Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          5AUwmarnsB/xlCnbpPn2YLEMG1N6dQtXnjsomWrHPu0=
Subject key identifier:   68:93:4A:28:BE:91:01:7F:15:3B:A5:0A:EA:2C:7C:C6:FC:D2:76:E3
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          9F
Signing time:             Fri 17 May 2024 07:04:34 +0000
Manifest this update:     Fri 17 May 2024 07:04:33 +0000
Manifest next update:     Fri 24 May 2024 07:04:33 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: awxGPyLpQBFbEKD1Lcd103dfgnrdKfLDxOon9OxRKc8=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: q89V2avvhB7Iwplh7NyUyrL6aq+UrYnzPqsGrW4jEQY=)
                          3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: YLljpcgVza4aEkRlWwBtUcVJcPwkkfQvpW29KioX8zc=)
                          4: 9CF488DE366311EEB376DC3AC4F9AE02.roa (hash: uTBMkO8X0+hgj07rreOkXeexnxszo8LTNsZGrQnzIOU=)
                          5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: ybrHY7tqvISNr1jWGzlVCMiSS4kkQr8URzMMIWkYhoc=)
                          6: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: TWpk8DoUqQF/8iOz+PKjMIg0Nh067E7GVCT+hwUz+LY=)
                          7: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: G5SoPEVEMsa2P0+CI+OK9qKg3YXnhG5CNGyejs2VzS0=)
                          8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: Gn0R+ynFNN1GakSbPgaa4CNevCbLowDZ1oQGYxlW1ts=)
                          9: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: eJ1OGfu/Sa8nXax9ZTvjUTGAsfGfJhddwxE8jMBxRT4=)
                          10: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: VuPq2QJnuU6OxGLXNW4hYWhelxq74I3XFCLL6IKvwZY=)
                          11: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: BYplY/wntciUA2J0T8T8FVcwE4PqqVE8ReSEUDiKaLI=)
                          12: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: Dg9mh7HwyYsAwEClWWq+T6qHrBlJ7sm7KMM7PypqYVo=)
                          13: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: hIcEiGJ2a4OVzLsXtVkwEhPxu5xaUEycLTVFqEClbUI=)
                          14: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: 2cxC9Yp78DtP2pwmC8blaN4EJOD1Ex9DOQ/MmaJtlHU=)
                          15: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: IGq0IE6/t/ToMAAUgfvTKUVFFnrfc7ekD/34Dq5JLeM=)
                          16: 9F624142366311EEB376DC3AC4F9AE02.roa (hash: Q9Tb2O5ygm+wQndmZ7m1YCSjYxvgNqrLPM/NUOTh0b0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: May 17 07:04:33 2024 GMT
            Not After : May 24 07:04:33 2024 GMT
        Subject: CN=66470181-af20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:e7:af:aa:52:94:d6:ba:fb:ce:8f:c4:27:
                    3e:f2:55:54:1b:99:28:77:e5:82:bd:a4:9b:05:df:
                    39:ad:e9:8c:43:6f:5b:b3:e5:69:47:ba:6a:46:bb:
                    31:55:56:b4:f5:09:2a:56:4f:cd:24:bb:19:a4:07:
                    9f:6b:b6:da:58:c4:cc:2a:fa:1b:30:fd:cd:d7:83:
                    01:61:2d:11:18:28:a4:fb:87:96:ba:d2:29:45:bc:
                    7b:da:02:98:97:b9:26:45:fa:b5:3c:da:c7:ef:7b:
                    c6:93:c9:17:33:38:1c:3b:57:b4:d0:2c:9a:ea:28:
                    f1:73:5c:81:ab:c8:e2:9e:4b:8c:2d:7e:8c:bc:4d:
                    a1:b2:21:0a:69:27:f3:be:d6:01:f0:84:f9:61:2f:
                    ee:bb:36:96:5b:3b:77:e8:fc:ef:ea:10:dc:31:2f:
                    88:37:34:df:cf:10:a7:c4:ff:dc:d6:ed:18:cc:13:
                    7c:05:1e:04:06:a1:5d:66:b4:92:e2:58:82:c4:29:
                    10:62:bb:7d:c8:be:ad:a7:7c:15:86:96:7f:9d:3b:
                    db:91:71:97:dd:77:62:f9:89:a5:ce:fe:8f:88:72:
                    6c:6e:74:13:03:47:85:00:c1:8d:df:4d:7d:08:60:
                    51:8d:0a:29:96:69:86:d2:a9:98:0b:11:d5:fb:d4:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:4A:28:BE:91:01:7F:15:3B:A5:0A:EA:2C:7C:C6:FC:D2:76:E3
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:0d:f9:a2:b5:9b:54:2e:91:75:f9:21:2b:d9:15:d9:c1:4f:
         d6:8e:df:5a:e7:24:59:ec:84:c5:d4:d9:bc:d3:b9:fb:f3:15:
         32:e3:06:a9:7b:2b:e6:69:96:47:88:57:b2:f4:4c:ae:82:00:
         a4:bd:26:dd:e9:ee:17:a6:aa:6e:19:98:4c:3a:84:28:b6:42:
         92:62:0e:d8:3a:c7:de:9b:dd:23:74:b0:ef:71:c3:72:36:f1:
         81:13:5c:10:cd:bf:9d:9d:85:ba:bd:b2:5a:73:e7:44:20:17:
         51:98:8b:72:b3:a6:42:f1:fb:fa:07:c3:d2:bf:d7:85:61:07:
         d9:d9:f3:e7:7b:b2:3c:5c:89:25:6e:d2:91:ef:c6:0d:1d:df:
         10:5d:6a:f9:68:de:cd:85:1f:f7:a4:db:4a:10:a7:d6:b2:1e:
         e3:8e:e0:cb:87:8b:50:58:21:d8:b0:9a:85:74:08:d2:fa:ff:
         a7:75:29:57:fe:3d:c2:de:00:8a:c5:8d:cc:2b:c3:d6:fc:73:
         38:c7:43:fc:5a:e5:ba:4a:a8:ad:ad:6d:06:fa:77:4b:f8:bf:
         e7:84:3e:92:c8:a3:44:29:f9:01:f3:da:24:61:90:dc:31:b8:
         c0:3d:48:71:4f:81:f2:09:d5:03:7f:06:d7:31:2b:69:0b:bf:
         0c:fe:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org