Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
File:                     MEMWh1gvk10cjEugENwarX1sqr8.mft (raw, json)
Hash identifier:          dCxNxD4pVnLhx8iPSQBJssZjSOanhIGxcfvB9D02pJU=
Subject key identifier:   D1:F5:B7:B9:24:C9:F7:D9:1B:FF:9E:DB:B9:25:FB:D1:9C:E3:57:66
Authority key identifier: 30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF
Certificate issuer:       /CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF
Certificate serial:       0467
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
Manifest number:          0463
Signing time:             Fri 03 May 2024 01:53:34 +0000
Manifest this update:     Fri 03 May 2024 01:53:34 +0000
Manifest next update:     Fri 10 May 2024 01:53:34 +0000
Files and hashes:         1: MEMWh1gvk10cjEugENwarX1sqr8.crl (hash: Mgx/jd/eEky2e3nrIQ794yhSQ57eM9L3oAqnmYQsNbE=)
                          2: F0B87A62FC1711EBA835010DC4F9AE02.roa (hash: Ir4I63+Z+piq9RvUnFl1cneKPoPIvRlwmZhNeN/6J3A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.crl
                          rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF
        Validity
            Not Before: May  3 01:53:34 2024 GMT
            Not After : May 10 01:53:34 2024 GMT
        Subject: CN=6634439e-aa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:a0:fd:8c:7a:80:3c:8f:38:72:01:bc:76:
                    fd:a2:51:3b:0c:0d:94:50:c1:e1:67:7b:34:02:7c:
                    cd:d7:cb:7b:94:45:85:2b:b0:b8:97:d0:66:93:34:
                    49:4d:a3:a7:cd:6a:91:b3:a2:f7:88:a2:00:45:79:
                    29:51:f4:63:74:b2:16:f3:48:76:f2:33:7d:ac:d8:
                    08:df:aa:b3:e1:8e:c4:14:37:ad:81:c4:c3:e1:73:
                    22:38:fe:fb:24:5a:19:64:1e:f5:51:bf:27:c8:d5:
                    da:0a:7c:b3:c7:4e:7a:7c:a5:14:71:1e:5c:e8:7d:
                    44:89:be:56:db:dc:39:66:38:28:d7:49:80:e4:37:
                    24:9d:23:1a:82:25:b6:e2:78:09:f0:10:e6:f9:a4:
                    3e:58:ff:b4:66:ee:d3:03:bb:0a:7f:ff:ca:48:cf:
                    1b:25:f2:36:39:99:7b:9a:65:b2:3e:81:25:2c:09:
                    bb:c6:84:8a:83:9a:ec:3d:1d:c6:47:b0:c0:a8:f1:
                    8f:3b:a4:f2:bf:32:08:cb:5b:b5:cc:99:88:32:ac:
                    26:ea:03:11:59:52:6f:a7:83:a3:1f:08:9d:fc:16:
                    31:7b:ee:fc:90:59:f3:42:05:ce:65:49:8f:3c:72:
                    1e:51:33:e3:13:5d:b0:12:7b:d4:22:13:e7:fe:29:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:B7:B9:24:C9:F7:D9:1B:FF:9E:DB:B9:25:FB:D1:9C:E3:57:66
            X509v3 Authority Key Identifier:
                keyid:30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:80:18:e7:45:e2:4c:46:e1:9e:99:9d:0b:95:ba:cd:17:
         7f:7d:14:8c:31:8b:08:6c:93:5d:4d:62:98:59:a7:43:18:23:
         02:90:c0:0b:aa:3a:c3:01:94:09:8b:64:cc:c7:a7:f0:7a:e0:
         2b:da:fa:1d:9d:38:20:37:d4:30:57:cc:69:5c:86:c5:80:49:
         4a:30:3e:76:29:66:c2:f8:2c:ee:fd:6d:12:33:c4:52:3d:19:
         48:39:19:2d:96:61:eb:32:ee:7f:bb:1d:8c:8a:18:e2:7c:3c:
         fa:f5:e7:b6:74:18:dd:f1:35:e1:51:db:77:ee:8c:6c:19:48:
         a8:c0:c6:36:68:47:7c:a9:00:9e:23:b7:8e:0a:14:57:0f:b8:
         a8:d2:c9:31:65:3d:c6:d6:e3:91:4f:36:7e:76:a2:e7:92:87:
         83:ba:ff:d3:3b:86:36:cb:a0:66:d9:92:a2:31:17:7e:fc:4a:
         bb:ac:17:7f:f5:98:b4:98:1a:b1:07:11:df:0e:e1:53:0c:33:
         d4:89:4c:6b:3d:be:2d:de:1d:30:37:aa:be:f4:01:bd:90:f7:
         be:74:da:84:81:f8:a7:24:f9:51:4e:00:0b:d5:4c:87:7f:8a:
         82:5c:ea:49:77:fb:d3:80:1a:c3:f2:0f:36:88:9f:b4:63:a6:
         c3:c2:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:13 2024 by rpki-client on console-fra.rpki-client.org