Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File:                     QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier:          wY0IETzyD7LTHqDG2DY1Esi24WRUiY1qIrfi2CQwqlM=
Subject key identifier:   B8:07:6E:BB:85:4B:FB:EC:C4:48:74:77:50:F7:E5:27:1A:45:8E:6A
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer:       /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial:       0648
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number:          05E7
Signing time:             Sun 19 May 2024 00:44:34 +0000
Manifest this update:     Sun 19 May 2024 00:44:34 +0000
Manifest next update:     Sun 26 May 2024 00:44:34 +0000
Files and hashes:         1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: ihPC0jsts7D1ljJpj/PLkOK1QYa1JtSPzUq5g90klEk=)
                          2: 1081C808941911EEA608BF44C4F9AE02.roa (hash: wkZSRfb4XnJlre+GzChCi7wKsQrFa/kgUVSfW1SrRqE=)
                          3: E4665324A18811EEAA13424FC4F9AE02.roa (hash: 08Pz+p8TaXXxFRRwBvqw+DqiYQKyZ3MT4nMY+dgSGYU=)
                          4: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: VEWeFNgiA0UydEM8y+Pxs54+ayLxWXO15synrR83C5k=)
                          5: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
                          rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608 (0x648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
        Validity
            Not Before: May 19 00:44:34 2024 GMT
            Not After : May 26 00:44:34 2024 GMT
        Subject: CN=66494b72-ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:d5:1c:a3:3d:2d:fe:25:99:1b:ff:49:e4:
                    5d:9a:60:26:4c:cc:b8:eb:3f:69:f8:d8:e1:7e:87:
                    bd:bb:94:a8:33:82:11:36:78:9c:0f:06:26:63:b2:
                    22:e2:99:7a:f2:ff:be:63:a8:69:2e:7a:c5:ba:81:
                    01:c9:8c:d5:2b:5e:b3:c0:3c:2f:32:ec:b6:79:95:
                    d5:3b:08:74:bd:5e:3a:5f:e8:80:ef:1f:b3:9a:9a:
                    b7:9b:ed:0f:70:1f:0b:1b:20:06:f5:ad:10:4b:51:
                    85:d9:a8:13:51:3f:cd:79:c3:79:c5:61:b4:15:d8:
                    b6:7a:21:cd:bd:44:8f:eb:09:4f:f0:89:96:39:1f:
                    23:37:b1:4d:e9:90:0e:17:e3:4f:7c:ae:b7:49:39:
                    1a:c9:67:1c:1f:e8:ea:05:16:b8:92:0f:68:44:12:
                    4d:e7:02:3d:23:87:46:3e:66:b3:28:d9:75:7d:5c:
                    f5:8f:f2:27:a8:a4:00:42:eb:40:b1:08:71:98:5e:
                    c2:a2:e1:8f:64:81:28:e2:ff:cb:a1:bb:23:d6:01:
                    da:c7:b2:12:12:e2:a8:42:e4:a6:09:49:4e:0a:89:
                    25:ed:dc:81:c7:17:9c:7c:7a:7f:f5:3a:26:dd:55:
                    97:97:de:4a:48:75:01:64:4a:6b:84:e3:3c:06:cd:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:6E:BB:85:4B:FB:EC:C4:48:74:77:50:F7:E5:27:1A:45:8E:6A
            X509v3 Authority Key Identifier:
                keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:e8:d2:fa:d1:4d:76:fc:02:6f:2c:91:60:62:9f:30:1a:
         8c:c3:5c:70:c1:36:48:62:6d:3e:49:eb:78:de:91:06:b9:a0:
         05:92:43:b6:1e:37:6f:97:ca:ee:19:c6:e2:f5:8d:4d:bc:7b:
         27:21:e1:86:4d:5d:fb:da:7a:28:a2:6f:2c:31:b4:c8:94:eb:
         85:bb:12:3f:d1:e8:5e:ae:62:d6:56:17:15:58:ba:28:11:7c:
         7f:72:b5:89:33:e9:55:85:66:81:62:4d:0d:56:b5:82:d8:65:
         21:9b:a8:38:0b:be:83:e6:60:4b:53:73:3c:3e:0a:e0:11:68:
         a8:bd:d6:cf:17:56:8a:34:92:c0:7a:fc:82:39:77:59:f3:ec:
         e1:dc:d2:e3:0e:c3:fd:66:af:e3:5f:7e:53:1b:08:bf:50:df:
         8e:6b:56:a9:b8:a2:53:17:92:8e:c3:d5:71:89:89:b6:64:e3:
         81:5b:f7:8d:1d:94:06:f9:ff:57:9a:1c:ba:23:84:26:fd:b2:
         5e:37:5e:bc:4e:9d:94:92:94:0d:08:4d:32:8b:51:54:31:30:
         c3:70:8c:4b:2e:fe:db:77:aa:1a:83:79:2d:ea:ca:f5:1b:63:
         1f:1a:8d:db:04:33:8b:ef:10:c8:6a:c5:29:af:36:a4:a4:9e:
         e2:df:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org