Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          +nuqt/MH5bXC+udEiKD2vhR4ftK+ViR4yXhMyhv/fLA=
Subject key identifier:   34:0B:F6:52:1E:B6:F4:72:7F:94:EE:49:C8:C9:28:61:FB:16:27:8F
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          3024
Signing time:             Sat 18 May 2024 15:42:45 +0000
Manifest this update:     Sat 18 May 2024 15:42:45 +0000
Manifest next update:     Sat 25 May 2024 15:42:45 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: Ltak5CvfiF/Kxh8/sRiPAytNx9aJP4wD4stmZbYaTvM=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: qfmqTirp8Zad7k+qaey18cYG4f26i7cc95OJ7RN7ki0=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: N5j7WOPf8R/W04K/g7J6exFJHjLoUKmGax2m8ylN8D4=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: s74RqywlkpPNZd/k54OkOPZY0zBYS0LcSwqRFyhZCaQ=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: cUFz8UfvDLExFmEMk60M+pc6mMkgOxhkE3VX2EzmxPo=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: egxIsRPVPwb7u+XM60U1FKVzWzmGVCY2CjPdVmSsIoo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: IzTsla0zxZKnGyuuEHhfVJkqXYrhwIme1eXrBSLQ8hE=)
                          10: BE430FFA699011EE96387F19C4F9AE02.roa (hash: xQ1dIyyEBpGErrvo04MIQpHGcqYJjtLBlN+w8G4Dch8=)
                          11: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: v7dpF7DEHY5W9PehrFLFcsUWT8Jk0m5IH4U++CpJtnc=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: T2It2LjErftea3TIF7gsdKaDme/4oTA0DOzxS3/YKlg=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: 4iGJOzeOe32jX6RwP3qwklB/DkGUI9G1IaXHJLvho9Q=)
                          14: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: H0AaPyuEvO3VdNV9Lebtrz3gKClkKQyMQL7FYI1zL1o=)
                          15: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: liXETAeyiiRJUr4HKvyxOrH1rZms2Fhza+VaF2FQeog=)
                          16: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: VaB6pOWiJQ57BWYYsujqoAwA2X29FFnQlwvyPnBs8I8=)
                          17: FA3B1B5E32DD11EE8A2D5942C4F9AE02.roa (hash: B9jdWPKlHBVCpNN79zG0zB4HsXZf/UpJ7wU1PoUAc6I=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: n6J3lFAaIJdatXxciP20VhkBJmk/cgEYdscJZnx5wj8=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12553 (0x3109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May 18 15:42:45 2024 GMT
            Not After : May 25 15:42:45 2024 GMT
        Subject: CN=6648cc75-4274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:8e:67:0f:e3:88:81:b6:5b:1b:54:bc:37:
                    10:76:53:f5:67:03:d8:ff:7b:7e:2a:19:73:ef:47:
                    6f:43:8a:e8:93:67:c6:f8:f3:03:e3:5d:77:67:12:
                    e4:56:ad:c1:fc:97:a8:82:0b:d8:7c:b0:da:92:ee:
                    d8:7a:f6:54:f6:2a:e9:5f:87:2c:99:ed:de:ed:c4:
                    5d:9b:c4:82:56:42:b2:a1:dd:a6:37:88:a5:bc:e6:
                    30:b4:da:c9:a0:af:77:4e:ef:7d:f9:54:9a:cd:56:
                    6e:2c:5a:9e:51:56:13:00:e2:e4:d1:49:cf:98:03:
                    c7:f3:da:57:4a:4a:fa:36:50:f0:d8:81:ac:b7:23:
                    25:ac:0c:62:79:b6:80:cb:2f:d2:3f:62:5f:ca:ec:
                    dd:76:35:de:34:5c:24:dc:33:c1:f7:e8:4e:9a:21:
                    24:e5:5c:94:eb:32:d8:01:ae:6f:ea:3c:3d:63:89:
                    b1:ef:d0:bf:fc:f3:cf:c0:a8:42:73:94:95:8c:a0:
                    22:44:af:ce:39:91:75:56:8b:19:91:5e:ee:a9:b3:
                    41:8b:0e:63:01:43:f1:53:a1:eb:33:af:6e:12:5e:
                    af:90:2e:31:4e:bc:4d:92:9d:76:75:c0:66:3e:b7:
                    ea:f7:47:cf:2e:95:84:3b:4d:a3:27:76:82:23:b2:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0B:F6:52:1E:B6:F4:72:7F:94:EE:49:C8:C9:28:61:FB:16:27:8F
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:9a:a5:a0:7a:ce:03:88:2a:7f:91:fd:5a:aa:b2:75:fe:
         15:8c:2e:13:13:64:14:eb:c7:3c:04:8d:35:fb:b6:c8:8c:2b:
         2f:f2:f3:59:4b:21:34:51:54:9b:9f:34:de:68:ae:f1:c4:18:
         16:d5:0d:5d:f7:69:33:12:ec:5e:6e:11:8f:db:aa:6e:e0:26:
         1c:1a:80:2f:50:52:16:df:36:ae:5b:27:72:ea:60:c8:f4:38:
         66:cd:fa:ca:43:77:8c:0c:f8:f3:64:cb:6e:36:a1:da:ce:04:
         ef:3a:13:68:3d:95:05:d7:67:cc:d9:7c:c9:27:da:d1:91:db:
         0c:b4:a9:99:5b:b7:93:1c:72:43:07:3b:b2:8c:39:24:ea:83:
         59:e6:c3:6e:59:67:ae:46:ed:14:a3:f2:55:8c:e9:ee:68:76:
         35:d4:c2:66:d7:a6:37:8a:b9:3b:a0:9b:a9:bb:22:44:2c:45:
         0b:2c:50:89:07:bc:75:79:e6:d9:b0:92:7a:67:23:3e:de:ac:
         f0:62:a4:2c:fa:f3:22:f2:f0:b8:c1:a4:79:5d:49:1d:92:40:
         53:95:14:e0:61:02:22:9b:01:11:48:1c:48:66:56:b2:2a:30:
         fc:e9:00:d0:dd:2a:e4:76:40:a6:76:2d:1f:03:87:6a:1d:23:
         fd:63:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org