Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          nJLsQLJtEruoX2X3dOwaBO8vcz76ibEQDSP49HvHVlw=
Subject key identifier:   2A:A3:B2:88:98:AE:5D:60:98:A8:C5:AF:F1:64:97:B1:42:BB:60:6C
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          05E3
Signing time:             Sun 19 May 2024 00:02:50 +0000
Manifest this update:     Sun 19 May 2024 00:02:50 +0000
Manifest next update:     Sun 26 May 2024 00:02:50 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: YWHW757A0IwlrhmlPnyiIf3rVWG7vRK8+FjiXGZERNU=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: PiK88gR6DqLs+tMf80iFFnjiUEpuB4itY/LI7a3aIXA=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: 8m0invG+9b38yvDYCSRYwDKUjVKmIVlF+1uQJsgg3lY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: ne99q5WbmXbxjRNaAmecrR9xJiEnNFoMmvnLNzg7UUg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: May 19 00:02:50 2024 GMT
            Not After : May 26 00:02:50 2024 GMT
        Subject: CN=664941aa-af73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:27:6f:4f:48:16:9f:3f:60:64:c3:6d:c9:
                    b3:f9:b9:20:04:40:32:51:b7:83:ac:9d:3d:0e:f8:
                    06:96:47:df:1d:bb:93:34:38:44:03:a5:dd:6b:7f:
                    e7:9d:a6:c3:a6:47:25:2c:bc:78:2c:4f:5e:bb:e3:
                    e2:33:9d:9a:2c:43:60:0e:f1:f3:fb:70:c9:9d:9c:
                    12:32:0e:0a:f9:9c:45:eb:bf:e0:7d:5e:3d:56:3a:
                    c0:08:37:55:59:15:2e:52:84:10:85:e7:1f:7b:38:
                    11:f8:0d:43:aa:75:60:69:24:e7:04:c9:db:87:15:
                    69:2f:01:e2:e3:95:1a:31:81:9b:21:3e:51:df:b4:
                    fc:5b:a0:2e:45:e7:11:28:48:88:da:e7:65:47:91:
                    e7:c7:49:d0:4a:67:69:47:b2:1d:dd:51:91:72:67:
                    c1:b7:0f:ba:ad:20:dd:e9:c9:cd:75:53:51:14:6c:
                    fa:2e:0d:ce:5a:eb:26:bd:01:35:90:e9:60:69:c0:
                    90:79:f9:94:75:11:63:1b:b3:82:7d:de:69:88:e1:
                    be:49:92:4f:d6:27:e2:39:ba:eb:77:b1:f7:cc:5a:
                    f4:d7:7c:5b:61:a1:7a:ad:a6:79:79:4d:39:6c:60:
                    68:90:79:4b:96:94:01:f9:24:3a:6d:c1:65:b5:6e:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:B2:88:98:AE:5D:60:98:A8:C5:AF:F1:64:97:B1:42:BB:60:6C
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:24:bf:0d:ba:70:fd:32:7b:66:10:6a:68:6c:76:23:c4:
         cf:dd:5a:0b:10:31:0f:f4:9d:44:77:53:aa:2d:93:8d:d1:55:
         55:ec:0f:47:86:ed:0f:ae:a9:f7:d1:77:d3:64:eb:59:8d:e1:
         87:bd:ed:68:c7:ca:b0:1e:a0:9e:c2:0a:ca:63:3c:f1:1b:81:
         1b:09:25:6a:d1:a2:c7:20:51:bb:6b:05:5b:15:bf:06:64:dc:
         34:72:bb:12:01:23:60:3a:58:21:1b:c9:ef:42:de:69:3c:2a:
         a9:0b:0c:ba:87:0e:7c:59:e8:57:62:05:7a:89:e7:9d:0d:66:
         16:4f:3d:af:64:f9:3e:b5:28:38:bd:07:d9:00:d8:b2:06:f4:
         55:56:f2:b4:0f:67:99:85:e7:16:eb:74:8c:69:75:f2:98:32:
         f2:0c:18:52:e3:dc:4f:65:da:56:3d:f5:46:c0:82:f4:64:67:
         4c:b1:05:e4:64:d6:4e:32:15:67:5c:3b:b5:1a:a0:74:75:2a:
         cb:4f:95:64:0c:f9:0b:83:9b:f0:4a:ae:30:e5:3e:d1:47:eb:
         80:21:3e:8b:94:94:aa:59:ba:30:e0:0a:e8:e3:8b:5e:34:b0:
         68:5b:32:eb:0a:6e:e9:85:65:8c:04:56:44:4d:17:2c:95:b8:
         8e:9a:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org