Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
File:                     goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json)
Hash identifier:          BaTSppCnxLGK5pyv/bCt+SXkKKiXCu7facy/6KJEUtw=
Subject key identifier:   83:F1:1D:AB:52:AA:62:34:0B:59:10:5C:CB:59:03:0A:A2:C9:76:91
Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49
Certificate issuer:       /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
Certificate serial:       05BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
Manifest number:          05B9
Signing time:             Sun 19 May 2024 00:10:09 +0000
Manifest this update:     Sun 19 May 2024 00:10:08 +0000
Manifest next update:     Sun 26 May 2024 00:10:08 +0000
Files and hashes:         1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: ekOdAGfOA5pK2RqziiKyKZHIm08gsa3DVhu+ECxRyyk=)
                          2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: Fxa9+QyJcCnbRp44gG+Q6H8L6JtGzDRxKl0JIsoaiOQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl
                          rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49
        Validity
            Not Before: May 19 00:10:08 2024 GMT
            Not After : May 26 00:10:08 2024 GMT
        Subject: CN=66494360-fe29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:89:96:f7:db:28:9f:1f:45:a9:3f:98:19:
                    ab:db:53:28:22:49:62:a3:89:2c:f1:33:2e:de:64:
                    31:b7:4b:6d:d9:91:87:98:54:b7:33:d6:d7:4b:a7:
                    0e:cd:b8:a1:f5:25:a6:f3:c1:eb:6b:a3:78:ac:8b:
                    f1:28:13:4b:34:59:b8:e9:85:27:fe:7a:24:bb:4f:
                    32:fa:45:02:6c:cc:f0:97:83:91:be:98:12:6a:b5:
                    f0:02:47:48:74:0f:58:04:90:83:40:1a:93:a8:1f:
                    e3:7f:70:04:7d:e3:e0:09:05:78:64:93:31:3b:e4:
                    f0:33:49:9e:10:cc:fa:6a:e0:b1:60:25:cf:06:5c:
                    70:36:48:db:56:8a:ca:bf:e6:fa:cc:55:01:05:1b:
                    f9:bf:30:7f:ac:1e:69:15:6f:77:84:82:9f:f5:6e:
                    a0:8b:78:d1:09:bd:c1:71:00:a8:7e:07:4b:99:83:
                    80:dd:42:f9:68:89:08:2a:64:dc:b0:d6:9e:9f:71:
                    9d:41:ed:19:69:99:d9:6a:3d:ae:6d:31:b9:06:27:
                    06:9b:22:38:b3:51:f2:ad:2c:53:bd:fe:2a:6d:4f:
                    cd:9b:76:88:cd:70:bc:29:77:25:87:5b:85:ec:9c:
                    89:ce:14:68:8c:ce:72:62:47:69:64:78:d4:71:e3:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:1D:AB:52:AA:62:34:0B:59:10:5C:CB:59:03:0A:A2:C9:76:91
            X509v3 Authority Key Identifier:
                keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c7:79:44:f9:44:f3:dd:48:ad:5a:c9:27:f2:45:b0:2d:8a:
         a1:c5:a5:fd:e6:0a:a2:83:5a:72:5c:d3:53:a2:9e:97:10:69:
         c2:08:b3:72:c3:de:0e:04:d5:7f:a8:a2:e0:40:41:35:a7:47:
         2d:e1:26:dc:49:69:36:d6:db:98:5a:50:52:74:3b:5a:9b:20:
         15:5d:f4:9a:ed:44:9d:75:20:a0:4b:87:3c:43:42:71:86:97:
         dc:a0:84:fd:9c:df:26:60:a5:53:24:21:33:00:94:31:45:f7:
         60:02:d0:18:20:d5:69:54:84:ed:90:7d:bc:0a:83:3b:a1:93:
         e8:bc:11:6b:67:14:e6:7d:f0:de:2d:57:d0:d6:03:dd:21:d4:
         f4:23:0a:e3:26:0e:15:be:5f:c4:61:a5:50:59:fd:96:87:8d:
         a6:bf:12:67:49:5f:88:84:3d:cb:64:a3:53:a5:c8:c7:44:a1:
         85:e6:62:54:e7:c4:c0:cf:56:75:d8:dc:33:31:3c:cc:89:ab:
         0f:bc:a6:1b:76:9e:df:a0:02:fa:cd:31:d6:39:8c:39:2f:de:
         d4:02:bc:be:15:25:a7:69:7d:9a:a7:52:d7:fd:74:db:54:ea:
         2f:6f:77:4a:0d:af:2c:e2:74:7b:5c:16:72:fd:85:d9:8e:84:
         d6:cd:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org