Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
File:                     2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json)
Hash identifier:          TJxYzYyb3sMvAdGzWp+m4pZt6miRexaQP9xNlayqwyI=
Subject key identifier:   90:01:BE:A2:CD:D1:7E:21:54:AA:D4:C7:0F:E5:A5:FC:8A:CD:D0:C1
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Certificate issuer:       /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
Manifest number:          0112
Signing time:             Sun 19 May 2024 05:25:54 +0000
Manifest this update:     Sun 19 May 2024 05:25:54 +0000
Manifest next update:     Sun 26 May 2024 05:25:54 +0000
Files and hashes:         1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: YFyEie+R0TLrUITtXj/q2J6NFxLL16IeBFmrpkiUpow=)
                          2: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: SP43dDj0TP2AuH+ERwKOivn1jA5dt4mXL5sQptk/Mvw=)
                          3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: SW94V8FK+wh3g2owH4FSTBAuPQXa1Wqrh4t/o9T94fQ=)
                          4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: J+eUq7xSVl/ftHVow0zUjtY1Um3ErdEi7ydMTSgX11Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
                          rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
        Validity
            Not Before: May 19 05:25:54 2024 GMT
            Not After : May 26 05:25:54 2024 GMT
        Subject: CN=66498d62-db69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:20:18:8b:57:8e:92:41:de:4b:56:f3:ee:
                    c6:17:37:58:ff:51:9f:64:c9:39:b7:78:90:00:fb:
                    64:c1:2e:cf:1d:5b:05:dd:d5:89:ac:94:2f:1d:0f:
                    54:dc:c2:40:e0:37:db:b5:4f:01:d2:d0:7d:22:82:
                    70:e9:04:0e:c3:df:43:7a:ef:83:4f:b3:ef:eb:62:
                    5b:66:d6:ce:b6:b7:c5:5e:4f:e2:78:de:7f:c1:b3:
                    90:b0:46:db:75:f7:80:b5:ca:af:5a:9e:15:70:bb:
                    b3:fb:eb:9f:00:14:80:a5:c9:06:de:63:1e:fd:a5:
                    66:d5:06:fe:4e:a4:f8:e3:85:5b:2f:e9:59:9a:2c:
                    52:af:ce:87:8a:21:fe:b1:68:fd:41:04:c1:b7:8e:
                    1f:52:54:5f:f9:e1:1d:e7:0d:3f:ce:8c:f4:18:6c:
                    c9:f6:3f:56:34:3c:0f:87:76:98:02:10:54:67:53:
                    2e:2e:fd:2a:11:ff:50:05:f1:c5:51:32:3a:2a:18:
                    d5:8b:22:31:77:c6:60:71:f3:25:0a:74:1e:5d:e0:
                    d2:3c:07:3c:11:1d:18:9b:26:26:34:25:ad:4e:19:
                    2f:01:60:1f:62:ac:49:c1:9d:49:77:10:ef:4f:25:
                    5e:8f:3f:bc:ad:73:ab:7e:f6:4f:00:19:26:61:b9:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:BE:A2:CD:D1:7E:21:54:AA:D4:C7:0F:E5:A5:FC:8A:CD:D0:C1
            X509v3 Authority Key Identifier:
                keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fa:6d:f1:0a:f3:b5:05:02:0c:27:33:f5:8b:83:ca:e5:41:
         ca:f5:4e:06:1a:80:46:67:99:97:eb:c3:3c:87:fc:82:40:0c:
         da:50:e7:68:f4:d6:de:4b:74:1b:ae:ec:19:1c:2d:fe:59:b2:
         87:92:1a:bd:30:76:b1:97:0f:9d:2e:2c:f1:11:aa:83:7f:59:
         95:ef:71:cb:fd:99:84:bd:7b:97:04:50:4a:26:13:74:c9:70:
         4e:14:c7:9e:04:cb:8f:0b:c8:d9:b8:0d:48:d9:f4:86:0c:2a:
         7b:3e:2b:b7:11:ff:d4:a4:28:52:7e:22:c3:e6:48:ed:22:43:
         80:46:33:a1:72:c3:d0:43:86:8d:43:34:04:d5:6a:44:42:30:
         23:12:a4:ae:b6:9b:00:77:ab:df:56:ea:89:ad:c7:7e:52:b2:
         3f:53:8c:1e:d2:24:5a:ee:8e:c0:d0:4c:fc:94:a9:7b:e1:2b:
         eb:8d:a3:87:2f:67:13:10:47:a0:ad:3f:18:75:bb:1b:b2:e8:
         37:6d:01:a4:32:98:54:44:1e:95:26:72:1d:a4:3c:70:70:ec:
         66:47:8e:04:6f:22:ab:66:94:48:f2:55:05:70:0e:83:d2:fb:
         19:60:f3:8c:df:99:62:cc:83:1c:88:3f:18:f9:c7:53:95:a2:
         b8:81:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org