Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
File:                     GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json)
Hash identifier:          busDguqQmBz5QjtvVO57Mt0zFXeTxvhEdV0UAYGfqd8=
Subject key identifier:   81:5E:58:27:71:E5:23:AB:DD:25:25:1E:9F:11:BB:BA:C6:D9:7F:4E
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Certificate issuer:       /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
Manifest number:          0113
Signing time:             Sun 19 May 2024 05:21:59 +0000
Manifest this update:     Sun 19 May 2024 05:21:58 +0000
Manifest next update:     Sun 26 May 2024 05:21:58 +0000
Files and hashes:         1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: CGjjA+9+DstkAqm0byLv9BuB0qV44YcMfUU7vWXcokY=)
                          2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: Z9vK6BUEUyhkHCgbEYCQB83vkqUnWnDNuYhGe3OvPYQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
                          rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
        Validity
            Not Before: May 19 05:21:58 2024 GMT
            Not After : May 26 05:21:58 2024 GMT
        Subject: CN=66498c77-8739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:c5:8d:f4:7d:1d:68:65:ca:df:c9:f2:c4:
                    64:14:bc:aa:67:2e:a3:54:7c:b9:6e:24:06:75:ee:
                    fc:1e:db:c2:20:94:f6:8c:12:a2:23:e5:51:65:a2:
                    92:2f:72:83:d5:f2:0a:58:f2:7a:25:55:53:9d:51:
                    be:c4:c7:2d:b4:58:6b:32:f5:2e:5c:6a:42:9b:b0:
                    ff:6c:41:be:de:d0:9a:53:17:3e:82:e3:72:0b:ea:
                    17:ce:98:df:1e:f4:42:2a:ff:1c:c0:ca:a5:6b:b4:
                    cd:12:67:fa:ab:73:91:bd:cf:6c:6a:ec:92:fb:dc:
                    e2:64:b0:17:e0:12:26:7e:38:e2:8b:27:1c:cf:3d:
                    1d:6c:cc:fc:b0:bf:10:43:5a:1d:c3:e4:d9:a6:73:
                    45:69:ae:4e:63:8f:ca:77:3c:8d:fa:a8:c1:0b:c4:
                    b0:4a:14:f8:96:de:22:97:72:0f:3a:f0:02:92:bf:
                    dc:56:7d:8a:67:71:8f:0c:c7:4e:16:5b:99:5f:da:
                    48:55:85:01:f5:13:d5:3d:1b:6c:32:c1:f6:52:02:
                    6a:b6:76:91:01:8b:6e:a6:18:7c:e9:00:c8:6f:a6:
                    dc:73:32:1d:36:89:9c:c4:47:d2:66:1c:24:80:76:
                    1e:ff:3a:dc:49:db:bf:da:2b:a2:30:90:17:ed:4c:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:58:27:71:E5:23:AB:DD:25:25:1E:9F:11:BB:BA:C6:D9:7F:4E
            X509v3 Authority Key Identifier:
                keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:4a:3b:18:24:b4:b9:de:80:ce:7a:af:40:b3:77:ee:f5:
         81:ac:f5:03:77:46:8b:88:21:b0:cf:f8:1a:76:e3:72:48:29:
         16:f3:ba:cf:0c:7d:fd:13:1c:bb:1e:39:a9:b5:58:35:5e:71:
         0f:63:15:17:cd:58:c5:4d:c8:da:03:c0:36:b2:d6:8c:95:20:
         d4:f9:e2:df:7a:bd:f5:7f:47:6f:1f:46:e1:87:8b:ff:a5:04:
         b5:34:f4:c3:5d:60:50:9b:5c:1e:cf:63:73:99:fe:48:b5:34:
         7a:8c:69:4f:b2:d6:ac:40:b8:b3:ec:a9:9f:05:fd:e5:f6:59:
         ec:98:8e:d8:a9:8e:a4:86:8c:b3:43:a4:f0:91:79:b8:e4:09:
         37:6b:a0:af:7a:17:16:7a:c7:4c:71:b2:95:c6:78:c0:ef:2a:
         e5:24:d1:53:28:13:95:1c:7e:f7:82:3e:07:ad:2b:27:ad:e9:
         fe:59:6b:0a:f7:3b:f7:a1:09:fa:34:cf:39:c2:d2:d5:37:44:
         9e:6e:c5:0c:b0:d7:bb:d2:d3:4e:17:b8:6f:a9:5f:a4:59:e2:
         78:3b:24:1f:d1:ad:7c:73:a9:a8:da:f1:c3:30:b0:10:9d:e3:
         34:56:b5:45:dc:e3:71:92:de:85:f7:f5:a1:b5:18:d1:88:07:
         12:8d:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org