Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
File:                     9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json)
Hash identifier:          yEn96zDTrmiNDdYPwzfXWR6bhXlzEO13LuSuqal4/Wc=
Subject key identifier:   DE:6C:FB:DC:39:06:2D:85:A2:8D:8A:39:2D:8E:03:7C:FD:D9:9A:EA
Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1
Certificate issuer:       /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
Certificate serial:       09EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
Manifest number:          09DE
Signing time:             Fri 26 Apr 2024 20:44:17 +0000
Manifest this update:     Fri 26 Apr 2024 20:44:17 +0000
Manifest next update:     Fri 03 May 2024 20:44:17 +0000
Files and hashes:         1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: mn0LRGoMDMUA7J61TrDGDwqP9W1JrWsqTFnKecPPnk0=)
                          2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: 0Z66NQQmx/O6+gGTYRBorlGmOyHmenuyqw1HzdoJz5M=)
                          3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: rOcBsWhnfD1tNVjKKBFpO1u3NWxJVGft4B65w6p9Vq4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl
                          rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 20:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1
        Validity
            Not Before: Apr 26 20:44:17 2024 GMT
            Not After : May  3 20:44:17 2024 GMT
        Subject: CN=662c1221-5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:49:22:82:be:0e:14:cf:36:1b:55:3b:87:
                    d3:eb:78:47:38:be:e5:c7:4b:ae:0c:31:0a:13:c0:
                    4c:73:6b:52:6c:b2:6d:87:0e:2c:1f:ad:43:dd:88:
                    70:93:77:73:f4:0e:ef:37:12:db:5c:9e:92:d9:97:
                    31:e7:f5:8a:69:78:fb:5c:95:b4:7e:9c:46:a0:bb:
                    9a:11:51:88:e5:db:8e:a5:cb:0f:49:77:0c:40:53:
                    d2:fc:f1:7c:75:86:22:9f:d1:ec:59:87:5f:20:ce:
                    42:de:44:9c:6b:45:82:0b:94:0e:0b:6f:27:f8:5c:
                    24:89:e1:dd:36:3c:15:54:fe:1d:4d:5e:3e:8b:bd:
                    ae:54:b3:2d:5f:7c:e4:67:b6:23:ba:68:d5:a5:ac:
                    18:1e:42:a0:a9:3d:9d:70:17:f1:3d:58:7d:ae:eb:
                    af:3d:5d:7c:75:8c:58:70:34:b8:d6:74:8a:3c:81:
                    05:b1:b7:a7:e7:c3:93:5b:93:eb:2a:79:55:9f:f7:
                    be:47:68:32:cc:18:e2:68:80:15:6f:0b:c4:d1:95:
                    ef:30:13:a8:19:85:79:e1:6e:aa:a5:bb:11:2c:7d:
                    e9:66:1a:e1:ce:66:75:4a:0e:52:5d:c4:be:11:db:
                    c5:49:71:3e:92:05:14:d6:99:4b:02:c9:b2:14:3c:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6C:FB:DC:39:06:2D:85:A2:8D:8A:39:2D:8E:03:7C:FD:D9:9A:EA
            X509v3 Authority Key Identifier:
                keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:d5:cd:eb:12:00:15:b2:3b:97:dd:f0:77:8e:ea:5c:3d:
         e6:df:57:45:cc:d6:60:2b:e6:64:d6:0d:08:3c:6e:15:7d:ed:
         3a:8b:fe:5a:a9:cb:cf:16:7f:6f:36:79:08:99:19:98:8c:bd:
         a4:c6:55:f3:3e:e5:89:f5:5c:c7:92:42:85:31:d7:e2:8f:26:
         e1:93:a6:8d:aa:d9:4f:c8:aa:a0:dd:a6:22:e4:d6:24:56:cf:
         5b:a6:5b:ea:0e:f0:2f:33:4d:27:71:ab:d4:83:da:1e:82:68:
         e4:c6:fd:c9:0d:2d:23:ab:38:1d:9d:d7:ad:d6:62:28:6e:ee:
         08:4b:4f:bc:1a:a3:4e:75:2d:29:a1:a8:64:9b:54:a8:f6:f2:
         d4:4d:9c:ea:ca:79:df:4c:92:25:03:fe:35:dd:2e:54:ec:f1:
         f8:2c:b2:d6:df:f0:04:7a:27:41:50:11:6a:42:91:bd:5a:6d:
         c4:83:0a:7a:73:e4:0f:74:af:ee:86:62:a2:41:ea:f7:b0:0e:
         59:ea:18:3c:b8:64:e0:38:c9:59:6d:a2:d4:b0:5a:7a:98:22:
         cd:eb:67:cb:a1:f7:c9:98:bf:27:83:3e:67:52:97:45:1a:e4:
         fb:c0:78:42:70:1c:27:86:39:a2:cd:7d:a2:ee:ca:32:e1:23:
         a6:a3:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org