Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
File:                     Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json)
Hash identifier:          Feyheb7OwBQ9D2xqD2TPsCahLRykiq4p2Y7SIvRCbDM=
Subject key identifier:   52:40:A1:83:61:99:11:2E:FF:FC:5E:63:17:21:8C:15:2A:B7:BA:03
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Certificate issuer:       /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial:       048C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
Manifest number:          0484
Signing time:             Sun 05 May 2024 01:46:39 +0000
Manifest this update:     Sun 05 May 2024 01:46:38 +0000
Manifest next update:     Sun 12 May 2024 01:46:38 +0000
Files and hashes:         1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: DG/KjnmaGqw2d/ecaNM7F4PMKsKz/MtSh7OnNY7oYSg=)
                          2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: y5d/MB7V3ZsodcPGCmEEvKKpo4wB2e5f62HRyhb73ZU=)
                          3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: MyHmiwwY24R3d4+DAEzEEtmCaqIzuusdXM6O63ht/lY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
                          rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
        Validity
            Not Before: May  5 01:46:38 2024 GMT
            Not After : May 12 01:46:38 2024 GMT
        Subject: CN=6636e4ff-4d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:20:8a:70:56:08:b1:56:74:56:be:d9:72:e9:
                    3d:13:22:77:b0:1f:c8:58:44:ab:c9:88:89:e0:18:
                    7b:89:80:89:9d:32:d7:d5:d4:62:6d:21:f8:73:4e:
                    ab:b4:be:42:dd:63:e5:6d:21:11:e9:51:dd:df:a4:
                    dc:04:70:59:e9:f9:37:65:9d:a1:bb:d2:bc:7a:b4:
                    59:df:e7:36:68:9a:05:89:18:a0:ff:28:bb:47:c1:
                    b9:de:93:17:c0:07:de:e5:f5:21:93:cd:37:b0:c6:
                    bf:b9:25:80:3c:3d:f7:97:c0:81:f9:6f:c7:34:a7:
                    51:e5:6b:44:dd:5e:7f:5d:25:9f:e8:26:51:1d:a7:
                    c5:2f:81:a9:0c:2b:fe:2e:37:6f:d3:0f:74:28:9e:
                    ef:56:1d:50:cb:ab:79:7c:17:66:df:90:3c:6f:cd:
                    13:7e:38:fd:32:a8:5d:ca:7c:e8:07:91:55:af:a4:
                    59:7e:9a:2e:7c:97:db:4a:0e:c2:59:b7:0b:da:95:
                    a2:ff:15:02:93:6a:f5:da:df:46:54:0d:a3:ca:34:
                    b8:8d:3f:0b:3b:4d:b1:0a:c2:1e:e9:d5:a3:76:d7:
                    0d:18:de:50:65:07:ed:4a:5c:02:de:61:1d:ee:65:
                    b5:fa:84:1f:1a:c2:7b:05:9e:39:7b:fd:6e:11:f0:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:40:A1:83:61:99:11:2E:FF:FC:5E:63:17:21:8C:15:2A:B7:BA:03
            X509v3 Authority Key Identifier:
                keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:55:89:fe:6f:67:a8:71:f5:94:d9:5e:f9:e1:ea:73:02:
         3e:0a:4c:69:38:22:67:40:e8:0c:e6:ea:c3:27:f9:02:ca:1b:
         25:22:75:9b:fb:53:5d:32:3a:b1:9d:33:f1:a5:cf:b3:00:e1:
         50:d5:08:0b:d6:01:2b:e1:54:96:2c:1e:5f:9d:54:c1:0f:30:
         ae:ad:fb:be:f8:30:35:88:e8:11:59:df:9c:6b:35:9b:10:fb:
         d7:a2:55:8d:33:5f:01:ea:81:dc:49:5b:41:43:f6:f7:73:82:
         6a:ce:90:4d:c1:b1:51:be:c9:47:13:1a:9d:a8:b5:4c:0c:40:
         02:41:36:b8:c3:da:0a:1a:0a:bb:98:fb:b2:40:93:12:7a:4b:
         f6:74:9b:67:25:99:4c:17:04:29:6b:25:26:2a:08:c6:d1:4b:
         80:cb:3f:5c:c2:9a:e6:c5:d5:12:d2:8b:3d:7e:d2:1d:92:57:
         e3:33:ad:2f:c1:94:25:da:13:95:b3:02:cf:ef:73:c1:66:97:
         16:a3:11:47:fd:06:62:a9:6f:d0:2b:4d:be:f5:98:07:85:ff:
         44:83:55:1b:51:47:4f:d8:b5:07:f6:9d:43:38:3f:99:b3:ea:
         a8:1e:d4:56:28:9e:b0:b7:14:6e:26:c5:cf:45:34:5a:29:43:
         d8:fe:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org