Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          DGGlGN7TeKhGXhfOufHjTepQON0sNDwQ/Q8VCvwb908=
Subject key identifier:   D0:97:0D:07:36:FB:99:A4:17:F8:7E:8A:B4:F0:8A:ED:77:27:E5:83
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          071F
Signing time:             Tue 30 Apr 2024 22:50:44 +0000
Manifest this update:     Tue 30 Apr 2024 22:50:43 +0000
Manifest next update:     Tue 07 May 2024 22:50:43 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: w9P7APgI7IxffYZC2RESdr1CfmVzCWDnvY7WeBgW9h0=)
                          2: 84F043C8E90D11EA80A27F31C4F9AE02.roa (hash: qI6KCrtodySkzeL/oitt77Tkl6xZ1ymDLyrPD1WZLAk=)
                          3: 83E51CA6E90D11EA80A27F31C4F9AE02.roa (hash: 4goWRslbaXuJhuW6GsPxpYxIOzctTDpU2MeaFBk3Hm0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Apr 30 22:50:43 2024 GMT
            Not After : May  7 22:50:43 2024 GMT
        Subject: CN=663175c4-9e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:40:09:3b:8e:47:6b:a6:97:60:95:56:1c:
                    84:0f:72:cc:42:fa:f5:b5:ac:2d:bf:90:a1:93:80:
                    b8:1e:5d:22:ad:3d:e4:4b:6b:9b:27:f5:e6:d3:6d:
                    cb:07:76:42:3f:68:b8:30:ae:7d:74:cc:db:c6:e2:
                    92:8a:df:b6:cb:05:81:13:7e:f6:21:d4:95:15:36:
                    55:3e:64:de:4d:74:5f:6d:62:17:bb:0d:55:79:a2:
                    8a:03:eb:c1:76:a6:94:92:81:b1:44:7e:9f:d2:8f:
                    bf:d6:da:f0:c2:76:66:53:cb:63:3b:2c:16:12:6e:
                    f9:95:aa:c1:55:bb:02:fc:5c:81:a5:2d:ff:05:99:
                    c6:64:55:67:0f:44:b2:a6:b4:7d:6d:26:86:66:82:
                    6d:00:81:2c:c3:94:13:f5:7d:85:f3:96:fa:86:dc:
                    32:58:f4:8e:04:34:5b:b3:10:2c:d7:cb:e3:2c:a4:
                    03:82:cd:03:d6:b1:dc:61:30:83:ca:20:4a:92:4f:
                    85:e9:10:f9:30:a0:e7:d8:35:f4:77:16:72:64:d5:
                    01:89:5a:52:d5:74:f8:91:1b:ab:97:bc:56:5d:bf:
                    d2:0f:21:47:4a:0b:7b:59:a5:58:f6:9c:13:a9:c5:
                    79:b4:4a:73:5e:88:f7:e6:10:ae:85:7e:0c:2a:52:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:0D:07:36:FB:99:A4:17:F8:7E:8A:B4:F0:8A:ED:77:27:E5:83
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b5:c3:d8:5f:08:b4:c6:0b:70:bf:c6:25:d4:a2:74:83:08:
         88:8a:d9:78:56:70:ee:0a:de:08:e6:22:cf:2f:08:73:d8:c1:
         3b:fb:f5:23:ab:3a:47:a2:f1:22:f0:75:89:1a:3d:7a:48:6b:
         3e:09:77:4f:b8:61:56:14:d7:69:a1:17:f2:77:36:33:ef:3d:
         72:84:90:b9:54:da:33:19:93:e1:b6:2c:31:be:ad:43:ef:ea:
         ee:1b:e9:97:7f:43:68:ea:67:7d:bd:6f:8b:41:8a:e5:fa:3f:
         6a:7c:df:e8:44:aa:5b:4d:4c:2b:f5:47:aa:a2:3b:01:90:61:
         17:e7:0b:8d:19:45:7a:aa:9d:8e:45:56:56:d2:2d:a8:4f:98:
         89:c4:e6:f3:54:1e:2b:db:99:e5:66:b2:64:d7:00:cf:f6:02:
         b1:09:1a:7a:a7:81:42:ad:4b:56:ee:73:28:d3:2e:15:8d:b0:
         21:8a:89:f7:c6:a4:f3:df:77:8d:3d:24:29:3c:63:c5:d3:4f:
         81:20:a7:1f:17:b7:ea:13:1e:d7:e9:3e:af:f0:7c:35:5f:46:
         7f:cd:39:fc:8f:35:2b:ee:7d:ee:20:c7:f8:d5:c1:87:18:32:
         76:8d:af:a4:63:ac:b9:2b:b2:52:a3:f0:d1:af:1b:93:f0:44:
         07:dc:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:52:29 2024 by rpki-client on console-ams.rpki-client.org