0f:97:57:c5:3b:f3:ca:bb:e4:dd:e4:14:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:29:C0:10:1B:F7:81:DB:B2:99:5A:44:18:BB:26:74:66:68:D2
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:f2:a8:9b:3e:ee:c7:6f:cc:12:a7:04:26:cb:53:62:9c:
         5e:b2:e1:6f:cc:16:e1:07:52:47:41:d6:47:3e:ee:3b:a4:b5:
         a4:75:45:f8:14:32:dc:0d:92:56:5c:81:8c:f5:12:c2:2d:1c:
         2d:0a:bc:d1:92:50:49:e4:47:e1:c4:30:aa:12:1c:59:82:ad:
         c1:df:8a:34:be:09:60:47:75:c0:5a:73:d4:d5:6e:7e:fc:85:
         84:59:4f:0b:8d:9e:e6:42:02:2f:ab:90:66:a8:4f:43:be:dc:
         ec:75:5e:31:62:cc:e3:65:06:39:c0:72:44:22:57:d0:87:e4:
         8c:53:e8:70:78:3c:5f:c0:81:05:cb:64:9e:af:73:ae:00:91:
         85:46:20:af:0c:80:94:83:60:d1:84:cc:3b:64:72:33:27:62:
         8e:c2:1c:fd:a7:29:6e:0c:4c:8e:c0:e5:76:5e:78:51:40:12:
         04:22:e8:a0:23:a2:d3:b1:74:9b:65:53:32:c1:0b:55:2b:0b:
         4a:c1:0e:a7:a5:de:0e:7f:ec:c2:a6:1a:70:30:2c:17:d6:ab:
         1b:e0:00:73:12:15:87:10:d9:71:d4:64:2f:4d:90:c6:2b:3d:
         84:da:25:9a:a9:e9:3f:af:f5:16:81:57:bf:3c:46:69:23:50:
         94:b7:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:49:21 2024 by rpki-client on console-ams.rpki-client.org