Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File:                     Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier:          Sb0s2G7qzDnaA8LlyL0/HLBpxTZOLlZ761Vls36Lz2M=
Subject key identifier:   72:12:E5:20:D7:D2:5D:1D:A6:9A:89:A9:54:1D:5B:68:0A:3E:E9:84
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       073E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number:          0730
Signing time:             Thu 02 May 2024 22:36:50 +0000
Manifest this update:     Thu 02 May 2024 22:36:49 +0000
Manifest next update:     Thu 09 May 2024 22:36:49 +0000
Files and hashes:         1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: Vk3hXypVFuLjUIZjHqvc06GUdQ3linwdaQMgYyXnsfg=)
                          2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: zahf38WJUaJrn85EVjhYTZf4G0B8Ut3ofdI2dvU3v80=)
                          3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: xK6g/9ZrCrAbUvohYXyIWOCZe254sdAZJJD2NWP+2ec=)
                          4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: y/ajgkav4Bv35KJL44OM9tnNn/ywJ62e1EkzLdBTa9E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: May  2 22:36:49 2024 GMT
            Not After : May  9 22:36:49 2024 GMT
        Subject: CN=66341582-0962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:d2:86:7e:06:47:c9:1d:66:cb:dd:fe:7f:
                    72:2a:e4:c1:a2:84:0d:a5:39:9a:49:94:93:34:7f:
                    44:f6:a0:25:75:87:0a:21:77:1c:00:92:7e:97:63:
                    19:ff:69:fb:7b:bd:7f:9c:5d:c7:7a:6b:5b:7f:ee:
                    2b:22:40:e8:08:8a:40:70:3f:3c:a3:04:4c:4b:c7:
                    3f:bd:8c:fd:f6:f5:ba:a9:11:81:ad:49:10:14:91:
                    97:fb:06:fa:ef:5d:83:d2:90:bb:e2:6b:fb:00:d1:
                    02:cc:62:22:e4:fa:76:a0:08:36:73:d7:1c:22:4d:
                    32:14:92:b4:ea:2e:25:08:c6:37:d8:e9:5d:0a:95:
                    82:27:f3:b0:3a:ef:ed:6d:bb:91:85:77:0e:3a:fa:
                    10:7d:36:59:8b:56:d4:79:12:a7:55:3e:a8:e3:6f:
                    95:9e:5a:bc:e2:61:7a:c8:8d:86:4d:df:c5:72:fb:
                    57:01:4b:a0:42:39:ae:de:3a:fb:7a:7f:f6:8a:18:
                    df:3b:82:2b:a8:a4:0b:b2:12:dc:5d:59:7a:bf:db:
                    5f:27:d6:9b:7f:6e:bf:e6:91:5e:53:20:22:56:b6:
                    69:06:0e:e5:81:39:cb:b5:e4:57:0d:67:de:ea:b9:
                    24:de:22:92:a5:7c:b8:2a:a5:14:36:65:00:9a:e4:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:E5:20:D7:D2:5D:1D:A6:9A:89:A9:54:1D:5B:68:0A:3E:E9:84
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:9e:ae:24:de:a1:7f:1c:06:81:69:4a:16:3f:1b:3e:76:
         d2:02:98:de:b0:9f:89:9b:ac:4a:6e:44:40:ce:6b:69:56:03:
         f4:3c:5c:b9:d3:24:6b:7e:cc:63:92:e6:4f:1a:cf:44:00:fc:
         f3:c2:12:65:23:8c:06:23:b8:f9:3d:0c:b8:84:4b:0a:5e:20:
         36:3b:b3:25:3e:e0:d4:e5:fd:f2:59:ab:0b:67:4e:d8:75:c3:
         ae:b9:ab:25:01:e5:3a:5b:1b:52:93:03:1f:c2:ba:75:32:4c:
         0e:2d:1e:0f:3f:03:17:fa:6d:12:1b:a9:c6:6f:f9:b1:30:5a:
         eb:72:9c:d7:85:83:77:45:98:74:7d:cb:d5:bb:0c:5c:8e:77:
         1a:8e:24:c0:4a:61:25:a8:39:e5:cd:2a:f9:a1:ac:1c:8a:b9:
         f3:76:c3:d3:eb:9f:74:03:9e:7b:3d:99:f1:56:d2:f5:96:b2:
         ff:09:c0:81:c6:77:a8:aa:53:d7:95:4d:63:c3:2f:69:80:e2:
         8b:32:86:a4:b3:30:9c:3a:86:2a:81:88:91:0a:fe:9f:23:37:
         95:a1:19:c3:18:9a:2b:1c:77:3a:f4:bf:85:4b:73:8f:45:a8:
         5c:69:83:07:09:00:41:c8:31:a5:b4:e0:23:3d:dd:cc:ae:3f:
         72:69:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:48:44 2024 by rpki-client on console-fra.rpki-client.org