Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
File:                     TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json)
Hash identifier:          q8k9rA5OLTKYCqcYMtU19+KNg49in4rjs3pePQh6Apc=
Subject key identifier:   36:0B:7A:6B:3D:44:C0:0F:DC:2F:11:32:DD:7E:66:6A:F1:86:E9:8D
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       0643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
Manifest number:          063E
Signing time:             Wed 01 May 2024 00:01:29 +0000
Manifest this update:     Wed 01 May 2024 00:01:28 +0000
Manifest next update:     Wed 08 May 2024 00:01:28 +0000
Files and hashes:         1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: N9z/JfrmY7Qa+YXs/IuyZM7AZ4sMNdaDLQCDYw4+NEY=)
                          2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: EZUwV+bWVNA+A7Z3jb8OrB3HJgBVvfVck4cBBBonCsc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
                          rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 23:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: May  1 00:01:28 2024 GMT
            Not After : May  8 00:01:28 2024 GMT
        Subject: CN=66318659-7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:34:1a:90:46:ee:e0:65:60:34:af:5f:11:
                    10:d4:d4:aa:91:5b:15:ca:83:0d:32:24:b5:18:04:
                    df:ac:f7:32:33:de:3d:52:62:17:89:c1:3b:8d:09:
                    40:2a:7f:c8:16:e7:84:ab:0d:17:58:40:02:29:1d:
                    2f:2a:34:d5:de:1d:88:1c:94:6d:9b:97:e6:ba:b4:
                    8a:0e:96:e5:68:1f:a5:31:9b:fc:13:81:23:65:f6:
                    08:96:b9:ec:fd:1d:6f:48:7f:d7:09:f2:19:f1:cf:
                    e4:c4:67:db:60:4f:76:76:22:af:a8:b4:3f:95:73:
                    65:f4:a8:a2:ec:c4:c7:e4:60:ac:7a:fe:9c:4e:31:
                    ff:6b:51:2f:23:a9:6c:6a:fe:61:89:ff:d2:8a:75:
                    4e:bc:67:2b:94:cf:ca:be:dd:ae:20:57:61:73:2c:
                    dd:51:21:b4:82:89:e5:40:60:bf:df:59:29:4c:eb:
                    fa:05:42:af:44:50:a3:a4:cd:6a:0a:bf:4b:2b:b9:
                    d7:ab:0c:85:21:71:ae:7a:9e:00:f0:f5:e5:d5:df:
                    7e:db:f9:e3:c9:2f:0c:d7:9d:87:f1:b0:c3:ab:21:
                    94:ab:06:fc:4b:2f:51:0e:e0:d7:9d:54:a0:57:4c:
                    75:29:52:10:95:49:ae:fd:f0:96:c2:05:60:b9:92:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0B:7A:6B:3D:44:C0:0F:DC:2F:11:32:DD:7E:66:6A:F1:86:E9:8D
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:f8:3a:1d:9c:4a:c0:5b:5b:18:e4:08:98:2f:f1:3d:17:
         38:47:79:f6:b0:c9:f2:ad:10:e3:ff:ba:96:ac:04:5d:e4:96:
         bd:83:10:e5:b7:56:87:5f:34:78:12:04:c3:ba:03:bb:c9:0a:
         f0:12:2d:4c:ef:e1:1c:d8:26:86:d5:b8:67:1a:d4:b1:b9:f1:
         5c:6d:a6:52:95:b4:fd:cf:52:72:fb:e4:41:86:b5:f1:c3:da:
         87:cd:62:58:3a:da:84:f4:d8:6d:fd:c2:62:73:56:aa:ab:15:
         4b:63:e3:83:e0:c8:00:cf:07:7e:df:85:77:71:a7:02:0c:8d:
         f2:ee:af:a2:0a:a3:48:5c:79:3e:e9:49:2c:e3:f2:74:a1:3d:
         a1:28:15:bc:2a:da:48:eb:49:b7:74:d7:06:43:b1:27:55:86:
         fb:f5:e6:11:f2:76:a2:ec:a4:b4:c5:f4:c6:9a:2a:2e:73:cd:
         b2:d1:4f:cc:ff:57:f7:f6:ae:39:7b:4f:24:ae:18:c5:63:59:
         b9:03:90:0b:45:5f:38:e6:4e:46:42:21:57:5d:08:8c:a1:e7:
         78:f6:16:ab:2c:31:05:fe:80:8b:20:7e:a6:bc:64:3b:71:9d:
         78:9b:6a:e7:e9:b2:0b:78:41:25:e2:97:1e:2b:15:ba:fe:3b:
         3c:dc:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:04:04 2024 by rpki-client on console-fra.rpki-client.org