Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          Fl1hG0ieBJ0CTDhbA25JbBj6NEPxk6Dc6tGQ6TNuIsI=
Subject key identifier:   BC:A0:F8:B6:F0:05:07:0E:EF:08:29:B3:4E:F8:D8:B0:19:37:0B:57
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          69
Signing time:             Wed 15 May 2024 07:41:15 +0000
Manifest this update:     Wed 15 May 2024 07:41:14 +0000
Manifest next update:     Wed 22 May 2024 07:41:14 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: ij/mRBjTgb+jvQtblF/By9KFNYMY5bl8bX16uvCernA=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: zcUHYpMiZvHWq26N+l54yRV9ml20OFyYfNDePLaQ7W4=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: cz3Xpcss0cdrV1NBzBMRRMaA3ahC0y3R9KGRaFYoxuE=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: TAGiiTjLKg2yRMODSuJQbAlD5mW2cUG/tMVio5eysTA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: May 15 07:41:14 2024 GMT
            Not After : May 22 07:41:14 2024 GMT
        Subject: CN=6644671a-1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:70:01:e1:b5:10:16:6b:15:a1:1f:62:56:
                    c2:87:6a:3e:97:19:d4:46:70:b6:3f:0e:51:1e:0f:
                    e7:43:90:06:16:a1:7f:51:c1:9a:5d:e9:7f:fa:e1:
                    6a:fb:e4:ff:79:0a:32:f1:d6:70:2d:0c:71:81:6a:
                    9c:66:44:34:cb:cb:f2:ab:11:dc:40:de:06:31:0b:
                    01:5c:c7:68:7f:48:df:db:d4:0c:90:2d:5f:29:17:
                    e7:cf:ac:6a:0e:44:ac:5b:01:3a:2f:f7:3d:94:11:
                    9f:7a:d7:95:33:be:86:27:67:06:29:59:f2:ee:1b:
                    e6:0b:5b:6c:98:b9:3d:84:a2:15:64:d5:d6:14:fe:
                    61:0b:fc:8b:c0:a7:3d:09:8c:1d:51:f7:f1:a4:32:
                    6f:30:e2:94:07:fc:78:18:b0:9f:64:6e:25:e3:c5:
                    d5:8b:04:7e:b7:57:89:2b:50:74:f7:e1:e4:1c:9a:
                    d3:31:4f:bb:5e:0d:08:7a:ab:a4:37:56:ad:0a:f3:
                    97:a8:ab:80:43:2f:0c:27:34:f3:de:f8:21:9e:82:
                    8f:06:51:07:ac:5f:16:0c:6d:db:98:db:f0:c4:1a:
                    57:6b:a2:bb:3c:e4:b0:23:4f:c8:ec:69:44:08:4e:
                    fb:d0:e6:ae:e1:5e:2d:61:ac:5a:a5:61:57:d3:ea:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A0:F8:B6:F0:05:07:0E:EF:08:29:B3:4E:F8:D8:B0:19:37:0B:57
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:78:55:19:0c:96:03:d3:d7:36:68:2c:56:df:bd:63:af:
         16:a3:9c:e7:1c:c9:01:70:f0:5a:37:c1:17:b9:ff:04:97:2d:
         d2:a7:ce:3f:72:02:83:8f:13:00:ac:0d:98:7e:9a:c3:6d:36:
         43:bd:e5:f6:ef:db:e2:08:ef:34:46:93:67:e5:2e:e7:9d:bd:
         ae:27:20:8e:19:3a:a2:29:12:50:d8:04:fb:78:d7:df:79:53:
         d9:9b:e3:40:db:5c:fe:24:1c:06:b5:4b:4c:4a:0c:f5:be:e0:
         e2:3e:4c:70:9f:0a:bc:fc:38:d8:32:bd:79:bd:58:27:90:9e:
         b3:79:75:9b:6a:f9:6a:f5:d1:67:ff:81:02:ef:e6:44:bb:f8:
         73:6d:d6:45:f1:72:31:49:31:01:78:f0:27:47:89:22:07:f1:
         d7:79:15:84:2d:07:33:9f:15:0f:37:4f:2d:0e:aa:a8:75:3d:
         c1:fc:43:f8:83:50:b7:17:64:40:0b:80:49:06:73:7b:e8:29:
         8e:e6:cc:23:b3:90:eb:81:41:15:93:80:6f:85:22:5d:cd:26:
         de:f6:c0:41:60:e2:a5:37:5b:88:62:ff:e5:de:1b:64:5f:64:
         3f:5e:c7:1e:1c:60:c4:60:df:64:70:4a:a6:d6:ef:9d:c0:88:
         b9:bf:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org