Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
File:                     M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json)
Hash identifier:          OvzZZi+jZgKPZPiOUVBmJO2OJ0ourgysM/G0d7A25aQ=
Subject key identifier:   F9:0B:65:37:A5:D8:35:6F:B6:BB:50:F5:FA:6F:B6:BF:C2:4D:BE:4C
Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A
Certificate issuer:       /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
Manifest number:          023E
Signing time:             Sun 19 May 2024 03:58:08 +0000
Manifest this update:     Sun 19 May 2024 03:58:08 +0000
Manifest next update:     Sun 26 May 2024 03:58:08 +0000
Files and hashes:         1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: t2OqJJ9tOTJTo1L2/TVPT7bhuFtYtknMNvmfwVN01GE=)
                          2: 3A87C676D85D11ECA651B731C4F9AE02.roa (hash: opl+asT2CmW4VKKAfSWog8RuG8Qnh9dJzO9AuNAW7Ps=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl
                          rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
        Validity
            Not Before: May 19 03:58:08 2024 GMT
            Not After : May 26 03:58:08 2024 GMT
        Subject: CN=664978d0-748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:b1:0d:3c:2f:96:06:6a:07:81:8f:04:9e:
                    c2:11:52:df:5c:10:9a:b5:90:f8:43:ff:57:4b:c9:
                    0e:cb:10:f0:4a:cf:77:33:78:31:94:09:f3:8b:57:
                    75:84:0c:57:60:9c:a8:6c:97:b5:da:57:8d:97:26:
                    1a:7f:6e:f0:c7:37:f4:c4:e4:15:8d:d0:b6:7d:41:
                    c3:7e:8e:f8:05:79:b1:8b:74:04:4f:46:b5:cd:3e:
                    31:a4:02:28:4e:b5:27:6f:c2:78:c1:d1:00:bd:c3:
                    ab:e6:d8:ff:81:5c:63:14:55:47:fd:5f:41:1f:32:
                    6a:6c:44:51:25:20:43:e5:9c:e4:f8:ce:27:2c:b7:
                    38:39:9f:73:e3:a0:2f:7a:fe:4f:4b:d8:ff:10:b5:
                    42:b2:54:4d:51:7b:6c:bf:1a:84:ee:85:49:91:2f:
                    cc:6e:c4:62:68:10:42:aa:d7:16:23:5e:e7:c3:5b:
                    85:c0:ca:3b:7b:5b:ad:00:bd:64:ff:99:06:ce:7e:
                    a2:36:1f:1c:d5:56:15:93:8f:f1:51:0f:5b:46:87:
                    c1:be:1d:40:e6:80:3f:92:73:52:2b:22:83:34:49:
                    b6:82:c2:e1:95:61:72:7f:3f:c0:c7:71:e2:8a:65:
                    a4:de:57:ef:3d:47:b0:6c:d2:7e:e1:fb:1c:d0:27:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:65:37:A5:D8:35:6F:B6:BB:50:F5:FA:6F:B6:BF:C2:4D:BE:4C
            X509v3 Authority Key Identifier:
                keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:c6:75:fc:ec:30:30:56:e2:4f:40:85:f7:00:27:dd:0c:
         42:a5:3a:28:60:63:a0:ad:8e:48:7f:c7:58:4f:17:e7:f9:df:
         f4:42:cd:a8:95:87:15:57:7b:a4:90:98:67:3a:89:82:2f:9e:
         67:48:2c:92:e3:9a:1a:ae:1a:88:b8:74:77:af:93:ff:49:75:
         28:ab:6e:c3:9f:3c:6f:79:01:8a:12:c2:dd:4d:ca:0c:82:76:
         86:7b:6a:89:60:7a:b5:61:fc:b9:58:e5:98:96:a1:40:a6:ec:
         8c:7b:82:46:75:f1:32:d6:39:8d:30:26:fc:35:0d:5a:35:68:
         e0:82:0b:46:53:0e:87:c6:37:61:4b:89:00:b4:dc:88:cf:26:
         06:a0:68:62:d8:f9:7f:86:8b:d9:a5:47:c5:c1:f2:0c:a8:27:
         5a:99:86:ec:c5:4b:be:19:41:5f:61:59:9e:36:73:1f:8b:1c:
         65:8a:5b:15:37:7c:c3:2f:30:f7:17:02:91:30:1a:b2:25:27:
         7c:e6:f5:8f:22:f2:81:40:32:b2:80:b3:13:32:a5:88:50:ee:
         cc:81:31:25:96:16:e8:b5:bb:61:84:dd:0c:c6:81:6f:48:f6:
         93:24:82:7d:e7:53:02:b2:ce:8e:20:8b:dc:26:f8:43:58:72:
         bd:6d:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org