Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
File:                     9i_LOgjeVciXseoID_HMnYub2NU.mft (raw, json)
Hash identifier:          zTo2F3EsWl3nyUYvXBJaGx4jm6ZP7JOj4K8qo4QoQSQ=
Subject key identifier:   B2:B1:35:35:0B:EA:74:DD:2B:28:7E:96:C5:51:52:17:74:A8:98:0C
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Certificate issuer:       /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
Manifest number:          0218
Signing time:             Wed 01 May 2024 04:25:31 +0000
Manifest this update:     Wed 01 May 2024 04:25:30 +0000
Manifest next update:     Wed 08 May 2024 04:25:30 +0000
Files and hashes:         1: 9i_LOgjeVciXseoID_HMnYub2NU.crl (hash: SLZFUnCY3wjBBt1CNweqeP74cANLp/Q0yqZ+Odz7JUY=)
                          2: 38A83FAE0E9211EEB070CC49C4F9AE02.roa (hash: pYbmLhX5/nEytGnA62Y2OOPybBLa+nm0sSYSRV4/Am0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
                          rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
        Validity
            Not Before: May  1 04:25:30 2024 GMT
            Not After : May  8 04:25:30 2024 GMT
        Subject: CN=6631c43a-9b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:45:91:f4:aa:f1:ae:7f:ea:b6:a1:a2:48:
                    92:ee:05:39:ab:fc:27:b0:13:b6:b7:fb:2a:74:6a:
                    f3:60:b4:77:4c:2b:75:84:40:92:ad:23:7b:75:9c:
                    34:c3:fa:71:ca:62:95:72:57:fe:6a:b9:7e:03:79:
                    20:a3:ce:d5:6a:a7:e8:9d:04:78:0c:fe:e1:8a:b8:
                    56:45:1b:e1:04:18:0a:c0:a6:dc:c6:a5:15:a7:14:
                    2f:50:30:c4:36:5e:3a:cb:bb:bd:d1:36:58:9e:41:
                    a6:da:50:f4:ae:c1:df:ef:57:a2:9b:c6:84:00:55:
                    8d:f9:66:1d:a3:50:95:ff:f0:a4:3f:79:b1:52:5c:
                    e4:a5:f8:16:d3:b5:04:b4:1b:0c:55:89:f9:66:aa:
                    a7:4a:71:b3:e3:53:68:f2:20:a3:4c:89:bb:20:1b:
                    67:f4:f3:9b:7e:1e:87:33:9a:3a:f8:76:b5:aa:f4:
                    8d:ba:11:e4:e7:e0:ac:a1:a5:85:28:13:69:0d:11:
                    cc:88:62:a1:94:ca:6a:f4:d8:02:8a:28:5d:4e:14:
                    74:1e:be:b9:92:25:75:98:b8:37:c4:7c:03:10:05:
                    92:74:6b:53:14:49:02:58:1c:63:2e:7e:84:16:91:
                    eb:04:18:00:25:d9:6f:7a:9a:88:d1:91:cc:75:6d:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B1:35:35:0B:EA:74:DD:2B:28:7E:96:C5:51:52:17:74:A8:98:0C
            X509v3 Authority Key Identifier:
                keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e5:6c:ad:f5:b5:85:11:dc:58:75:71:8a:0c:d8:d7:3e:6f:
         c7:bb:e2:35:e6:e6:06:32:5a:51:97:1f:c3:62:ca:7a:aa:ce:
         df:94:7e:0e:f9:13:20:75:b4:2b:22:10:66:8f:7f:3c:60:81:
         f9:04:5e:54:5c:34:70:30:66:3e:96:9e:9f:06:dd:19:37:8d:
         34:49:d7:55:6d:83:33:a7:71:a8:04:a4:10:60:65:a2:f1:76:
         3c:50:7c:f3:9b:dd:ed:da:03:09:86:d1:5b:7f:de:97:75:cd:
         76:f2:2e:c5:26:2f:a1:57:ec:be:52:2e:76:13:a8:51:9d:76:
         94:66:e2:c4:bd:f8:51:c4:0e:62:48:79:06:a2:89:34:2f:f2:
         49:30:71:8f:19:ef:2b:07:2b:4c:87:ef:be:0d:d4:ed:de:c1:
         63:c6:f1:bf:55:9f:13:42:83:c8:73:4d:81:17:19:fd:7e:41:
         e4:56:af:82:76:ac:3b:7b:3f:4b:5f:bb:48:0d:2f:91:85:4b:
         72:ce:c0:04:f5:61:aa:94:9e:f4:fd:10:82:bf:07:93:84:2a:
         03:93:71:a0:87:f2:f8:47:38:59:5b:e7:23:eb:8e:c8:d7:e4:
         5a:a0:5a:b5:43:45:64:f5:a9:7a:90:62:a8:a0:40:ea:6b:4c:
         56:5f:81:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:55:44 2024 by rpki-client on console-ams.rpki-client.org