Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
File:                     GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json)
Hash identifier:          9Gz/W0vDBNTVrr3ustQKD4tDINUkiwHbk74ngUm+Pa4=
Subject key identifier:   8B:25:B8:68:EF:16:B7:EF:1D:D8:72:E1:D2:BB:82:D7:5A:4F:E2:81
Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
Certificate issuer:       /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
Manifest number:          03ED
Signing time:             Fri 03 May 2024 02:19:12 +0000
Manifest this update:     Fri 03 May 2024 02:19:12 +0000
Manifest next update:     Fri 10 May 2024 02:19:12 +0000
Files and hashes:         1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: tY7IZ3D4EpfXB1/89zSEhrsdmSs1rjEWsW8jS33lC/k=)
                          2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: dl4RTDHzWq7uNHYDBsFr/OHdTU7zxbtM/nxDEXFCggA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
                          rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
        Validity
            Not Before: May  3 02:19:12 2024 GMT
            Not After : May 10 02:19:12 2024 GMT
        Subject: CN=663449a0-157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:b0:8a:f4:62:80:6c:c8:4c:03:4c:70:32:
                    49:f9:34:6f:01:b9:f2:66:f0:83:70:97:d6:52:47:
                    a8:12:61:9a:d1:5d:f2:a0:b8:66:be:11:44:29:e4:
                    9a:44:5c:51:df:8c:82:62:be:c1:a7:2e:a2:86:64:
                    cc:08:3e:09:fb:b6:1e:32:17:c3:32:1b:aa:0a:39:
                    a1:c5:d5:4b:e5:c6:de:30:a7:e0:a7:7d:6f:e4:8b:
                    a8:e5:e2:f3:4d:6b:3c:05:6b:56:2b:80:26:18:bc:
                    cb:7f:1d:d7:85:23:52:c2:90:61:07:cc:90:62:d9:
                    19:ef:98:c0:d7:33:6a:d7:45:48:10:fc:37:62:52:
                    a6:1f:9b:12:99:41:fc:73:dd:50:87:2b:bc:59:34:
                    23:b9:0b:c4:70:f2:7e:0b:07:51:58:3a:59:f2:96:
                    93:94:45:5f:35:a9:5c:8c:ae:56:9d:bb:a2:b7:e6:
                    66:c5:a4:a8:78:a6:c6:6e:72:b2:61:c5:ea:e5:8c:
                    fc:48:5b:c2:21:99:85:ba:83:8d:a8:9a:7f:7f:21:
                    cd:de:b0:4d:0c:77:0e:0d:4d:ad:f9:14:e6:b3:bf:
                    4a:f4:20:6a:bf:4b:e3:db:f0:52:c9:97:e5:6b:19:
                    82:c2:3b:51:78:48:38:5d:6a:5c:95:8f:2e:c7:79:
                    d7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:25:B8:68:EF:16:B7:EF:1D:D8:72:E1:D2:BB:82:D7:5A:4F:E2:81
            X509v3 Authority Key Identifier:
                keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a8:a6:3c:d3:5f:13:e6:5c:51:68:5e:34:e4:5e:5f:88:00:
         9a:a9:35:d0:9a:42:60:11:d9:fa:c8:13:8b:77:5e:b3:1f:12:
         0e:eb:7d:35:2d:7e:dd:9b:c1:b5:fa:8f:62:35:ae:97:da:80:
         bb:a3:4e:8f:82:14:08:b0:a2:fe:c8:45:d4:83:48:93:72:22:
         00:bb:2d:78:d9:1f:41:fb:94:4f:4a:84:b5:48:2a:5f:38:b0:
         59:f5:2a:95:68:c0:32:35:98:60:c1:6e:4c:0c:1d:77:cf:2e:
         7d:a3:a7:ce:67:be:7c:88:31:ed:23:21:1d:1d:e0:e4:20:ec:
         ba:fc:e6:3a:45:ee:03:33:d5:ba:d9:17:d1:e0:a1:a2:f1:1e:
         bf:5e:3a:59:24:c1:09:77:c8:ac:2d:4b:68:6e:f4:ca:66:c5:
         56:cc:72:0f:2c:37:4f:c5:ce:74:e2:f9:73:13:1d:82:14:43:
         36:5a:f8:76:85:3e:ee:1c:8f:e4:e3:e1:95:c9:ac:a6:42:4b:
         52:92:01:e4:64:86:7b:4f:88:7d:6b:7f:83:30:73:4d:44:95:
         a0:ad:6c:d5:f1:46:97:79:26:2d:35:29:89:53:1b:b3:a1:8f:
         9b:ae:e1:cc:bf:96:50:aa:8f:60:8b:82:17:0d:4d:ae:00:fd:
         73:a8:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:48 2024 by rpki-client on console-ams.rpki-client.org