Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          b642auRyuttk68/hz8v+S3IDBAdZujhRopBITGUHLuc=
Subject key identifier:   63:B0:E1:7A:A3:36:01:BC:96:EC:65:C4:AD:FE:8A:A2:6E:94:53:4B
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          0556
Signing time:             Fri 03 May 2024 00:57:23 +0000
Manifest this update:     Fri 03 May 2024 00:57:22 +0000
Manifest next update:     Fri 10 May 2024 00:57:22 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: QzEM5rf0q+xwrFJzKvwLZH+1TRPMlK72uJL06TXQ0ZA=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: kIZu/tezhiy3H+DTb+Dmw1ZxjmarMQIurOLj53+ClAY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: May  3 00:57:22 2024 GMT
            Not After : May 10 00:57:22 2024 GMT
        Subject: CN=66343673-4b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:b0:0f:b8:f3:c4:7a:c2:fc:0e:a0:5e:ef:
                    3e:68:7c:2b:08:bb:a8:4d:88:30:5e:59:96:76:52:
                    4e:4a:c6:ea:75:42:d2:9a:e0:d4:fc:94:db:e0:50:
                    8b:ec:4b:48:e4:f7:65:4e:58:b6:5a:63:bb:f4:ba:
                    82:37:24:e1:72:69:79:fe:98:8a:cf:f1:64:4f:ed:
                    4b:e1:10:35:4b:7b:d3:7e:17:e3:48:1c:d6:16:89:
                    32:22:6d:1f:70:d3:3c:cd:21:b4:08:e1:fe:b0:af:
                    f2:70:e7:02:fd:98:64:7c:74:3d:b1:69:be:73:01:
                    0b:95:a0:0d:54:31:c1:e8:25:bb:a7:ff:e5:3e:d8:
                    14:a8:87:e3:01:29:c5:56:16:7d:04:2a:9c:7a:f2:
                    ad:95:b6:54:a0:9a:84:b9:cd:99:1b:00:82:d8:9e:
                    af:b0:e0:0d:8a:aa:e1:8b:6c:60:77:b5:5d:5f:08:
                    06:a8:6f:f5:3a:27:67:db:56:8a:19:dd:dc:ea:37:
                    6a:2f:d0:e4:fa:01:7e:e7:63:e0:93:0c:e7:84:3d:
                    23:9d:f0:3c:87:f7:02:cf:4c:00:5a:d0:16:89:fe:
                    b5:10:f3:f1:ca:47:41:49:34:a9:93:e6:24:88:39:
                    6d:ef:36:35:3f:f4:8b:e3:43:fd:bc:49:36:0d:cb:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B0:E1:7A:A3:36:01:BC:96:EC:65:C4:AD:FE:8A:A2:6E:94:53:4B
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:05:99:ef:38:40:ad:07:40:82:8e:d1:dd:6a:a5:ce:64:42:
         22:fa:53:c7:ee:fe:31:0e:eb:c9:b9:06:d5:04:1f:c6:5a:0b:
         94:fa:9a:23:17:5d:b3:af:f5:a6:6f:d4:a8:e0:c2:6d:82:df:
         ae:05:2d:8b:12:15:36:e7:50:88:5a:ac:a1:b4:76:a7:ba:58:
         74:ac:a9:11:22:e7:53:77:03:33:df:fc:f8:62:41:69:b7:2f:
         71:d0:f7:14:e5:6a:f4:70:94:37:e0:00:a6:4e:17:14:5b:d3:
         b9:7b:b4:88:e1:77:4a:c6:17:fa:f4:c1:db:0d:33:ea:cb:15:
         3a:94:4a:d9:0b:22:8a:5a:12:bb:af:54:24:3c:2a:e3:67:e5:
         5d:5d:19:20:ea:d0:af:ee:82:2c:54:39:95:73:53:7d:b2:2b:
         6d:53:89:18:13:a4:eb:4c:74:cd:c2:b9:41:c6:f9:ea:da:5f:
         ae:a7:cb:eb:2d:9d:82:d7:90:3b:22:64:da:4e:dc:97:01:2d:
         f6:59:9f:57:8d:c4:77:a0:b0:32:08:78:5f:51:26:4e:35:01:
         7d:f9:65:27:04:f0:78:52:44:ee:87:da:cf:2f:dd:fb:30:ae:
         f2:58:26:ec:b2:97:ed:f2:49:70:27:06:dc:e1:2a:0d:7c:b9:
         d3:a2:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:48 2024 by rpki-client on console-ams.rpki-client.org