Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File:                     0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier:          cVhTE8WHAt1NvMjA3AN7xGHYKnzHEMJlPQwZVyjmy7Y=
Subject key identifier:   2A:89:D3:81:C2:8F:5C:8E:AB:D8:C7:A7:B9:ED:B0:38:78:D6:8C:74
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number:          0567
Signing time:             Sun 19 May 2024 00:44:25 +0000
Manifest this update:     Sun 19 May 2024 00:44:24 +0000
Manifest next update:     Sun 26 May 2024 00:44:24 +0000
Files and hashes:         1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: 9pD+tmvC5nYzJdF+79uE0ds5ZXv0OMcDIe1b9yvvISY=)
                          2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: pFBIizYcFrNzDm8DrZjEO+1xWdlIbWxlLup1zHUNlc4=)
                          3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: C3Z8uyv87Fr4LSIUMfrdpfjs+vlcYD0NZXPlFdAyO8U=)
                          4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: h6NadTWgRw+Z4YtSwz1kalWwQMtEHMwAwUVSR0cCGsE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
        Validity
            Not Before: May 19 00:44:24 2024 GMT
            Not After : May 26 00:44:24 2024 GMT
        Subject: CN=66494b68-4728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:d1:49:ea:6f:d9:6e:63:86:57:b9:90:00:
                    44:f4:91:3b:e6:53:d4:ca:c1:f9:f3:7b:93:42:ff:
                    e7:ca:de:cf:3a:c2:f4:b2:5c:e7:2f:c5:a5:6e:78:
                    b0:08:2d:e2:ec:79:16:32:c7:1e:25:ae:72:fb:0d:
                    a1:53:41:9e:42:ce:ca:8c:2e:16:86:a7:f6:73:a2:
                    03:ef:37:99:7f:84:97:19:58:5c:c3:c5:14:eb:33:
                    3a:d6:66:6e:cd:e4:4c:c6:21:e0:98:54:7a:55:c9:
                    fb:73:3c:d2:d4:f5:54:96:7d:1e:1b:f9:59:da:3d:
                    7a:db:8a:b0:9d:c0:d3:ee:d1:ca:27:22:7c:0d:67:
                    3b:37:5b:3e:84:93:ea:e0:2f:55:9f:74:a9:cc:fc:
                    4b:d5:3a:14:9c:25:7a:8a:dd:0c:37:2c:a6:b6:18:
                    37:43:2a:01:5a:c8:c4:88:e0:a8:33:d4:4a:8d:eb:
                    89:03:5c:28:48:75:21:f6:08:c9:dc:11:6c:93:80:
                    00:ef:af:40:16:e2:94:51:93:98:9a:52:49:19:b5:
                    f6:cc:3b:3a:0a:1e:ff:fc:16:c2:b5:8c:32:b9:58:
                    50:d5:09:41:c0:41:06:da:aa:f3:9f:62:af:77:80:
                    47:fb:00:8e:8b:cc:12:e0:84:b8:c1:38:f9:e9:e6:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:89:D3:81:C2:8F:5C:8E:AB:D8:C7:A7:B9:ED:B0:38:78:D6:8C:74
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:fb:8d:7a:c6:0a:42:62:36:e4:ae:2b:b1:09:4f:0c:d9:
         3d:eb:3d:75:21:67:8b:9b:0a:4a:43:25:b9:90:a2:1c:2b:19:
         e4:7c:aa:9f:da:0d:56:b3:c7:44:b6:de:0f:ed:c7:bd:74:1c:
         75:fb:1e:43:df:d4:dc:0a:0a:59:86:d3:49:6a:8b:6d:a1:dc:
         d6:79:64:d3:ef:d8:ae:c3:21:2d:40:4d:6d:00:11:f5:c4:e3:
         dc:ea:dc:5c:71:81:ae:19:0a:83:ad:12:ca:22:2d:e0:c7:fa:
         82:23:0b:02:8f:c3:57:f4:ef:6d:60:95:eb:e6:b5:4f:28:39:
         71:1f:6b:12:2d:2d:6a:40:8c:77:26:7e:fa:86:ef:ea:2e:f7:
         29:9c:71:ff:65:6d:0f:cd:74:8a:a2:dc:6c:da:71:2b:2a:50:
         64:a4:93:77:0c:d1:42:e2:6e:16:fb:46:a9:fd:a4:77:7d:c8:
         9a:6e:74:ed:b3:d0:d7:e8:91:07:68:2e:eb:17:be:4c:e6:10:
         a0:bb:08:c2:a5:d0:cb:f1:a0:66:07:fc:b7:a9:20:6f:0c:0a:
         e9:2b:32:c3:c7:89:4e:8b:c7:69:ee:24:9e:f5:c6:b5:bc:70:
         45:8d:92:4c:53:a7:89:ad:5d:aa:a1:f3:54:f2:fa:74:c9:8f:
         c6:50:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org