Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
File:                     neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json)
Hash identifier:          mbTEd+hatSH472x3xf0HO8zPEpEtTNvKXjxl4KXNjJI=
Subject key identifier:   2F:C9:97:AA:8D:81:1A:47:15:B9:CB:21:1D:61:81:E0:9F:A6:63:4A
Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
Certificate issuer:       /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
Manifest number:          F1
Signing time:             Wed 29 May 2024 06:22:20 +0000
Manifest this update:     Wed 29 May 2024 06:22:20 +0000
Manifest next update:     Wed 05 Jun 2024 06:22:20 +0000
Files and hashes:         1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: ASTLXyLKDgOpuYA6tbbFwWkOQX7hpayKEmzJHKiVpUc=)
                          2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: +QnI0UZrS5ENO1HfW4khSuI3IyC9iYQtxaK38tT932I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
                          rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 06:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
        Validity
            Not Before: May 29 06:22:20 2024 GMT
            Not After : Jun  5 06:22:20 2024 GMT
        Subject: CN=6656c99c-1d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:64:0c:41:dc:4f:f5:b3:3a:f6:5d:03:e6:
                    4b:d3:35:80:ce:65:7f:63:86:90:7a:ec:aa:0a:c3:
                    1a:b5:02:d9:16:51:20:98:7f:8b:4c:dc:b9:eb:3f:
                    bc:cc:b4:a5:53:e9:13:d7:7f:9e:3c:0c:6f:9f:de:
                    0c:35:cf:eb:fa:01:d4:37:a7:3c:10:f5:07:d0:15:
                    76:df:b3:94:ab:ef:35:cc:aa:38:09:bf:cf:4d:4b:
                    6a:b2:69:9e:94:bf:c7:28:76:9d:95:d4:dc:6e:5d:
                    88:12:3d:04:22:c4:f6:a3:57:b1:39:35:b1:8a:82:
                    be:92:97:46:f8:bc:e8:e0:0a:8e:68:f2:6b:36:ed:
                    9b:51:46:05:78:fd:73:8d:e3:43:44:79:99:b0:6d:
                    f8:df:f5:73:37:05:10:14:aa:65:d3:b5:b0:2c:2f:
                    e1:c1:81:a7:72:08:b8:5f:ce:47:49:e3:d3:b9:40:
                    99:40:90:a0:de:f9:c2:46:4c:2f:57:ae:65:9c:c5:
                    e1:8e:ee:06:93:6f:e6:63:35:7c:ba:2c:10:a6:7b:
                    ef:82:21:00:0b:c7:52:1c:d2:cc:17:79:c3:d9:09:
                    61:7e:75:39:2a:d3:1d:0c:ea:dd:e5:66:b0:39:95:
                    6b:f5:9f:c5:36:42:56:ab:de:81:63:0f:b9:f9:9b:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C9:97:AA:8D:81:1A:47:15:B9:CB:21:1D:61:81:E0:9F:A6:63:4A
            X509v3 Authority Key Identifier:
                keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:b5:f0:86:5b:e0:87:11:b1:ec:55:21:1a:ad:df:d7:96:
         f8:9e:d6:cd:b2:ad:42:b7:81:c0:69:6a:cb:5b:33:03:00:c0:
         f9:94:01:cf:cf:1d:c4:52:9c:90:89:0d:83:f9:7f:0c:7e:c8:
         ec:cb:c7:5c:86:13:e3:0f:49:8f:14:06:2c:bc:fb:43:8e:53:
         c2:56:a4:a8:85:42:e4:38:10:f5:9d:37:95:a3:b9:82:91:df:
         1e:83:aa:5f:98:2b:92:81:6d:fe:ee:05:51:9e:49:da:96:96:
         54:e3:a5:6f:48:fd:35:89:c8:01:3a:5c:c3:36:ee:5e:5c:75:
         d3:67:af:dc:2f:5c:b5:89:f1:01:d8:4d:6f:0e:eb:71:07:e7:
         d5:87:f6:a3:7b:7e:2c:7e:bc:50:13:7b:33:dd:3b:25:2c:a3:
         d5:c4:c8:52:30:25:47:fc:90:d0:43:04:6f:64:6f:2b:8d:75:
         ce:24:cd:ef:5a:6c:a4:e3:8b:8d:12:ae:65:2a:ee:97:e3:d7:
         ef:0c:33:36:62:19:4c:3e:18:47:1e:e4:1f:65:b6:d5:02:e5:
         31:0a:42:ae:d8:47:32:0d:b1:f9:12:85:c5:e2:bc:de:1d:4b:
         6a:e2:4f:c5:f8:0b:7d:99:fb:ee:74:1b:09:0c:00:84:ec:4e:
         e3:d9:fb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:26:53 2024 by rpki-client on console-ams.rpki-client.org