Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
File:                     nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json)
Hash identifier:          o/lvZLWBNuyVq6jux3yAT6MIyEukqoVBvcNJ403IhRk=
Subject key identifier:   40:1D:69:D2:13:88:FC:1F:BD:9C:CB:D2:92:CA:B7:CD:0B:D1:2D:9B
Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E
Certificate issuer:       /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
Manifest number:          0263
Signing time:             Thu 25 Apr 2024 03:43:27 +0000
Manifest this update:     Thu 25 Apr 2024 03:43:26 +0000
Manifest next update:     Thu 02 May 2024 03:43:26 +0000
Files and hashes:         1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: zWA5SJaosm6OiVjBcBJTf+zGZ4NUHS4LNhGC6fnUWek=)
                          2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: H1TbSfb4htfB0LmY4JPuswNoz4LPXkP4zd4P9+5LYFs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl
                          rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 03:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E
        Validity
            Not Before: Apr 25 03:43:26 2024 GMT
            Not After : May  2 03:43:26 2024 GMT
        Subject: CN=6629d15e-5e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:fa:85:fe:05:c5:bf:e2:02:ae:46:1f:73:
                    92:7c:5c:a2:5a:6b:98:aa:e4:6b:42:0d:05:c9:38:
                    5f:c3:55:05:ea:03:a2:58:3f:7a:8f:47:19:c8:da:
                    e4:6e:e7:d2:8e:f5:6f:65:74:d0:a3:b6:08:0a:46:
                    9f:ac:c6:94:fe:93:ac:00:d6:19:3c:bb:7b:9e:3b:
                    71:e3:74:96:c0:bb:de:c6:41:2c:d3:71:4f:8c:a8:
                    57:8f:ff:76:e0:ad:71:ec:90:53:09:c4:28:d0:55:
                    2b:82:b4:14:6e:b9:8b:95:dd:57:78:d2:08:94:97:
                    ac:4c:3d:93:5e:66:34:15:f2:55:9b:52:89:bd:ff:
                    a3:89:ea:30:8e:3b:10:2e:f6:af:c6:f2:55:3e:13:
                    be:f4:11:70:a9:aa:04:b5:00:d4:1c:2c:fc:90:92:
                    13:1e:4e:65:d1:37:14:92:49:ec:67:8d:a5:28:0f:
                    1e:21:aa:7c:cf:1e:ac:48:38:fb:6d:bc:f1:23:b9:
                    2e:97:50:cb:81:ec:a6:48:9a:5b:34:00:65:9c:41:
                    13:42:f4:e9:6c:eb:13:d3:0c:29:a9:37:18:1e:02:
                    11:fc:26:24:5b:35:3e:43:6d:e5:a6:0b:bb:a4:4c:
                    6d:fa:4b:87:94:4e:92:d0:ad:c6:47:97:2d:17:37:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:69:D2:13:88:FC:1F:BD:9C:CB:D2:92:CA:B7:CD:0B:D1:2D:9B
            X509v3 Authority Key Identifier:
                keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:ae:e1:eb:37:b5:cd:b0:cd:53:c8:06:e2:42:7f:60:5e:
         90:e0:c9:e8:d1:20:ff:d5:99:ff:8e:fa:cc:d3:46:d4:68:fd:
         1c:ad:f2:a0:f5:8b:18:a1:99:98:e4:48:09:ac:56:74:cc:92:
         8d:8d:b8:27:0e:c8:f3:bb:b6:96:9a:58:a0:4c:bd:5b:88:b7:
         5e:08:2b:88:0a:53:12:74:cd:70:8c:85:6c:fa:2f:91:b4:72:
         aa:0d:71:d6:c3:c8:d4:2a:84:c7:a1:bd:19:60:e9:42:4d:d4:
         a9:70:6b:2c:bc:f1:7b:07:be:29:7b:48:54:fa:7d:b4:2c:db:
         da:7a:40:a2:45:f0:1c:69:ea:44:63:0e:1b:4b:71:5e:bb:d5:
         9a:39:3e:e5:03:c6:6e:00:cd:4e:51:68:28:8e:c5:51:41:1d:
         3d:5c:b7:ae:6a:44:1e:63:29:b5:66:e3:15:5e:32:5f:6c:b6:
         65:cb:50:46:4a:46:2e:dc:c5:08:de:80:a7:94:1f:7a:ee:e0:
         66:8e:dc:19:05:da:61:27:23:0d:84:42:e8:13:f1:60:69:f2:
         e4:fc:42:bd:20:5e:a6:3c:a8:49:5c:cb:d3:3c:cc:ce:36:3d:
         5c:04:5a:41:f0:77:92:27:be:e5:fd:00:df:a2:1b:07:7b:06:
         6c:d5:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:17:19 2024 by rpki-client on console-ams.rpki-client.org