Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File:                     S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier:          sOE1ijKWwW3BeBkRf/q9QX20obBSnnHTgDlHXulBusU=
Subject key identifier:   49:B3:DB:40:E0:0D:D5:6C:5D:20:0C:F9:A4:2B:86:BC:75:92:90:4B
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer:       /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number:          5A
Signing time:             Sun 19 May 2024 07:48:17 +0000
Manifest this update:     Sun 19 May 2024 07:48:16 +0000
Manifest next update:     Sun 26 May 2024 07:48:16 +0000
Files and hashes:         1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: 5lkbl0btFucCXowB2iU8k/HhRMnfax3BZ6reboXR+C4=)
                          2: 2B752026906B11EE8F088143C4F9AE02.roa (hash: pmbJAheNFOhxQQhbXBEozs5HvMW28O8cu4rrDKnfYtY=)
                          3: BBCD5340CDCF11EEBFF83067C4F9AE02.roa (hash: HqTtrPpk2fN7Y95oT4OWfNkqpwA2777ymgSvu6SieTk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
                          rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
        Validity
            Not Before: May 19 07:48:16 2024 GMT
            Not After : May 26 07:48:16 2024 GMT
        Subject: CN=6649aec1-421c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:b3:8c:04:84:9b:c8:ff:83:08:48:f9:c5:
                    99:75:07:26:61:8f:f2:a7:df:3b:51:b5:c9:28:a9:
                    02:7a:37:66:5d:31:dd:9c:9c:06:dd:1a:51:2f:61:
                    56:c6:19:62:fd:3f:c8:bd:9a:cd:8f:c5:d8:ab:c6:
                    57:d8:28:c4:cd:61:36:b4:93:bf:8e:85:41:6f:fc:
                    f3:e0:01:31:d2:8c:30:d5:8f:a0:71:b1:4b:d4:b7:
                    d3:ff:08:ab:ba:6d:3a:64:4f:7d:b2:1f:5a:16:1a:
                    de:d9:db:a7:bf:af:cd:48:f4:2d:25:3e:d2:d5:85:
                    28:4c:8b:aa:eb:7e:8b:e2:ee:bc:2b:e5:a4:ed:bf:
                    38:7e:0c:f7:56:c1:e9:99:86:70:44:98:c6:9d:88:
                    ef:00:92:34:7f:ed:d9:fb:cf:4f:ff:1e:e5:c0:8e:
                    59:4f:54:cf:bc:58:0a:20:a5:f2:1d:2c:7e:b4:5a:
                    80:3c:81:82:41:9c:5b:a8:7a:f5:f2:7f:83:f5:1f:
                    9c:8d:54:25:06:3f:cb:89:d8:3a:8c:88:c6:fb:62:
                    15:94:35:89:4a:f5:d5:50:e8:24:75:49:dc:c1:d0:
                    a0:c9:32:d6:9e:03:12:cb:3d:5f:51:f5:44:8d:78:
                    ac:56:16:b2:02:7c:86:d5:a4:ad:50:1e:1b:9d:af:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:DB:40:E0:0D:D5:6C:5D:20:0C:F9:A4:2B:86:BC:75:92:90:4B
            X509v3 Authority Key Identifier:
                keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:87:12:43:0e:79:18:b1:43:4c:87:47:c6:e7:30:5e:b4:00:
         0a:d1:b5:e9:ff:bd:5d:15:07:b2:2a:df:d2:83:a5:69:8a:ae:
         25:fb:f6:0e:2c:2b:8d:08:24:91:cb:f5:7e:f6:31:98:3e:85:
         29:2b:0a:14:94:71:5f:12:cf:ba:04:b0:66:6a:5d:8d:2e:3b:
         06:63:34:c3:2d:94:f7:96:d4:78:25:dc:ff:56:8c:c8:5d:2d:
         73:f3:da:ed:be:2e:4b:18:17:80:eb:5e:f9:fd:7c:fb:6c:ff:
         c8:86:05:f5:17:ee:5a:4c:ec:a7:6c:cb:32:fd:b8:8f:c5:ce:
         99:96:30:f9:af:7d:1f:3e:17:52:5d:e1:28:34:ad:20:50:36:
         13:ed:40:9a:d8:15:80:c1:e3:dd:39:b9:92:a3:e9:ca:b4:68:
         0a:f7:b1:cb:15:33:f8:c2:83:b9:5b:91:2c:f9:50:5b:cf:16:
         47:51:57:82:35:92:f3:57:a8:78:8f:1e:1b:e9:92:b0:31:ac:
         16:cc:5d:92:ca:81:e3:8e:2b:c6:e9:1f:f5:0c:5f:6c:e1:cb:
         68:1b:7a:83:ff:83:18:62:df:74:6e:d6:30:fb:f0:ad:40:1d:
         a4:e5:31:bf:2c:5f:83:db:99:92:d7:f1:ab:05:11:10:29:bb:
         f4:2b:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org