Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          FRbwaMjfHmsQLMYnRuoHa4lwNUuvG6gTrtKCZmdmPcg=
Subject key identifier:   5A:B0:53:2E:56:35:26:BF:AF:AF:36:07:C2:83:48:02:FA:1C:17:C8
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0BD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0BC3
Signing time:             Fri 26 Apr 2024 19:09:00 +0000
Manifest this update:     Fri 26 Apr 2024 19:08:59 +0000
Manifest next update:     Fri 03 May 2024 19:08:59 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: D5jEPduXwHWzz9MIAvEwkkzTYRmI56KyfHugbAR5JKg=)
                          2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: AaqsJBv7Q2k9V+31oa/lFwv5GYI7E1XoMOqW7xHCPzU=)
                          3: F1862B06642911EAA019224CC4F9AE02.roa (hash: h2vdvT34WKsB6JujraFpNiL5VNmrheNK56QbyDgVD8M=)
                          4: F058F664642911EAA019224CC4F9AE02.roa (hash: 3FlBZORykfXhZ0H8sk1YCUwxr47iX3q8QkJh8MXCE6c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 19:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: Apr 26 19:08:59 2024 GMT
            Not After : May  3 19:08:59 2024 GMT
        Subject: CN=662bfbcb-646c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:39:30:14:02:9e:e3:dc:05:52:f0:1c:24:
                    22:5a:c2:37:0c:7d:36:e3:a5:48:b5:89:6d:ca:f0:
                    5a:35:f6:78:71:f1:85:e1:ec:65:6b:19:2d:e7:e1:
                    bb:c0:9c:f4:68:84:c9:c6:ca:e3:c2:10:09:3f:99:
                    4c:36:2d:11:19:d4:78:69:0d:ce:0c:c0:41:13:e0:
                    ad:ef:1a:7d:63:3e:fa:2e:15:b7:58:ad:b4:28:93:
                    a2:13:3f:ab:75:08:54:a3:bd:4b:af:da:e2:60:ba:
                    7d:93:59:e2:f0:a2:7a:d2:8b:5c:ab:0b:05:da:0e:
                    90:c6:6c:c7:ac:64:db:04:ae:59:50:c1:09:5b:f5:
                    81:46:ef:cd:cf:4d:3a:53:15:48:6a:bc:8a:d9:2d:
                    dd:ef:da:70:85:bb:18:1f:ac:7c:27:de:c1:c0:4a:
                    84:a9:16:a6:d6:ce:01:50:c7:54:34:09:24:d8:85:
                    1e:0f:0b:68:e9:1d:32:42:49:53:88:ec:a5:d2:76:
                    5a:eb:5d:de:00:8f:a9:b1:67:92:69:f3:ec:24:42:
                    73:de:1b:3b:76:0c:0f:dc:86:d4:54:19:ff:bb:07:
                    d4:ce:05:3a:99:7e:8a:5e:ec:4b:d4:6c:15:8b:8b:
                    b3:bc:98:c5:08:f3:41:e9:90:fd:b2:68:da:1a:2e:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:53:2E:56:35:26:BF:AF:AF:36:07:C2:83:48:02:FA:1C:17:C8
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:a8:8c:68:d9:50:bb:76:21:b2:b8:46:f8:34:3c:11:4a:
         d4:da:af:68:9e:90:3e:20:23:48:42:34:f9:12:3a:03:f1:44:
         06:e6:31:d1:7b:f6:9c:30:14:02:df:e0:dc:98:f7:61:8d:ea:
         22:cf:96:a2:ff:ef:3b:f6:c0:af:36:ef:73:f5:06:2d:25:a8:
         06:54:36:ec:23:0b:ce:6c:b8:79:96:c6:35:03:fa:34:0d:e2:
         1c:08:3d:a5:a7:23:b8:b0:b1:66:4b:bc:bd:35:64:f2:7d:55:
         a9:f3:10:9e:5f:f5:02:be:a6:d6:3a:c5:92:d8:e1:f9:7c:b3:
         2b:8d:9d:43:7a:8a:6a:9d:c4:ab:da:97:5f:94:d4:6e:c8:c2:
         9e:7f:24:e7:e8:1c:c9:eb:95:e9:ef:5e:8e:fd:2b:f7:e1:c5:
         f9:b2:3a:21:5a:2c:ef:49:a5:26:0b:61:e7:d8:6a:e6:e3:ac:
         f4:94:0c:ee:7d:f6:5a:49:4e:40:a7:6e:de:9a:a3:45:40:c5:
         a9:42:a5:12:4e:9d:ed:cb:3d:60:a1:ac:af:cc:bf:f0:e8:85:
         4b:3d:16:5d:5e:c7:d6:ff:bc:fd:1d:cf:7f:52:b5:a1:e8:56:
         dd:5b:c9:92:34:86:26:e4:c3:b3:f8:28:e7:e6:a4:b2:e2:4d:
         7d:7f:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:06 2024 by rpki-client on console-ams.rpki-client.org