Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
File:                     Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json)
Hash identifier:          BgnRqX3+WAlhCPCB+XzBdyDdFlGckR1dIyR++IVt/wA=
Subject key identifier:   E7:77:1C:27:6F:DB:8C:6B:D9:25:BC:EB:84:4A:9C:0A:A3:6B:71:D4
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Certificate issuer:       /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
Manifest number:          01CE
Signing time:             Wed 01 May 2024 04:48:28 +0000
Manifest this update:     Wed 01 May 2024 04:48:27 +0000
Manifest next update:     Wed 08 May 2024 04:48:27 +0000
Files and hashes:         1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: 8YgATv6J61L01Ih2faCQItodVd/Wxv2QXqdWDnNbMCA=)
                          2: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 6lwUD/wFq4B3UF83A/3VHtffkVHgpsFSDSRSvlPysk8=)
                          3: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: MyDRVXvnFzkLWrFzOK4rfuy/P7LF5d7c+bUtKtomLlw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
        Validity
            Not Before: May  1 04:48:27 2024 GMT
            Not After : May  8 04:48:27 2024 GMT
        Subject: CN=6631c99c-ba9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:6d:82:91:c8:3d:2d:19:88:be:77:a4:90:
                    91:3c:29:ec:6d:09:29:61:3e:f7:0a:6d:45:89:7c:
                    92:44:dc:db:1b:4d:04:a8:73:86:2c:f6:12:cd:7f:
                    9f:02:23:a7:3d:f2:15:23:69:05:46:ac:d2:80:57:
                    0f:90:9b:33:49:ca:80:ce:65:57:a4:a1:46:71:65:
                    31:f4:6c:1a:c4:0a:a7:f0:6b:ad:61:51:5a:5e:31:
                    35:9a:ed:62:af:b3:84:48:52:fc:54:ea:71:bd:05:
                    75:15:4d:74:e6:6d:b1:fc:42:20:af:be:20:7a:24:
                    19:e8:7d:83:60:ab:4b:3b:fb:bd:cb:a7:35:4b:8d:
                    d1:72:a2:25:28:9e:70:ac:30:33:08:50:f4:93:84:
                    c6:3f:2e:d9:dc:3e:60:55:8f:45:f3:16:21:64:25:
                    e9:a0:b2:89:4c:4d:03:c9:d4:7f:22:98:b4:39:64:
                    9f:65:84:e0:24:13:ea:c0:25:8b:6c:5c:19:57:53:
                    f6:b5:e4:61:be:06:bc:b8:99:a5:d1:cb:73:ee:7f:
                    71:cc:c2:d9:81:26:42:67:d7:18:c3:6e:dc:68:6a:
                    55:3f:f9:bf:ce:0d:1a:fa:85:96:ca:a2:fb:88:ce:
                    fe:bf:9a:f6:fc:76:05:95:e9:1a:36:b3:8e:14:88:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:1C:27:6F:DB:8C:6B:D9:25:BC:EB:84:4A:9C:0A:A3:6B:71:D4
            X509v3 Authority Key Identifier:
                keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:76:f0:ed:31:f0:d9:3d:7e:12:97:0e:1f:dd:6d:89:77:47:
         da:c3:5e:55:54:ae:13:5a:56:d8:36:60:0d:71:b4:a7:2c:a4:
         ee:f3:16:21:77:e6:77:bf:4d:a2:60:2c:a3:89:e3:02:f0:5c:
         38:a2:c5:b9:0c:bd:1b:1e:d2:90:62:13:da:98:34:ba:10:ff:
         3f:fc:6a:b5:56:92:f6:f3:10:18:87:99:ae:3b:f9:3d:26:d3:
         7f:8e:24:33:38:bd:8e:5b:1c:b7:73:32:fb:d0:d1:c3:47:70:
         50:a8:b8:e6:c5:89:b3:28:03:65:98:34:47:3c:ef:35:82:ee:
         7b:6a:b1:02:84:33:ac:56:4b:21:d5:19:f6:9f:35:0b:2a:1f:
         26:a8:39:45:81:4f:d2:15:8b:9f:b0:ff:20:95:27:c3:af:90:
         db:15:1d:e9:3c:db:cc:41:a6:49:17:61:58:6e:51:63:09:e0:
         f4:36:84:90:f2:fa:cb:5b:11:b1:7d:02:87:42:eb:81:4e:f3:
         18:bc:97:3c:d4:bf:12:b3:85:58:db:07:b6:7b:80:cf:fe:75:
         e4:30:b8:70:d4:be:ef:e4:37:0c:89:54:38:93:0c:18:91:ab:
         e6:27:80:e3:08:27:05:00:dc:27:5d:4a:f0:20:6b:51:49:70:
         d5:ba:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:55:42 2024 by rpki-client on console-ams.rpki-client.org