Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File:                     480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier:          OUaDLaYUpPKpk934yaVBcGiquliQLo8m+i5TtuV8UJA=
Subject key identifier:   0F:76:EA:F4:F7:4B:CB:BC:25:E9:FE:5D:D0:21:3D:3C:8A:DC:87:FF
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number:          0496
Signing time:             Wed 01 May 2024 00:58:48 +0000
Manifest this update:     Wed 01 May 2024 00:58:48 +0000
Manifest next update:     Wed 08 May 2024 00:58:48 +0000
Files and hashes:         1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: dThF3MHnKVDcRV/PNDRW5vPEqGh74m7xzNlLbErNXBo=)
                          2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: a6iV+VdvATPTvUTvrvtJWIJfp3l1+BdYBIr8MaPpp8I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: May  1 00:58:48 2024 GMT
            Not After : May  8 00:58:48 2024 GMT
        Subject: CN=663193c8-17e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:56:34:77:b2:8e:e6:b9:7f:da:20:78:ea:
                    57:75:d1:46:d8:e9:a6:a3:87:bd:ea:25:47:d7:48:
                    9c:bf:36:6a:f9:e9:09:01:bd:f9:c6:b0:fd:83:d6:
                    38:0a:07:01:ec:7b:e9:92:dd:04:8e:e0:55:6c:e0:
                    f5:c2:38:81:fd:39:2c:73:cf:60:8c:d7:3b:4e:f4:
                    57:91:78:1d:53:c1:4c:28:2d:ba:ab:a0:18:28:e1:
                    68:37:c0:43:ad:9e:25:b7:b9:3d:96:31:e5:fd:e9:
                    11:dc:d0:e3:c9:b7:7e:bc:7c:fb:6a:aa:2a:7a:78:
                    8a:a3:ab:54:82:ed:86:e6:0f:a3:0e:88:cc:87:87:
                    c0:89:2e:e4:49:80:8e:ec:fe:29:5b:62:49:03:fc:
                    e5:26:b1:cd:fe:cd:48:f4:20:56:80:f3:04:42:1c:
                    c1:64:42:46:e5:b5:96:5c:40:7b:83:12:ec:50:d4:
                    7e:4c:e0:b9:01:7b:c1:bc:d0:e9:f1:14:60:a2:61:
                    ae:62:04:93:c4:cd:67:bf:4f:24:02:b0:8e:29:27:
                    01:77:3b:d3:31:6b:91:63:d8:63:67:90:a7:9b:81:
                    b6:ba:00:d0:24:d5:db:db:73:f1:7f:99:84:d1:7d:
                    be:bf:dc:ff:54:30:a2:ba:f6:7f:49:33:04:d8:bf:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:EA:F4:F7:4B:CB:BC:25:E9:FE:5D:D0:21:3D:3C:8A:DC:87:FF
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:45:69:76:4d:cf:01:cd:8d:a2:97:3d:b3:4b:c3:7f:93:c3:
         0f:71:65:97:ae:f0:be:85:e9:57:7c:d0:12:39:9d:7d:63:13:
         23:63:ad:b5:7c:bd:e5:75:9f:ae:4d:92:13:6f:7f:66:75:65:
         6e:48:33:18:c9:fa:ed:b3:0b:8f:cb:ef:dd:bd:22:3a:e1:d7:
         e7:84:fd:28:1a:47:f1:84:87:40:5b:51:b1:91:19:21:b3:43:
         f5:e4:12:a6:d5:2d:8e:2f:1a:a6:88:a4:c7:c1:c8:16:02:41:
         f8:b4:c3:c7:b1:2a:fa:f1:6d:e2:cf:86:f2:d0:7b:b5:86:3b:
         75:c8:8d:59:50:36:6f:57:c2:57:2c:65:f8:21:cc:97:af:53:
         ae:8a:63:19:85:3a:5c:44:63:0c:47:97:e6:d8:a1:a4:53:cd:
         27:d9:7d:33:7f:e8:90:8a:63:cb:91:72:cb:32:7c:c5:d2:c7:
         4f:1f:86:98:0d:04:ee:b9:83:6d:0a:c3:f6:6f:64:20:a4:18:
         c5:b7:13:90:70:d0:94:f3:d5:23:79:af:79:24:9e:dc:84:6b:
         34:60:f9:44:8b:7a:07:1d:53:e1:6f:3c:25:c2:fe:6a:3a:65:
         42:05:cc:6d:ee:2e:98:94:68:ec:5e:87:c9:09:5c:df:f6:0a:
         c6:e0:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:08:04 2024 by rpki-client on console-fra.rpki-client.org