Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json)
Hash identifier:          /8xJ+mU3i8elkMemrIikchgbJievQcomtFqhUlk9oz4=
Subject key identifier:   AA:EC:30:44:A7:6F:D1:E2:B1:A8:58:F5:63:FB:C4:41:0E:16:A9:B3
Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Certificate issuer:       /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
Manifest number:          079A
Signing time:             Mon 06 May 2024 22:15:22 +0000
Manifest this update:     Mon 06 May 2024 22:15:22 +0000
Manifest next update:     Mon 13 May 2024 22:15:22 +0000
Files and hashes:         1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: 21MtOlJqlNqgfya4VQci+lMOpNhHI9vemS/RRLu+qzs=)
                          2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: 6DkFP3nYBr+2SEGoQVsTj3Uh0N/hGIVIrOQGZ8hgWRk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl
                          rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 22:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Validity
            Not Before: May  6 22:15:22 2024 GMT
            Not After : May 13 22:15:22 2024 GMT
        Subject: CN=6639567a-681c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:48:20:e7:21:1d:41:90:1c:42:ff:48:7d:
                    3a:fa:31:fa:26:37:8e:43:ff:b1:f1:b1:80:c1:11:
                    47:30:f8:05:a7:2c:4c:9c:64:1a:7c:4d:90:3b:3d:
                    69:73:83:21:39:9c:98:80:27:6b:be:9c:76:a4:4a:
                    8d:e5:b0:39:96:8f:8d:6e:b0:31:3f:9e:ac:b0:48:
                    7b:31:f5:a4:ce:c8:a9:08:a7:7d:60:f2:21:39:6a:
                    8d:65:a6:18:79:20:cd:08:52:0e:61:b4:92:60:fc:
                    a5:df:05:93:dc:14:fa:c9:5d:9b:aa:5a:35:e9:d2:
                    7a:3b:fc:a0:25:17:8b:31:03:62:d1:7d:dd:1a:17:
                    df:c1:b7:7a:e6:21:1e:a3:5f:1b:7b:ec:32:66:ed:
                    c0:23:c2:7c:12:8d:cc:0a:69:cb:d5:5f:41:35:29:
                    ca:82:6a:e9:65:dd:bc:63:80:77:15:9b:be:c5:84:
                    b9:04:57:bd:7b:25:8f:7e:b1:0e:2c:8e:b0:9b:40:
                    04:10:81:2f:e2:eb:f1:d2:05:21:00:69:b8:99:32:
                    67:bc:63:01:a3:64:ed:1d:bd:79:3a:1e:9c:5a:81:
                    01:cd:e6:0c:4f:e9:bc:cc:96:1a:31:39:e3:b7:44:
                    14:83:4e:48:db:8f:59:cf:f4:30:9e:5e:cd:c7:5a:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:30:44:A7:6F:D1:E2:B1:A8:58:F5:63:FB:C4:41:0E:16:A9:B3
            X509v3 Authority Key Identifier:
                keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:00:96:16:3b:28:2c:03:74:56:1e:e7:16:02:df:35:fc:e5:
         01:f9:33:ea:03:62:ec:81:a1:22:db:39:7c:04:92:c4:3d:84:
         dd:fa:cf:f8:da:f1:96:32:67:8f:dc:1b:8d:06:b6:fd:f8:82:
         fc:73:45:e7:17:7d:71:b8:ab:b8:16:0f:f2:a5:cc:16:79:bd:
         5a:c6:53:4c:91:ef:93:89:1c:ce:69:75:c5:20:3f:96:eb:6b:
         a1:c4:53:ed:6e:30:67:ab:e2:25:97:fe:c6:81:bb:a7:ac:09:
         8b:48:11:c3:2b:ab:b8:57:39:09:79:79:89:53:fd:11:18:8a:
         44:38:bc:fa:5f:58:d4:78:65:d8:52:05:d9:1e:89:ee:7e:7b:
         2c:63:a2:09:af:a9:7c:44:80:62:5e:47:d7:77:74:ec:9d:97:
         85:04:69:01:35:1a:4b:c6:3c:9a:b7:99:dd:fc:9e:cf:42:e6:
         2a:7c:c7:da:03:79:32:70:5d:82:76:ef:e8:55:d1:64:36:56:
         e8:1e:55:ee:d2:f4:d4:f0:53:c5:86:5e:0c:89:b4:94:35:77:
         43:81:19:7a:a3:8c:b3:20:81:06:cb:a1:c0:1c:42:07:01:3b:
         1d:70:cf:dc:4b:33:96:44:49:65:68:0c:2c:87:2b:40:14:7f:
         cc:dc:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:05:43 2024 by rpki-client on console-fra.rpki-client.org