Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          Kt1NdYcmqRSwZ93RayKWcWFuQ6yhB+ua16vf/9ESHfU=
Subject key identifier:   D1:FA:0F:19:01:48:0B:AD:88:0C:01:F4:87:1B:C9:F0:44:90:88:0D
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       340F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          33E1
Signing time:             Tue 30 Apr 2024 14:26:53 +0000
Manifest this update:     Tue 30 Apr 2024 14:26:52 +0000
Manifest next update:     Tue 07 May 2024 14:26:52 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: SbLvhnZo4K47kw7AOoIw29TadRj6S6cMjf4fsFoe7L0=)
                          2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: Sb+T+Aiuv11PThRPjJUZQbTAKtri3ge+udK5G3hmsfY=)
                          3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: Qn1WM06chi02gzUwTVrnXfMikD/uGjvyaRc+4AnXcGQ=)
                          4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: aDcFPj9k1Wma3kYuqtZDaJFjgE39HYPXBABBwap0MIs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 14:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13327 (0x340f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Apr 30 14:26:52 2024 GMT
            Not After : May  7 14:26:52 2024 GMT
        Subject: CN=6630ffad-fe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:e3:78:8e:da:27:eb:77:93:59:a9:1d:a2:
                    7e:88:e2:00:ec:65:a9:d3:31:a1:97:ca:d7:15:c0:
                    e3:71:c6:66:d9:46:b1:90:bc:3c:0c:bc:34:36:14:
                    1e:01:62:a9:62:be:85:ab:43:51:84:77:10:26:c9:
                    3d:09:19:90:f8:cf:65:07:04:4f:af:37:08:56:c2:
                    a7:15:3e:ee:44:ab:9c:e3:c6:ce:0e:b7:cf:97:76:
                    77:2c:45:b5:1a:d8:77:cb:73:cc:33:e3:37:6d:58:
                    2b:9d:e1:49:00:32:ac:3c:83:8a:f7:87:83:1f:24:
                    12:04:64:c6:07:7c:9f:ac:62:4a:44:3a:96:17:56:
                    6f:24:aa:3e:9a:83:60:88:f1:9d:a2:5a:72:ea:a1:
                    5e:33:35:ea:48:fe:57:f4:e2:33:43:40:aa:98:ec:
                    bd:a4:dc:5f:27:13:91:e0:c2:49:8c:ff:71:f9:e0:
                    e6:11:00:1c:03:e2:97:df:fc:8d:69:a1:5d:d4:e8:
                    b7:28:62:83:5c:4b:a6:e4:29:b3:f6:0f:5d:4c:e3:
                    0f:87:06:e4:d2:59:31:01:57:4e:53:e5:d8:3b:4e:
                    5b:b2:6b:00:04:01:d0:3f:d9:c8:07:f7:e7:c8:01:
                    96:49:e0:f2:fc:aa:4a:46:9b:a5:19:23:cc:a3:36:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FA:0F:19:01:48:0B:AD:88:0C:01:F4:87:1B:C9:F0:44:90:88:0D
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:2d:60:b2:d4:46:ec:b1:25:7f:c4:99:3c:94:80:f2:36:
         e3:53:0f:97:91:8d:e3:ac:e9:ef:e4:11:59:a5:48:35:c8:1c:
         b8:d2:e8:54:d7:5a:0d:26:a7:11:bf:21:27:c9:73:da:ea:07:
         9e:bf:f6:8e:c6:02:2f:f2:65:e4:ef:46:ec:67:f8:d8:f8:61:
         47:0d:84:e3:fd:b6:5f:3b:d4:ae:26:71:a6:e5:65:58:5c:94:
         d9:a9:a4:46:53:ed:be:e2:0f:8e:fc:8c:5e:33:b3:f0:cd:b4:
         1e:98:c3:88:bf:0a:d1:2f:4c:cd:e9:e8:50:47:9e:86:7e:77:
         f4:2f:bc:2c:d7:3d:64:08:30:6f:73:7f:30:ab:56:75:86:78:
         b1:1c:52:db:86:43:73:36:bf:ba:16:b3:37:c0:37:cb:ba:be:
         3b:6a:ff:fe:1e:16:c5:34:bc:71:ea:e1:cb:95:f9:20:b2:36:
         70:f1:37:23:9a:90:3b:79:db:08:ea:60:dd:d9:d0:cb:3b:85:
         91:6d:cc:d2:77:cd:5e:43:67:69:10:91:20:63:f4:9b:ad:9f:
         63:23:a2:e2:fd:28:94:e6:9b:2a:ef:44:af:90:47:e8:be:7f:
         e9:e4:bc:17:dd:5b:2e:db:07:3b:da:52:d0:53:65:06:d2:0e:
         2c:fb:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:52:30 2024 by rpki-client on console-fra.rpki-client.org