Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          hJ7LnAw4DgoJ2KGgwvcLo6f7Wt4hVtgz0jEP2c9Y6Zw=
Subject key identifier:   1E:AD:6C:CC:38:FA:C2:5A:B2:93:E1:9D:1B:CA:D9:F9:3F:D7:27:87
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0752
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          073D
Signing time:             Fri 26 Apr 2024 22:24:29 +0000
Manifest this update:     Fri 26 Apr 2024 22:24:29 +0000
Manifest next update:     Fri 03 May 2024 22:24:29 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: OAqsmaoR8GeCuZMj2+C2VI0p7YO/A1h8VKj1njQbHnA=)
                          2: C664689AE0F511EABB96D531C4F9AE02.roa (hash: 6z7hYBLguvvLle11iq9Qd/Si+IGvsECaX+4wJJHRkBI=)
                          3: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: Nz4JL+l4q5eTnKjF8D+yKJMkwfApWOlTw8qV9LnnNRY=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: yx8TBb/TuXum0pJEp+Wzpqk77BnNIMbRNcycPvceWF0=)
                          5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: ZpyCxkGz9W5E+BKJQyDSAH3uVTPXfr70SfMurfMvKUc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 22:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 26 22:24:29 2024 GMT
            Not After : May  3 22:24:29 2024 GMT
        Subject: CN=662c299d-4612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:bb:db:8b:2d:2c:a8:51:7b:b5:e1:91:39:
                    09:cf:62:9d:4b:d1:75:65:81:56:00:87:b3:f7:ec:
                    bb:a5:ae:27:1f:ea:30:e2:7c:e6:f1:a7:fd:26:c1:
                    56:f4:ef:75:f2:e1:7d:38:b9:95:57:49:01:30:8b:
                    ee:7a:ba:bd:2d:65:29:20:79:e1:bc:a5:7a:3a:b6:
                    88:fe:1a:43:f6:10:70:3a:62:e9:b8:d4:b2:ed:72:
                    bf:09:52:b4:50:63:78:b6:f1:b2:5d:bb:fb:1f:ab:
                    3e:18:f4:3e:c8:5a:93:0c:41:10:9b:ba:0e:7a:07:
                    7a:75:dc:80:0c:26:f8:da:a5:de:af:7c:f6:3d:f9:
                    19:ac:32:6d:5c:90:43:3a:e6:91:bc:29:34:ee:b7:
                    c8:36:05:b4:fa:86:f0:53:e9:53:98:e5:dd:f9:db:
                    a5:b5:4f:7c:de:a2:0b:e6:ce:10:8c:de:f3:e1:ff:
                    ab:14:fd:86:e8:d5:c6:03:be:79:2a:ec:93:9c:bd:
                    c8:a4:f7:b5:0e:44:a7:4f:6e:4a:68:44:f3:9e:e7:
                    f4:ef:93:30:19:6b:4e:22:ff:97:99:6d:55:6e:b9:
                    99:59:6a:bf:2f:f6:51:06:e3:dc:81:d9:a8:7a:48:
                    be:32:02:52:31:94:04:5e:12:c4:16:d8:28:3b:f4:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:6C:CC:38:FA:C2:5A:B2:93:E1:9D:1B:CA:D9:F9:3F:D7:27:87
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:41:8a:8b:f3:e3:1b:80:19:7f:ec:b3:f4:51:d2:44:4a:a1:
         b1:78:bc:a5:7a:ad:06:56:da:85:bb:94:70:e9:1c:57:1d:07:
         0e:86:da:90:5a:b5:e5:59:ae:80:19:7e:1c:61:ec:eb:95:10:
         46:8f:e5:2b:89:0d:db:9f:98:2b:c1:da:2a:a7:65:0a:75:4c:
         3a:5c:ec:5c:23:1c:59:15:f5:38:bb:de:2f:03:f6:de:fe:80:
         04:a1:df:54:af:d6:55:fc:13:9d:83:1d:da:73:a1:9e:6e:67:
         c0:a4:22:4a:21:86:4e:74:65:b6:25:81:2d:75:19:0b:a9:41:
         12:58:2a:b0:1c:d5:23:c3:fa:54:90:f4:0d:5a:11:e4:bd:dc:
         3d:06:48:c9:b9:4f:1b:7e:01:15:a8:f5:ae:82:d7:c7:c0:e4:
         7c:fc:7a:0a:45:71:4d:28:9e:28:bb:a7:b1:16:d8:e7:03:65:
         a0:6c:af:4f:ea:31:95:ac:ed:e7:64:d8:42:9f:70:bb:98:2e:
         c6:b9:97:14:0d:85:8f:d3:46:00:d7:94:64:bb:23:3a:76:a1:
         6a:4d:8e:0c:cf:80:26:37:49:d4:3c:11:cc:e6:f9:a1:d1:c8:
         4c:4d:c8:e2:f6:88:91:e8:ef:4a:09:63:12:13:d5:04:83:ae:
         f8:80:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:51 2024 by rpki-client on console-ams.rpki-client.org