Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
File:                     rDMhMLHAn9SrI3SVpOqWNLdMEro.mft (raw, json)
Hash identifier:          of5ZcR6/cjosHfY3LOZWDWj3n/WGE2ctfrznL6eQe/Y=
Subject key identifier:   7D:82:00:EF:B0:A7:DC:E6:23:E5:91:32:B7:EA:74:DD:9D:0F:80:58
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Certificate issuer:       /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
Manifest number:          62
Signing time:             Wed 15 May 2024 07:48:13 +0000
Manifest this update:     Wed 15 May 2024 07:48:13 +0000
Manifest next update:     Wed 22 May 2024 07:48:13 +0000
Files and hashes:         1: rDMhMLHAn9SrI3SVpOqWNLdMEro.crl (hash: jGVAY8FgxipJhNG4cGnKfSGNK+9jaXvyejviSYxG9do=)
                          2: 73E8DF82849011EEB85F7368C4F9AE02.roa (hash: S/sapa2dDQUD6Ia/r31SwFczFaEOnutAXV7Tm7jYCuU=)
                          3: 748FABB4849011EEB85F7368C4F9AE02.roa (hash: ptfqA7zTjvueLp0QaWTP2gVQb5lGF0YLiDO84+/lBtE=)
                          4: FA3586ACDC2011EE9D863154C4F9AE02.roa (hash: IB/xEeArNJD2Rk3XmSJn4Ml82QGdMEeros9T/BSyj1s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
                          rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
        Validity
            Not Before: May 15 07:48:13 2024 GMT
            Not After : May 22 07:48:13 2024 GMT
        Subject: CN=664468bd-9d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:66:c0:60:ca:3b:af:6e:c1:6f:37:2d:ac:
                    ac:60:87:c4:ee:31:9d:0e:4e:d1:a7:f0:e0:33:29:
                    35:cc:c8:d5:9c:e1:e8:b9:69:9b:24:2e:c2:96:f3:
                    f3:f5:4f:1e:6b:56:fa:39:7e:22:8e:0a:bd:6c:60:
                    72:c5:7c:c5:7f:de:2a:9c:b3:f2:2f:ab:77:c4:90:
                    9a:31:a2:9c:f1:11:69:b0:e0:0c:25:bf:e0:30:43:
                    5b:50:6f:b5:55:2a:5e:56:ee:f3:a7:56:40:5a:5e:
                    2f:16:ec:ee:67:15:02:eb:f7:21:ab:e1:27:8b:80:
                    03:eb:4a:6b:5d:b4:69:55:bb:d7:81:63:c6:85:8d:
                    da:3b:a1:42:d8:61:77:7b:17:6c:4b:50:7b:e7:53:
                    8b:9f:46:70:b4:d4:72:15:9d:2a:68:19:47:5e:74:
                    e5:81:c8:fa:73:ac:5e:7b:fd:ac:d0:ab:11:94:29:
                    a3:a1:4b:71:b7:30:2c:79:71:d8:d6:c3:7f:4b:c3:
                    9d:48:d0:99:9d:ca:8d:48:eb:b4:76:28:14:91:90:
                    1d:a5:cc:c9:8c:ef:dd:ce:44:89:0b:fd:18:2e:77:
                    a2:4d:1b:62:f1:9b:a8:3d:c1:f5:bf:55:dc:32:c5:
                    b5:f2:d2:42:1b:1e:76:e5:da:ac:0d:33:db:d1:db:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:00:EF:B0:A7:DC:E6:23:E5:91:32:B7:EA:74:DD:9D:0F:80:58
            X509v3 Authority Key Identifier:
                keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:19:41:7e:50:a4:69:a0:f8:d2:df:c4:f1:1e:b9:48:a0:
         64:65:c4:bb:35:50:ae:5f:6f:53:8a:6a:72:74:2f:95:bf:2a:
         7d:ad:3e:6d:8a:21:29:bf:4f:15:cc:ca:61:34:4e:d9:0a:1c:
         d6:2f:c0:49:b6:5f:12:de:fb:d2:e8:f2:1b:05:a9:ce:f7:2e:
         86:94:10:0b:25:a3:c0:c0:09:30:0e:b5:f5:11:86:df:74:2c:
         88:58:99:23:c4:de:4f:e1:42:75:90:14:d6:5e:e8:0e:de:51:
         3d:f8:46:43:46:8f:83:00:6e:47:c7:84:a6:7c:e5:cf:9d:81:
         dd:f1:7b:2e:b1:24:8d:f6:50:41:4c:88:46:4d:f6:42:64:60:
         b3:94:6b:64:eb:f0:56:bb:1d:68:d1:79:2b:8e:dd:3c:90:93:
         f1:5d:71:8d:a7:18:6f:68:b5:2a:9d:ab:b9:9d:4f:62:57:aa:
         7c:51:af:60:ed:56:a3:77:67:5b:5f:31:c8:53:45:68:b7:21:
         bc:90:78:d0:20:62:0c:bf:8b:9c:45:ef:b9:7e:d1:91:55:26:
         74:fd:66:81:a8:d2:27:4d:f2:1f:ea:08:3c:d5:1d:52:4a:80:
         61:00:43:82:9f:c5:d5:f7:40:60:fa:07:db:9c:1e:68:55:f7:
         91:ef:c8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org