Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          nw2uT6XUTVFYRSRQTPJM/9wiCPuCNlwvo3yfqOwyJwM=
Subject key identifier:   74:65:2D:D0:55:34:16:C9:1E:39:E1:10:EA:25:4A:22:12:9E:03:B2
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0985
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0979
Signing time:             Tue 16 Apr 2024 21:02:51 +0000
Manifest this update:     Tue 16 Apr 2024 21:02:50 +0000
Manifest next update:     Tue 23 Apr 2024 21:02:50 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: jLoQlJdGhrsiVxQJxr3nrJpnSbvCck/TulToYl+5zXc=)
                          2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: dsOflOpkW8+KjPtUFNYJfLhkCYrPy78kVp7Q0NWhrvA=)
                          3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: GO2YwYGrwoNpuiHYtjhAmp8gqUntkeadpSY8M8pM8/E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 20:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Apr 16 21:02:50 2024 GMT
            Not After : Apr 23 21:02:50 2024 GMT
        Subject: CN=661ee77b-90a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:c6:a8:94:63:eb:af:90:10:8a:5f:0f:d6:
                    f6:3d:09:42:db:21:71:a0:12:43:27:0a:66:69:fd:
                    18:a8:37:3f:ee:dd:4b:f4:67:c1:88:15:63:28:3e:
                    63:f6:07:c7:be:73:06:b4:98:99:ca:02:41:19:f1:
                    ea:e7:da:99:d9:ae:8a:dc:67:d7:bb:ca:29:b1:e8:
                    28:1c:fb:db:0b:81:b5:ed:ed:9b:85:66:2b:98:c0:
                    c7:c3:70:d7:0f:a8:15:8c:ea:5a:e5:cf:5e:ad:e4:
                    bf:e0:e5:3a:f5:4e:8d:42:59:5f:65:e8:2a:2e:22:
                    79:cf:e1:eb:bb:ce:12:1a:f2:c1:8f:28:e3:4d:67:
                    54:26:ce:d0:53:00:5d:db:24:a3:49:3f:38:4c:42:
                    90:42:27:99:83:2a:ba:bb:4d:59:9d:eb:3f:06:26:
                    91:45:e0:29:8e:e4:fd:26:8e:f7:20:a7:df:bb:f8:
                    0b:a3:ee:9a:50:12:f7:1f:ea:88:50:8b:c5:10:76:
                    b9:cc:a8:8d:8a:d0:82:2d:eb:37:5e:79:cd:7c:2b:
                    dc:cf:11:f5:cc:aa:69:cd:2f:ba:37:8e:00:bd:f2:
                    fa:19:2f:0c:b0:6f:2b:6f:ea:5b:dd:15:bd:1a:f8:
                    6a:8a:ad:63:22:f4:c0:2f:5d:95:42:b7:3a:56:b9:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:65:2D:D0:55:34:16:C9:1E:39:E1:10:EA:25:4A:22:12:9E:03:B2
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:23:01:b6:a7:0d:3c:4b:59:a0:bd:07:ec:10:5b:eb:dd:fd:
         56:b1:23:f5:27:8d:b0:9b:b2:9a:89:df:a9:ee:7a:40:ed:e3:
         01:c7:4c:82:31:a3:31:15:ae:a2:1a:07:89:83:cb:79:41:88:
         34:26:75:e8:4e:9f:89:6e:c5:aa:20:e5:c3:19:e5:c3:04:13:
         40:be:c3:50:ab:03:59:03:4b:68:c1:9a:51:14:0a:95:b3:73:
         c2:b9:70:ea:20:1b:1b:19:b0:9b:12:70:33:e1:18:df:fb:b7:
         0d:ed:6a:35:b3:a3:23:ff:27:2f:cd:75:89:a4:a8:44:5e:60:
         ae:c0:8e:50:1b:ca:d6:79:1b:cf:00:65:37:2b:e5:47:df:b1:
         27:76:42:82:ab:2d:88:6d:87:0a:e5:a3:fd:2e:ce:93:8d:e1:
         89:6d:0b:02:90:14:0c:07:9d:85:cd:8b:7b:71:1a:bc:91:08:
         ac:b7:74:92:84:d9:ae:3d:22:67:d2:9c:98:bb:b5:39:f9:b7:
         b4:09:51:08:99:b6:57:38:1e:a5:fa:e9:6c:e8:a7:e1:1c:ac:
         3b:8f:8c:77:61:34:8a:e1:7e:f9:a1:8b:84:90:c4:ff:ef:15:
         1e:05:07:4e:3a:f9:8e:7a:a9:a8:79:26:ad:96:08:a5:8a:ca:
         e8:d6:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 22:13:06 2024 by rpki-client on console-fra.rpki-client.org