Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File:                     ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier:          nb8V8MNtuyUJTw2I+cZmM63Oco6ZHY2p0uBd/Rw7WYM=
Subject key identifier:   BE:9F:90:5B:39:E8:A9:50:86:CC:81:08:BF:6A:BD:34:C7:7F:D6:DF
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer:       /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial:       04F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number:          04E6
Signing time:             Fri 03 May 2024 01:27:30 +0000
Manifest this update:     Fri 03 May 2024 01:27:29 +0000
Manifest next update:     Fri 10 May 2024 01:27:29 +0000
Files and hashes:         1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: y5qulZ0B0CijChZ6NwCPNy9bi3c0LvgXA5WlFs0wM8M=)
                          2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: o9PB+UobyP+l5eMcB8QbwCGSAygZt597MmAdTrie4ro=)
                          3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: VEAQPLTal19gRup4Wp6oHPBjzDcoHYnNrcfhJsSHTyA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
                          rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
        Validity
            Not Before: May  3 01:27:29 2024 GMT
            Not After : May 10 01:27:29 2024 GMT
        Subject: CN=66343d82-0424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:2a:2b:64:26:89:ec:89:ad:fd:7f:2b:f2:
                    54:65:09:bc:ad:73:18:88:07:12:9b:24:9f:13:2f:
                    ee:aa:6a:21:16:6a:d7:56:e6:a4:b8:6f:8c:9e:4f:
                    3c:5a:c4:fd:4f:9b:ce:87:0c:02:ee:ac:bc:89:05:
                    20:46:2d:43:ed:8d:65:a9:ef:8c:1f:56:21:2a:4f:
                    86:0d:51:8d:c8:6e:5e:8f:ea:94:57:91:5c:c5:cb:
                    51:57:49:2e:1f:60:e0:49:d7:d2:4a:4d:2a:a2:7f:
                    17:10:49:4d:31:d7:0b:e6:6f:48:41:8a:bf:04:a0:
                    71:d5:51:e9:89:22:17:94:80:30:9a:bc:fd:0a:6d:
                    c5:7f:75:2e:03:e2:3f:42:a0:c2:5e:93:51:c6:01:
                    98:65:c1:d5:45:72:ed:ba:59:e7:98:ba:f2:7a:71:
                    d8:66:bb:19:d4:b3:11:33:49:10:86:38:a2:9a:ff:
                    a1:f0:4d:98:98:22:b5:ea:8e:ca:35:5d:be:93:9f:
                    f2:04:56:cd:b7:6a:ed:ff:37:99:37:f1:b9:b8:9f:
                    a8:d9:dd:a9:f4:d4:71:0f:05:d9:bf:c0:06:10:fd:
                    a2:64:ce:f8:31:aa:3f:78:0a:3e:1c:97:f5:6e:1c:
                    35:41:2c:f3:fe:ea:e0:8f:f2:ae:36:99:70:4d:55:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:90:5B:39:E8:A9:50:86:CC:81:08:BF:6A:BD:34:C7:7F:D6:DF
            X509v3 Authority Key Identifier:
                keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:81:41:14:b8:88:42:4a:ee:ac:f6:23:01:61:b5:20:3c:5a:
         2d:1a:72:36:a6:85:04:89:dc:dc:29:08:ae:b5:fd:c9:6b:db:
         15:dc:9c:3b:9c:7b:9d:a6:ff:61:47:41:20:fa:7e:46:fd:9f:
         25:14:28:3c:6f:ff:17:9f:1f:15:6f:cf:4f:a8:1e:15:a6:a7:
         aa:49:b9:2e:a8:d6:35:73:d1:c5:67:16:2f:75:fd:3e:0d:48:
         b9:57:49:b0:31:5c:7c:fe:30:3f:85:82:0b:fe:c7:67:e0:65:
         82:30:0a:e2:94:a6:f9:9d:25:7f:35:ef:7c:fc:4d:f8:fe:f4:
         27:01:c1:da:ab:35:c1:3f:e2:09:3c:88:c3:d2:40:9d:47:93:
         9c:09:58:3d:f7:09:03:a5:04:48:f7:21:5b:c8:2a:20:80:e1:
         ef:ab:f1:d4:26:78:cc:8c:73:76:2c:fe:2a:9e:03:61:bb:6d:
         2d:04:67:4c:f7:37:6d:c1:30:8a:d2:90:35:1b:67:dc:6f:33:
         fe:f8:e5:5b:ab:05:11:8a:c3:74:e7:92:00:6e:e3:2e:86:63:
         5f:d7:bd:00:57:3d:43:29:bd:2a:95:b9:d3:70:1f:54:60:50:
         ab:49:d0:2d:72:a3:25:e1:b2:55:f3:d7:b4:2e:5e:dd:b4:e7:
         e4:20:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:12 2024 by rpki-client on console-fra.rpki-client.org