Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
File:                     SKOukZPdEbs3NMcFR26Yw_94uEE.mft (raw, json)
Hash identifier:          PKtWw5nguLGiSE7KMoSjI3xg3+O75QkQ73KEGkK+MRk=
Subject key identifier:   1C:D9:60:87:EC:59:BE:A8:62:67:D6:33:E6:3E:72:B6:7F:9F:A0:38
Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41
Certificate issuer:       /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
Manifest number:          070A
Signing time:             Mon 06 May 2024 22:42:51 +0000
Manifest this update:     Mon 06 May 2024 22:42:51 +0000
Manifest next update:     Mon 13 May 2024 22:42:51 +0000
Files and hashes:         1: SKOukZPdEbs3NMcFR26Yw_94uEE.crl (hash: HbXBOEN5C5uE3W8wotHKcMfZenNXNwmDx58buRLb/tA=)
                          2: FB54EFD2F31711EABD181553C4F9AE02.roa (hash: NgMw3T7DfqnzElTGvX3mBg7LoiHdeuXTOwRfHpefCy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl
                          rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 22:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
        Validity
            Not Before: May  6 22:42:51 2024 GMT
            Not After : May 13 22:42:51 2024 GMT
        Subject: CN=66395ceb-49c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:b1:4b:b4:00:5d:c6:bc:79:bf:dd:d4:78:
                    aa:dd:ef:2f:eb:99:a4:32:2c:66:9a:ab:50:a3:28:
                    8d:f1:9e:04:85:bc:10:2e:ce:71:7c:48:b4:86:fa:
                    c3:c9:bb:ff:1f:03:c3:c9:1a:ce:04:6a:52:4c:92:
                    22:66:dd:0b:fc:05:b3:bc:78:47:4f:fb:d1:1b:77:
                    7c:2a:ca:42:a7:ed:2f:30:70:9c:dc:28:e7:ab:fd:
                    be:65:aa:82:23:e9:b6:36:2c:40:9e:79:1f:ee:a6:
                    f8:e5:3f:77:c1:5a:88:71:e4:9f:2e:09:79:71:2e:
                    49:8d:8a:93:1c:46:50:11:cf:93:c4:79:03:c0:20:
                    e2:e4:a1:b2:81:b4:6f:4c:f6:64:c5:45:9c:29:9c:
                    18:df:95:ce:aa:99:ec:5d:19:0c:fa:54:3b:5a:45:
                    03:c2:52:0f:16:f9:a0:7b:b1:41:53:d3:f6:aa:81:
                    06:25:51:ff:aa:c6:b0:14:10:ed:5d:ba:0b:4e:28:
                    42:ae:21:22:46:4b:d4:a9:27:e4:6a:ed:7a:ca:c5:
                    b2:2e:d9:48:d3:a3:ea:fd:67:87:9f:e3:11:3a:ce:
                    b6:98:bd:cf:12:42:8c:c1:61:f9:90:ec:64:51:ca:
                    8c:cc:3c:63:22:f6:d0:6d:7e:e3:74:1c:69:e3:29:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:60:87:EC:59:BE:A8:62:67:D6:33:E6:3E:72:B6:7F:9F:A0:38
            X509v3 Authority Key Identifier:
                keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:bb:d5:ce:d0:b0:b9:1a:38:14:36:b8:56:17:1f:d8:dd:
         32:3e:94:e9:a7:60:52:fc:21:a8:6e:9c:28:78:cd:8e:80:e2:
         7a:51:ba:95:5e:ae:82:5a:f0:22:35:93:80:f3:e7:76:82:36:
         d9:2f:09:35:ad:4e:a3:1f:23:84:76:2c:1c:f2:f7:c0:98:ab:
         9c:1e:26:8e:65:74:10:47:c0:6a:ac:c3:19:c6:50:37:f7:ad:
         d5:ea:dc:2b:e9:76:12:be:ba:7d:68:36:d3:e6:97:3a:d0:a4:
         b0:2f:90:02:30:2f:d9:7d:01:33:f8:a8:1a:f3:9a:c3:bd:1d:
         ea:39:e1:4f:41:fd:bf:48:ba:5a:59:55:3a:73:e5:01:41:36:
         0d:40:a7:62:6a:c2:20:37:fa:8e:b5:58:0f:24:8e:bf:18:9f:
         12:ae:ae:19:e6:86:86:f6:11:8f:78:be:98:4a:b3:f8:d8:ce:
         ff:b4:75:87:5a:e0:16:88:5d:c5:ea:80:e9:6f:ff:9e:fc:7f:
         6f:d5:0e:ab:2f:32:e8:7a:b6:e0:87:f5:1e:47:13:cf:da:f9:
         0a:6b:eb:1c:6b:2d:56:a5:78:07:83:a2:46:59:fb:92:46:0b:
         fb:9a:ef:b8:1d:04:fa:fe:79:e0:7b:95:26:74:67:c5:0c:d0:
         26:38:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:19 2024 by rpki-client on console-fra.rpki-client.org