Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File:                     9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier:          wmGxZzxCKaRD4D3A3x1xP4JzNgeB+HlN3pkfsnJpRxk=
Subject key identifier:   8A:E9:88:07:87:05:65:93:D1:5C:A7:33:19:41:E8:FC:A2:FC:70:92
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer:       /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial:       0B40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number:          0B39
Signing time:             Tue 30 Apr 2024 20:03:28 +0000
Manifest this update:     Tue 30 Apr 2024 20:03:28 +0000
Manifest next update:     Tue 07 May 2024 20:03:28 +0000
Files and hashes:         1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: 0hjz3R/ZbLjOIlV9Yg7BTVJ9SIxDOJasLBmNpTkCwHc=)
                          2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: y22YhOw1VGtA5Oe8Ng0sBNuwh8oyHjHQVLHiFJU/Qio=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
                          rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 20:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2880 (0xb40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
        Validity
            Not Before: Apr 30 20:03:28 2024 GMT
            Not After : May  7 20:03:28 2024 GMT
        Subject: CN=66314e90-cde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:fb:cf:5d:a8:b4:11:5a:25:ac:36:3c:52:
                    27:d4:b4:9f:4f:21:36:17:d0:34:29:2a:c7:d4:b3:
                    c3:89:8a:c7:19:67:5f:35:2b:33:ce:3c:a2:0e:5a:
                    67:f5:8e:06:f7:86:5e:28:74:e7:aa:cc:57:ba:0e:
                    66:07:88:1c:3c:43:4b:1c:98:3d:11:de:eb:d9:c1:
                    c3:f2:23:31:6d:ae:e3:66:34:2a:e4:fe:b0:1a:3a:
                    c9:cf:d5:55:23:8f:d2:b4:09:7d:99:d7:66:eb:14:
                    99:5b:07:b4:21:60:7b:5b:12:b5:ea:c4:fb:4a:ba:
                    80:44:94:1a:b0:88:48:d9:b5:93:0f:82:7b:fd:52:
                    32:66:22:e6:01:bc:10:7c:e9:1b:ad:52:9e:b5:27:
                    b2:00:17:75:75:60:5f:2a:73:32:bd:4c:09:91:b5:
                    99:fc:72:71:48:a2:92:b6:3f:47:d5:d1:5b:51:01:
                    21:26:6f:37:1d:7d:18:c1:f8:c6:7c:cb:34:5a:9f:
                    ce:e9:67:03:1e:b5:b4:9f:a4:82:c9:39:57:a6:65:
                    49:6b:15:9e:5e:96:a2:44:39:51:57:b8:55:78:e1:
                    87:a0:56:39:f6:0d:f2:d9:6d:4a:5f:69:15:41:a3:
                    54:2f:87:7b:a1:5e:c7:b5:eb:24:ed:b2:30:fa:ae:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E9:88:07:87:05:65:93:D1:5C:A7:33:19:41:E8:FC:A2:FC:70:92
            X509v3 Authority Key Identifier:
                keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:85:cc:61:c7:97:7d:21:20:99:3e:0b:38:5d:ea:9d:bd:fd:
         11:cd:5d:19:53:12:f1:fb:6f:7b:13:50:12:fe:c2:43:76:0c:
         f8:f2:e2:ca:c9:ea:81:34:3c:fc:12:3a:62:19:db:6f:d3:3d:
         83:af:f2:95:80:5c:81:13:7f:9e:ae:ea:8d:a0:19:b0:08:72:
         dd:87:26:b0:bf:cb:1b:a3:43:a8:60:e2:0d:71:92:62:66:dd:
         4f:77:61:f1:77:91:72:2f:c6:d6:72:1d:58:ea:34:9c:40:ea:
         d2:2f:d8:c8:95:14:0d:76:fb:41:65:35:e6:1e:f7:a9:20:9a:
         b9:08:db:5a:2e:7d:cc:e0:c2:5d:f6:6f:06:c0:c6:d5:86:99:
         5a:bc:7f:f2:59:27:19:80:2d:08:ec:7e:b5:71:39:6c:cd:41:
         6c:26:b8:2c:9e:bc:6e:66:f7:0f:5b:bd:0e:ea:89:56:34:61:
         2c:f6:11:30:34:2b:a4:ab:6e:44:d9:ae:76:b0:3a:65:92:27:
         97:d1:c3:6a:88:b1:1a:45:2e:39:00:65:65:7e:58:24:56:eb:
         54:16:9d:d8:6c:bd:93:d6:a5:a5:55:21:b4:07:aa:65:47:11:
         95:20:06:79:d7:f3:18:6d:15:14:22:26:4d:1d:f7:ab:c2:86:
         da:2f:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:37:59 2024 by rpki-client on console-fra.rpki-client.org