Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File:                     vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier:          wZ+FJDaG4ZwV+y4ETD4XKDwMhPnEYBp9gb6eC5KZpec=
Subject key identifier:   EC:1C:41:A8:BC:C2:10:7C:A3:F5:AF:AA:31:D7:98:AA:61:47:84:F7
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number:          0432
Signing time:             Tue 07 May 2024 01:58:26 +0000
Manifest this update:     Tue 07 May 2024 01:58:26 +0000
Manifest next update:     Tue 14 May 2024 01:58:26 +0000
Files and hashes:         1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: rwPoh4klY5xdWRV3IVu/cNDe6KCbpDh9EzViLgHYx6A=)
                          2: 84FBDFD219ED11ECB996CC4FC4F9AE02.roa (hash: DqmoluaA44RPJQztHOJX5CXlOMcBoXQEioo/OYgl0v4=)
                          3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: kzWicLQ6CeKWBO55ck9UJwnD5Y3DsrCzyTpPBN92nxE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: May  7 01:58:26 2024 GMT
            Not After : May 14 01:58:26 2024 GMT
        Subject: CN=66398ac2-404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:d0:c6:f3:02:b0:ab:8b:5e:21:60:a3:01:
                    2a:f7:77:e3:34:d5:28:e3:9d:c1:57:c5:a6:cb:4f:
                    0d:f8:b9:ca:d6:40:33:bd:2a:39:e7:7f:fe:c1:1a:
                    b6:cd:77:1c:1a:c5:9a:a2:f3:36:6e:36:e0:41:d6:
                    75:42:84:72:21:a3:6e:c5:2d:30:37:95:4b:b6:eb:
                    49:c1:2d:f5:91:5e:27:a8:e8:3c:2f:62:c3:63:a7:
                    b4:26:1c:87:b4:1e:ee:56:fa:97:ff:75:31:1d:bd:
                    4f:ef:8d:db:a5:52:71:a7:a3:eb:c5:62:be:66:3a:
                    7d:30:76:39:26:8a:47:a9:0f:f8:6b:28:d4:f7:1f:
                    90:34:de:53:5b:f0:75:17:a0:7d:7a:9d:4b:f1:19:
                    d6:2d:10:86:b7:9c:9e:e0:ae:2e:66:65:27:8a:90:
                    80:66:7c:bc:0d:4b:40:a2:54:59:93:bd:11:78:4e:
                    eb:da:40:0e:e7:05:d4:0d:06:1f:71:c7:ff:50:12:
                    5a:12:2f:c6:36:60:2a:73:ae:4b:37:e6:97:a8:de:
                    d5:b8:aa:eb:8e:b1:12:4b:65:51:c9:0e:e5:17:3c:
                    98:94:3f:41:e2:a4:2d:36:9b:f7:a2:89:93:29:87:
                    30:64:14:0f:23:73:40:5e:3a:2b:86:3e:fa:be:b4:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1C:41:A8:BC:C2:10:7C:A3:F5:AF:AA:31:D7:98:AA:61:47:84:F7
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:0a:d5:4d:e7:a7:31:3a:24:7c:32:d8:4a:8f:b1:77:88:
         f8:32:a3:db:c7:15:15:7c:d3:d1:7f:77:da:74:90:da:df:39:
         55:35:31:5a:b5:cd:e1:df:94:ca:0a:94:6b:ea:f4:38:0a:9b:
         e6:bf:7b:b6:fc:83:03:8b:08:c8:48:b0:00:2f:da:7c:85:17:
         38:d3:85:eb:48:31:6c:38:50:9b:9b:57:3e:68:61:30:81:d6:
         35:78:5c:97:45:56:dc:49:9a:e6:08:af:92:fe:59:d9:71:a4:
         92:54:9e:4f:71:4f:aa:26:3c:80:e9:5a:33:66:84:13:bf:fb:
         94:e2:23:0f:74:75:94:79:66:31:63:43:a7:b9:aa:11:2f:14:
         63:8b:94:f0:30:f8:37:bb:3f:75:72:0a:f4:ad:1e:2f:fc:20:
         0c:76:4f:0b:e9:92:80:60:8a:47:e0:c0:26:49:2e:34:17:ba:
         c4:89:e2:2a:dc:58:27:81:fa:4f:47:5d:0f:af:1e:11:55:f2:
         0c:5a:b9:1d:73:59:58:2b:d8:53:89:9f:78:dd:4c:f0:35:d0:
         03:40:0a:cb:c4:12:46:d8:65:a8:7d:1c:34:33:a1:93:f5:65:
         f9:33:57:31:cd:da:12:43:6f:98:9e:9a:b3:11:0f:42:34:41:
         ac:74:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:20 2024 by rpki-client on console-fra.rpki-client.org