Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
File:                     LA_KCbhIAw75SKUs69ATLbduYlY.mft (raw, json)
Hash identifier:          XTPyG+30I28+xgG3DBfHWStCZruvAZ8aGh8f1LGr7Wo=
Subject key identifier:   F9:64:9D:90:0F:F6:22:F7:6D:72:9E:EF:D6:8E:99:82:5A:81:81:03
Authority key identifier: 2C:0F:CA:09:B8:48:03:0E:F9:48:A5:2C:EB:D0:13:2D:B7:6E:62:56
Certificate issuer:       /CN=A9150B1D/serialNumber=2C0FCA09B848030EF948A52CEBD0132DB76E6256
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
Manifest number:          03B5
Signing time:             Mon 27 May 2024 02:46:28 +0000
Manifest this update:     Mon 27 May 2024 02:46:27 +0000
Manifest next update:     Mon 03 Jun 2024 02:46:27 +0000
Files and hashes:         1: LA_KCbhIAw75SKUs69ATLbduYlY.crl (hash: bGvRcclFed+u02cxvlbaHlh8ZonGVvgIwl9zDVedZG8=)
                          2: 3198163ABBF311EEA81EB652C4F9AE02.roa (hash: u+7JP5g7Nw5pL0DdbseM6yZDZo8JGkgqsGSQtBS7zUY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.crl
                          rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B1D/serialNumber=2C0FCA09B848030EF948A52CEBD0132DB76E6256
        Validity
            Not Before: May 27 02:46:27 2024 GMT
            Not After : Jun  3 02:46:27 2024 GMT
        Subject: CN=6653f403-6448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:ce:42:87:4e:43:fd:0b:f9:fa:2a:26:ce:
                    c6:4e:ee:6b:e6:22:1a:a6:be:84:4e:40:ef:9d:03:
                    ff:62:c2:75:d9:7b:f9:62:09:a4:fc:a4:09:2c:12:
                    69:50:82:80:3f:62:3b:72:0b:88:5e:84:1e:37:c4:
                    85:b8:cd:fd:11:85:96:8f:b3:59:aa:b1:81:f6:09:
                    31:28:5b:28:30:9c:86:8a:53:90:d3:07:2e:d3:9a:
                    54:02:41:c6:ff:2b:a1:66:10:74:11:f1:a3:70:0e:
                    6c:57:30:c0:c2:60:c1:63:8a:b8:8e:51:61:82:57:
                    79:32:1e:f4:a2:b3:09:9d:f9:fd:ce:bc:24:5b:af:
                    63:3f:8a:23:1d:f4:a2:76:a7:38:dd:86:10:81:86:
                    31:61:a3:e6:d8:02:2f:30:4d:39:88:d2:15:b4:03:
                    b2:ae:39:b8:89:86:5b:4c:f7:47:21:4a:88:40:af:
                    a7:2f:57:4f:36:bb:83:bf:3f:a6:8a:01:fb:72:70:
                    de:87:45:0e:0d:b0:2e:ef:d4:8f:2b:55:4f:72:da:
                    0f:cd:e7:13:a9:a8:12:92:69:4e:2a:92:a9:fb:3f:
                    33:8c:c0:40:b7:07:a0:54:ae:3e:f0:f3:43:e0:d0:
                    4a:81:d0:6f:d4:b5:88:e9:dd:11:d7:d6:d3:99:ce:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:9D:90:0F:F6:22:F7:6D:72:9E:EF:D6:8E:99:82:5A:81:81:03
            X509v3 Authority Key Identifier:
                keyid:2C:0F:CA:09:B8:48:03:0E:F9:48:A5:2C:EB:D0:13:2D:B7:6E:62:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LA_KCbhIAw75SKUs69ATLbduYlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B1D/935BD104572D11ECB2C4CB77C4F9AE02/LA_KCbhIAw75SKUs69ATLbduYlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:7d:26:fa:a3:91:be:86:5e:db:17:4e:21:82:a0:18:f5:
         00:f7:47:38:c1:22:fe:9f:26:91:32:55:96:e3:a7:25:a4:c1:
         94:d3:40:54:c3:25:34:5d:e4:7b:ab:c5:b4:7b:95:73:0f:13:
         7a:20:f0:4b:c2:43:96:32:dc:9c:0c:92:c7:bf:ec:74:1c:70:
         d5:4c:aa:66:42:64:bf:bf:e8:a0:e3:da:df:7b:94:c4:dd:55:
         da:19:62:c8:5b:e5:c6:c2:8f:52:84:c0:78:b4:62:ac:1a:7b:
         65:f7:df:c8:d0:41:43:ed:5d:7b:15:a8:fa:3b:a4:c8:82:05:
         e0:fd:71:96:01:13:76:d3:31:40:dc:27:79:0e:16:5a:2b:9c:
         24:ae:f0:41:b1:8e:f4:c5:cb:9c:30:52:52:67:d6:ba:8e:d9:
         98:a9:45:db:58:6c:a6:6d:ac:56:8b:b4:e9:3b:48:2a:e5:64:
         19:fd:28:d0:ec:3b:d1:65:77:07:ff:68:38:e3:e2:24:74:5b:
         9f:37:76:fb:d5:46:70:8d:a7:53:71:8e:01:7d:e5:67:9b:aa:
         12:7e:56:75:f7:9a:e2:b6:3f:55:6e:a8:ee:91:f4:74:d1:ec:
         65:ea:c0:45:1e:30:59:fb:02:d6:ae:96:5b:cd:2d:5b:cb:56:
         b6:40:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:51 2024 by rpki-client on console-ams.rpki-client.org