Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File:                     9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier:          kzaLWGGl0bOSAEASPmt2U0UGpt3HZovVrpiGi6lk908=
Subject key identifier:   E6:37:CF:42:35:47:CF:3F:C4:8A:54:38:0E:B1:48:B1:4F:1A:62:6E
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       0567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number:          0562
Signing time:             Sat 27 Apr 2024 00:44:04 +0000
Manifest this update:     Sat 27 Apr 2024 00:44:03 +0000
Manifest next update:     Sat 04 May 2024 00:44:03 +0000
Files and hashes:         1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: bPFi/28+pu6zIth1FLrc5907P6EGwDbrX/gTvR+hLyE=)
                          2: 948A2714980211EB82357D6CC4F9AE02.roa (hash: iUwsMlwG14yhQu9mFdyFQuqtn6Bv++zfI2iNXgm3mns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383 (0x567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Apr 27 00:44:03 2024 GMT
            Not After : May  4 00:44:03 2024 GMT
        Subject: CN=662c4a53-c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:b9:86:17:e5:d7:28:21:ff:c8:ad:6c:57:
                    62:07:80:62:42:1a:d2:33:4c:66:c7:dc:fd:4f:c4:
                    7b:3b:63:3d:46:33:33:d0:2e:73:2c:1b:43:5a:0d:
                    e9:61:3e:17:f9:1b:9a:cc:c1:c6:3a:2e:81:1e:bb:
                    72:ed:1c:9f:f1:37:f3:11:eb:a9:80:89:bb:fe:9f:
                    f9:e9:8c:bc:dc:14:00:7d:d5:ab:dd:fd:fe:c7:08:
                    96:68:3e:82:7b:14:73:bb:10:00:bb:00:47:d0:35:
                    81:55:b9:c3:2f:0e:8d:2c:6d:a4:98:f4:31:31:86:
                    d4:28:0d:e8:54:2d:05:a0:6a:aa:ce:c7:20:fc:13:
                    db:80:b4:4f:a7:a6:af:5f:83:c8:40:90:cc:49:63:
                    43:4d:48:c6:61:5a:d3:ad:c8:52:27:9e:b0:9d:fe:
                    d6:4e:f8:0e:f1:4b:3d:30:61:90:e0:a2:53:8f:f7:
                    c3:7b:30:74:83:21:9f:7b:b4:c4:aa:4c:ad:83:b4:
                    36:4f:e7:71:0f:c7:21:aa:6f:58:05:df:5b:4a:df:
                    c1:b3:62:51:66:5d:07:58:28:5c:8c:49:2c:8c:fe:
                    9c:cd:1b:8f:7b:46:4f:81:62:1d:5f:8e:ba:1d:a6:
                    f9:69:9c:9a:69:fd:c0:25:8b:f8:cf:89:a4:c5:0f:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:37:CF:42:35:47:CF:3F:C4:8A:54:38:0E:B1:48:B1:4F:1A:62:6E
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:86:67:ef:59:d0:52:f2:0c:ff:ea:3d:2c:47:a8:81:70:a4:
         81:a9:a1:00:f3:d2:c3:f1:3d:75:8b:f3:2e:d5:82:14:3d:31:
         b1:a6:93:81:75:43:fd:70:a7:0b:4f:8a:be:cf:a9:fa:56:82:
         a2:f0:d9:63:64:08:7d:63:73:5e:cd:60:07:01:37:22:11:61:
         6e:44:b9:fb:28:98:7e:b1:90:4e:a5:77:04:6c:81:2e:e7:48:
         2f:7a:01:77:62:ba:3c:c4:6e:88:9d:f5:ec:01:07:90:07:33:
         4b:e4:ce:50:3c:79:17:d9:f1:f6:f0:4c:f5:ad:cb:db:ea:f4:
         d2:ec:30:f1:46:b4:79:d8:9e:b7:69:c2:5c:32:ae:85:92:04:
         bf:39:a3:56:a3:0b:c1:fd:aa:8b:b8:08:9f:ef:86:41:69:d5:
         1f:5a:b4:45:40:a3:be:58:a6:6b:fb:fb:f6:b6:85:45:27:52:
         53:1f:6d:69:e9:15:9a:0d:08:be:be:ba:79:e7:c5:97:90:5a:
         83:ec:9f:66:22:d6:b0:81:72:a5:d8:c0:22:e2:36:3b:f0:cd:
         50:29:d8:7c:81:80:44:d3:43:d4:8c:7a:f5:2f:13:7f:33:37:
         aa:95:b6:32:3a:81:ba:83:4d:6f:84:8f:1f:9d:6d:4a:87:68:
         92:28:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:50 2024 by rpki-client on console-ams.rpki-client.org