Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          wEiCyNl4ha6iZarTMaCZsqGsRjxcZWaYoCxsXScWufs=
Subject key identifier:   3A:7E:24:85:A1:C3:5E:80:F8:79:27:23:02:5E:FA:44:55:01:9D:03
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       19D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          19C6
Signing time:             Mon 06 May 2024 16:02:13 +0000
Manifest this update:     Mon 06 May 2024 16:02:13 +0000
Manifest next update:     Mon 13 May 2024 16:02:13 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: V3b5oPKsYjQAMnoSLqtO9+ZMt64uX2I8v7H9P7kGM9E=)
                          2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: ttLFwjEhNzZVnfyoPhVIHQRZuOsybetLySd0OOG9Z5E=)
                          3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: STN3pgVQud0+F36KkKDZbeRN9W6sMKUFG6huwdN4TWg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 15:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6615 (0x19d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: May  6 16:02:13 2024 GMT
            Not After : May 13 16:02:13 2024 GMT
        Subject: CN=6638ff05-9867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:69:f8:ca:cb:76:21:80:ba:bc:dd:aa:96:
                    b2:f0:2b:0c:b8:82:c7:6a:61:bc:76:96:45:bc:b3:
                    7f:0f:f0:e9:a3:40:76:c8:c5:0a:38:63:45:7e:31:
                    32:c4:2d:e7:ee:f0:25:12:7a:42:3c:30:d3:0a:89:
                    2f:2c:01:e9:d9:b6:9f:fe:9f:03:4e:36:99:34:0f:
                    ee:90:53:78:37:9d:ef:37:da:00:e5:b3:ea:24:5c:
                    a3:1c:9a:0e:6a:58:72:ff:68:0b:e1:03:18:f7:ee:
                    22:7a:17:c5:2a:39:a6:0d:7c:3b:1c:1f:19:79:18:
                    ee:98:b8:4e:25:e0:59:81:64:ba:d4:45:52:fe:09:
                    90:ff:1c:2e:ab:ff:8b:1f:a9:ec:54:d8:b4:3b:a8:
                    44:21:58:24:c7:95:5c:fa:b4:2b:15:7d:2f:86:17:
                    00:bb:bb:de:b0:cc:82:c0:11:08:97:35:dd:20:f9:
                    5b:12:bf:8f:45:4e:4c:52:c8:18:d3:44:db:df:25:
                    b2:89:1f:1c:ff:cb:94:13:15:26:2e:cf:d6:ee:78:
                    c4:b5:e0:11:a8:58:98:fe:80:05:37:f8:7c:59:3a:
                    42:84:d8:c0:4f:30:fa:b6:2a:ae:ac:f8:72:f3:c6:
                    d2:7d:62:1e:c7:0a:cb:71:a5:68:65:56:4b:c7:bc:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7E:24:85:A1:C3:5E:80:F8:79:27:23:02:5E:FA:44:55:01:9D:03
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bc:6d:3d:5c:df:5a:28:ad:a3:61:75:6e:12:67:f4:12:ba:
         64:1a:bf:52:f9:e5:ba:f3:2b:48:8d:60:0d:67:5e:32:fe:71:
         ff:af:60:a7:20:29:4f:d9:ab:08:f3:d8:c1:7a:e5:9f:d0:ee:
         48:4c:db:d7:79:45:4b:25:fa:95:e6:1d:f6:82:a8:d6:62:e9:
         fe:68:c4:36:b7:79:42:c8:ab:00:c1:39:2f:bd:42:62:28:95:
         1e:e9:06:5c:91:8b:78:38:a0:d6:81:5a:66:a7:c4:d9:bb:d3:
         fe:bd:58:40:e3:96:11:ac:06:1a:e0:62:66:bf:52:da:e6:5e:
         1f:2a:08:dc:e8:3a:a5:09:2a:0c:4b:02:e9:9e:16:6b:35:d8:
         63:42:7d:f0:e1:5f:be:11:a0:01:d2:9f:1a:4b:d6:34:94:cf:
         4c:44:bd:db:a6:bc:3f:f4:5a:44:7f:57:9d:27:f9:d8:57:53:
         fb:19:e1:65:ff:80:77:b4:fd:81:fb:74:31:b8:84:f4:7e:e2:
         8a:aa:c7:60:ec:82:06:4f:34:a4:3b:09:3e:e4:84:85:fd:5f:
         ab:20:9a:39:fb:d9:04:06:aa:f6:a7:e4:55:1d:12:b9:82:c1:
         80:ee:58:15:67:ac:a2:9a:9e:12:75:4d:77:81:ff:ae:30:4f:
         e3:98:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:38 2024 by rpki-client on console-fra.rpki-client.org