Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          0Va8Om+oaYW8xA82N9GnFgcN20t0tNT2KBmN0/+BLro=
Subject key identifier:   B7:0D:6C:B8:65:98:C6:DB:FB:E5:59:2F:DE:E7:B3:E7:CD:CD:3D:5F
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       06DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          06D8
Signing time:             Sat 18 May 2024 22:56:33 +0000
Manifest this update:     Sat 18 May 2024 22:56:33 +0000
Manifest next update:     Sat 25 May 2024 22:56:33 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: Uk8KIx9nbHLyVdgqYUna9waDmVVnzHc/X+KRWdsy5vA=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: vAxVIummp1tZV92HZC5O4bYvIWtcttXOvxYUEW5yjEo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: May 18 22:56:33 2024 GMT
            Not After : May 25 22:56:33 2024 GMT
        Subject: CN=66493221-7c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:c1:a7:d3:82:f1:59:0d:95:54:6a:cd:b6:
                    25:6b:50:8f:75:54:7f:12:22:f9:1e:f1:2b:51:1f:
                    21:7e:64:01:54:7e:16:5c:4d:92:59:68:e4:ac:6d:
                    28:d9:db:b1:42:e6:b0:d5:26:bc:1a:0e:86:90:41:
                    52:2f:f9:bb:c5:6d:47:ba:ce:a2:f8:35:68:70:5a:
                    00:5e:82:b3:7e:01:56:84:86:34:d8:30:75:10:87:
                    e2:ac:08:55:bd:f9:37:3a:a9:be:f1:66:1c:36:d4:
                    de:d2:d8:14:c8:04:29:1d:1b:b5:69:53:d1:e8:73:
                    43:aa:87:3c:75:5c:8f:ea:f9:8b:2c:0e:b9:11:30:
                    b4:08:d1:09:4a:63:fe:2e:f8:49:72:58:59:3a:6c:
                    5e:97:bd:9c:bf:ea:cb:88:97:91:f7:3e:40:15:8d:
                    4c:a9:06:3d:4d:12:ec:0f:cc:a5:01:29:a3:90:f5:
                    75:6e:bc:af:3e:4d:ba:07:27:86:b9:a5:e7:f0:93:
                    b0:ac:70:86:54:9e:9d:61:a3:39:ba:98:68:b1:b7:
                    f7:f5:13:b9:8b:88:8c:8a:92:9a:21:0d:14:48:0c:
                    e4:a7:80:9d:27:eb:34:bc:76:f8:de:85:d4:04:40:
                    e1:18:91:4d:ae:56:5b:01:d3:76:ef:dd:73:7d:57:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:6C:B8:65:98:C6:DB:FB:E5:59:2F:DE:E7:B3:E7:CD:CD:3D:5F
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:33:d0:5f:94:89:40:8d:67:ec:12:9f:97:0d:98:83:f4:c5:
         d7:25:17:53:94:32:40:c7:16:4c:a2:a9:47:d0:56:36:c4:69:
         24:ab:d4:f7:53:86:0c:95:96:b7:e8:43:fd:7f:6a:a1:ee:95:
         7b:64:7a:4b:0d:3e:96:b2:15:b9:24:88:0f:b6:7b:d6:17:59:
         12:fe:86:f6:d7:76:0f:45:42:30:34:d2:14:64:78:6f:06:d9:
         d2:44:54:c9:b0:d9:3a:76:7b:af:be:cf:dd:9b:0c:70:e9:4f:
         05:91:4e:10:6b:26:20:38:24:41:0e:57:a6:4f:77:88:01:51:
         1f:f6:1a:84:bd:84:b8:83:35:94:d2:f3:95:8b:29:70:92:fe:
         20:9e:09:4b:8a:c8:18:8a:f7:72:4b:b6:f2:ab:fc:03:31:f0:
         26:ec:af:26:68:ba:b5:82:35:55:ef:af:42:cb:a4:85:b3:ae:
         c7:bb:f7:48:b1:fd:bc:87:f1:78:e8:b4:da:60:22:1e:b1:cb:
         76:08:46:79:c4:dc:98:f5:af:01:4d:6d:60:d2:8f:f1:4b:89:
         e4:2a:27:96:e1:f9:32:69:6e:e0:79:15:da:21:fd:d1:95:40:
         8e:58:ef:3c:83:83:49:67:fb:69:5f:14:12:ca:01:ea:59:c8:
         cd:08:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org