Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          gCQ1iK8MVR+VRIexES4M2pSlG/W+9fR0z33FalGyACk=
Subject key identifier:   26:0C:A3:94:EF:2B:53:9A:6C:84:CF:45:85:2C:99:62:31:CE:83:ED
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          06B6
Signing time:             Mon 06 May 2024 23:09:28 +0000
Manifest this update:     Mon 06 May 2024 23:09:28 +0000
Manifest next update:     Mon 13 May 2024 23:09:28 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: Mjup5+EMz2Zds17akhXssTrgzCjCLe9kkxqW8Na75uk=)
                          2: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: 88OmkvSf8WXdmrHzHjVFBd+Ni+YekQV533NGHrFIPX0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: May  6 23:09:28 2024 GMT
            Not After : May 13 23:09:28 2024 GMT
        Subject: CN=66396328-d43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4f:b8:2c:e0:1a:70:ae:32:ab:74:be:ed:59:
                    a9:76:55:bd:c3:f3:d7:6c:9b:f7:b9:58:a4:4a:a1:
                    c2:0d:e8:dd:e8:ee:59:9a:f4:bc:18:8d:31:ff:f7:
                    50:86:e9:b4:20:65:e5:25:19:53:87:a9:f3:2d:bc:
                    f1:96:c8:ce:df:6c:0d:de:62:60:7d:1e:0a:74:39:
                    13:be:59:f7:9c:ed:aa:06:bc:62:0a:d9:25:36:45:
                    63:bc:82:37:46:fd:5e:50:29:5c:24:b1:ce:d7:f4:
                    0b:64:25:b6:76:4e:31:21:19:eb:9a:96:76:8c:93:
                    42:0a:4b:b2:96:95:aa:9e:9d:a0:2c:fe:56:6a:34:
                    10:09:1b:2a:64:08:25:cc:5f:de:ce:ea:66:70:79:
                    e9:00:2f:e1:87:f6:f7:b1:b6:fe:2e:46:a3:26:9b:
                    6f:29:00:bc:4a:a6:4e:51:5a:69:78:d3:75:f9:04:
                    73:60:5c:0f:f5:ba:70:8b:6e:cc:84:7f:97:39:a6:
                    cc:7c:ad:97:d7:75:06:80:26:6d:fc:54:66:6a:d2:
                    b9:cb:d0:13:79:07:de:06:71:3c:bd:cb:22:c6:3e:
                    4d:1a:33:16:83:b6:4e:34:2d:a1:7f:8c:b8:45:3a:
                    31:11:ea:50:4a:84:b6:3c:4d:a0:d6:01:f1:bc:f2:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:A3:94:EF:2B:53:9A:6C:84:CF:45:85:2C:99:62:31:CE:83:ED
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:a3:18:70:42:12:7e:4f:38:c5:35:ce:8f:26:b9:bb:ce:
         62:9b:4c:7f:1a:c1:20:21:25:0a:d0:3c:57:e6:62:2c:39:76:
         2a:de:38:f3:7e:73:96:11:bf:4e:ed:eb:eb:54:83:57:4c:12:
         f1:23:fb:67:65:7d:fd:42:89:a4:30:43:aa:5b:af:96:c6:b9:
         b3:79:61:7b:3b:c3:89:eb:a6:2f:3e:4a:46:7f:f4:2b:f5:51:
         e9:0c:b9:eb:52:10:ec:fc:a2:22:45:76:68:34:26:10:3c:5b:
         ab:e3:03:a9:0d:6c:99:d9:96:7b:2a:7c:80:dd:41:42:71:57:
         39:71:fa:bc:e1:4b:e8:5f:9b:3b:54:c6:43:52:ba:a6:06:e8:
         57:1d:06:76:62:4b:a7:06:06:16:0a:cc:4b:88:32:70:d6:37:
         57:52:57:56:02:15:66:c8:39:09:27:6d:d5:f8:6d:7e:10:02:
         bd:0e:c1:4c:cc:b8:73:6c:f1:bf:29:1a:02:28:74:08:de:de:
         94:61:a2:95:e7:d3:9d:ee:84:a9:4e:56:52:b0:bb:4b:cb:58:
         47:89:84:a3:7a:e1:fe:0b:71:a4:98:02:a4:1d:f2:fa:2a:d5:
         1b:b2:ad:0c:c4:72:65:3a:8f:23:62:07:04:c3:ce:ac:60:72:
         5c:3a:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:22 2024 by rpki-client on console-fra.rpki-client.org