Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
File:                     _b1MDTRJL1zq5IeeR2J5blJwB-s.mft (raw, json)
Hash identifier:          UKjPa02b4KrzAGBXAUAj6YHn3F5xMYFWSSOpggcAxCs=
Subject key identifier:   8C:63:E8:9E:C0:7B:BC:85:73:F0:DF:B7:D3:E3:66:F2:AB:D2:FC:8C
Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB
Certificate issuer:       /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
Manifest number:          D3
Signing time:             Wed 15 May 2024 07:00:34 +0000
Manifest this update:     Wed 15 May 2024 07:00:34 +0000
Manifest next update:     Wed 22 May 2024 07:00:34 +0000
Files and hashes:         1: _b1MDTRJL1zq5IeeR2J5blJwB-s.crl (hash: 4o5Pcu76idptTZDehYkmPj17bTikKyZwKFHhegvbfuk=)
                          2: 86516CF04BE911EE8640FE79C4F9AE02.roa (hash: JVrW7wfeXBjB6PXcjMzC+SjNaEkZTfjyPBjZ9yQSfR4=)
                          3: C724415E35F911EE9F140449C4F9AE02.roa (hash: nuDbCIDvFkbgWJZBmhPhj2iFM+PRZiB3kT5Amg1RDjs=)
                          4: 208652BA35F911EEB45F8B44C4F9AE02.roa (hash: Cr/J89DX0J/gYkR2aXLSBOBKL9tdNAhOwy/XWxTdqKI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl
                          rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB
        Validity
            Not Before: May 15 07:00:34 2024 GMT
            Not After : May 22 07:00:34 2024 GMT
        Subject: CN=66445d92-6f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:0f:39:0f:b9:f3:66:3d:46:3c:13:eb:c9:
                    37:02:31:ec:18:09:69:d1:8b:5c:3d:cc:51:4b:48:
                    e5:df:ad:1c:b7:6f:ae:69:f3:ca:96:ef:9e:41:ec:
                    3f:1f:15:47:fe:2d:c5:3b:a5:fa:a0:86:f1:f5:29:
                    e9:73:a2:a6:0e:38:24:cc:37:20:c2:d6:4b:25:51:
                    67:9f:82:21:db:a9:bf:1d:48:88:fa:fc:cb:4f:0a:
                    b7:99:39:8e:77:63:6f:31:6f:2f:65:c8:7d:b9:0b:
                    59:b0:ac:6e:75:28:db:e8:5b:2c:08:bc:3d:f0:2d:
                    cb:9f:45:42:d4:a6:e9:b0:06:4d:65:d5:79:6c:85:
                    90:b3:f5:04:11:ca:de:85:d8:48:ee:12:dd:f1:f4:
                    10:2d:7e:30:ca:39:ae:34:e2:d3:3f:24:9e:05:3c:
                    96:32:69:62:c9:3a:a1:29:3b:8a:53:53:b5:26:1e:
                    1a:09:af:4f:df:4f:89:12:24:e8:5d:70:f0:e9:28:
                    38:9e:f4:4d:34:c9:8b:50:df:77:60:cb:66:92:e3:
                    f8:5a:fe:1e:46:95:2a:ad:f2:84:4e:7c:3a:26:05:
                    a5:5f:64:e6:55:90:50:5a:63:1f:b7:41:bc:b8:18:
                    35:89:78:12:7f:2d:c9:2f:ff:6c:f9:eb:29:b7:ce:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:E8:9E:C0:7B:BC:85:73:F0:DF:B7:D3:E3:66:F2:AB:D2:FC:8C
            X509v3 Authority Key Identifier:
                keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d7:b4:c7:85:fd:b1:41:fa:44:0d:ba:dd:cc:32:f9:8e:a4:
         c0:c7:9c:84:48:68:ab:62:a5:94:be:9b:a4:9c:23:7e:5d:27:
         be:76:78:ce:d7:49:d7:e2:10:25:83:dd:e5:2a:b0:00:db:26:
         92:18:d0:16:fa:bf:ef:b3:2d:9a:76:91:b1:9c:d8:15:ef:f7:
         5e:1a:d3:a3:03:1f:1b:c9:c0:01:96:0a:73:bd:59:24:ad:13:
         bf:88:07:8a:20:2d:be:ec:8c:28:4b:ea:80:1d:97:b5:85:3c:
         d1:5c:a2:dc:a0:66:1e:22:40:14:21:a4:5e:ec:8a:5c:98:5f:
         c3:37:c4:7f:57:55:c1:06:28:75:c5:6c:14:3f:d1:54:70:70:
         18:cf:aa:d6:5f:0e:e7:f5:ae:2c:a8:4a:66:0b:a3:58:52:34:
         e9:4e:21:b8:c8:dd:fe:ff:80:b4:69:8b:70:de:03:4b:58:a8:
         69:ea:23:a0:14:0e:14:68:43:7e:d4:df:b0:0c:f2:93:50:fe:
         55:42:90:0f:42:13:ce:69:c4:72:74:62:ce:44:bc:f1:1b:f1:
         91:03:f8:e8:45:cd:42:17:fc:45:a6:4f:da:57:19:bb:5b:84:
         b4:cc:a8:1d:c9:37:64:97:06:4a:67:0a:3f:85:88:f9:ac:75:
         47:e9:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org