Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          1wW2SFcvnHjiPYOddAFsMVg4/CPTDVxH/qm8o8ed+Xg=
Subject key identifier:   A6:FB:4F:78:D6:C5:A1:4F:A8:C0:2D:8E:EA:C9:E8:AD:AF:FB:C4:8A
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       0903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          08FD
Signing time:             Fri 26 Apr 2024 21:16:36 +0000
Manifest this update:     Fri 26 Apr 2024 21:16:36 +0000
Manifest next update:     Fri 03 May 2024 21:16:36 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: 9n96+5eBYkuga6kusq8rxuhdUc5PeAWCDIJ9l9CaPR4=)
                          2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 6ax7wKX9MnscscRmvzdcH+/wseAfzjTJRwaa04oD2v4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Apr 26 21:16:36 2024 GMT
            Not After : May  3 21:16:36 2024 GMT
        Subject: CN=662c19b4-7de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:c5:f2:33:7d:c8:91:71:cb:c8:e4:c5:0c:
                    2a:01:24:5c:fd:d5:2f:ea:99:77:cd:3c:43:39:d5:
                    08:24:3f:d3:fb:0e:19:4a:f5:7e:17:94:67:24:2e:
                    48:c3:a4:96:f6:63:ff:d3:62:f1:8f:8c:31:b9:4a:
                    40:59:10:68:8b:58:53:d6:be:88:ea:3c:a7:60:13:
                    e6:3b:83:aa:b0:33:98:be:d7:89:e5:4b:ee:00:e4:
                    16:1b:c5:13:af:05:c7:be:7a:b6:e8:2f:9f:dd:2a:
                    09:5b:96:69:1d:bc:0a:51:d2:b6:1a:d4:8a:54:b1:
                    bf:48:4b:ce:b4:75:1b:7d:f6:03:26:eb:49:83:82:
                    9f:e0:1e:35:61:6b:9c:ea:f2:16:cd:da:ee:43:d4:
                    04:ae:d9:15:8a:c3:a9:e3:bd:9b:5c:1a:f6:76:70:
                    b2:59:46:70:ce:7b:3c:57:75:c7:8d:b1:3f:fa:77:
                    c3:11:29:72:db:1c:c6:46:fe:f0:38:65:64:3a:96:
                    10:5e:d6:24:3f:e0:61:43:ba:e3:0e:04:2b:0e:57:
                    e7:b8:d7:21:cf:fc:1a:58:03:b5:c5:33:0b:d7:ed:
                    45:ab:1e:41:c3:37:0b:8d:70:07:fd:5b:90:93:a2:
                    a7:05:31:66:82:7b:81:0b:8e:17:51:88:a3:79:59:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:4F:78:D6:C5:A1:4F:A8:C0:2D:8E:EA:C9:E8:AD:AF:FB:C4:8A
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:42:d1:2b:e5:17:a1:da:d6:59:1a:b2:3b:a0:0f:e3:09:97:
         ac:ae:c9:4f:a6:d7:36:84:5f:5a:75:db:f7:e0:da:ac:bd:60:
         3f:9e:b4:2e:b0:0f:41:bf:14:cd:2e:b3:a5:0a:3a:21:ce:84:
         b2:df:d1:16:8c:8c:72:69:ee:68:f7:0b:18:32:c9:eb:ed:b4:
         94:2c:51:b4:d4:05:94:73:ef:0e:e9:f0:ed:92:53:52:ab:c2:
         dc:99:24:1d:77:5e:85:33:09:aa:cd:2d:44:22:50:77:6c:cb:
         a6:c9:0a:96:84:b4:2e:a4:82:9c:c1:91:18:17:13:95:4a:f1:
         5f:2c:b8:33:4b:c4:47:63:6b:90:0f:2d:a6:e3:6b:d3:c9:af:
         b3:2c:18:cc:a3:cf:aa:eb:ec:e6:80:b1:89:59:e3:0d:5a:81:
         79:20:fe:34:87:ee:b1:b7:e9:54:05:97:61:60:52:e7:d4:75:
         e3:2d:47:42:82:0f:d8:a0:8c:17:f0:75:9e:3d:10:d0:89:ba:
         0f:9e:70:47:c5:f7:3d:ce:4e:18:08:27:56:08:9e:b6:64:28:
         7f:e7:dd:0b:e6:3a:e9:6d:cd:8f:02:b8:04:48:37:c3:d5:b9:
         d6:de:4f:e9:f5:37:25:0d:69:66:ea:eb:b4:27:0d:b8:09:62:
         ef:2f:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:10 2024 by rpki-client on console-ams.rpki-client.org