Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File:                     kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier:          Bu4KCEgB5q2ofafQnLFXxyd9+GIjpRrL1DDLCtKF97M=
Subject key identifier:   A2:E0:7E:38:4A:A0:9E:8E:7B:D1:20:93:E8:34:34:EF:41:2C:87:D3
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer:       /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number:          091E
Signing time:             Sat 18 May 2024 16:34:26 +0000
Manifest this update:     Sat 18 May 2024 16:34:26 +0000
Manifest next update:     Sat 25 May 2024 16:34:26 +0000
Files and hashes:         1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: L/R84oHFLFUxIjsDXqsaAORHdANshyXG0iy17Z6ccwk=)
                          2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: wgLTu8d9qSHmjfPggvNhZ+SdjgeLbSFjq9VQ23+3HlM=)
                          3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: j8mK/suJ/TUYMAqiiAozAOPU1XUKmajmZ+Hv6gWzSHM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
        Validity
            Not Before: May 18 16:34:26 2024 GMT
            Not After : May 25 16:34:26 2024 GMT
        Subject: CN=6648d892-884c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:84:f8:39:20:01:4e:c4:13:27:d5:7b:07:
                    43:6d:8b:39:5b:c1:7a:0e:f6:3b:39:47:ff:91:7b:
                    b7:99:a4:4d:58:47:fd:a6:a1:a3:5d:98:10:8a:fc:
                    b3:9d:cf:77:15:08:e0:dd:da:40:9b:ab:02:bc:cf:
                    da:02:22:f9:87:12:0a:46:31:c2:5b:3d:8c:0e:dd:
                    35:de:80:99:80:16:78:4e:86:21:82:fa:2b:e8:8f:
                    db:6a:1e:11:c3:15:02:11:0e:f2:0a:30:98:69:f4:
                    f7:e6:3a:40:e6:1e:c6:7c:b4:16:9f:e4:87:b0:d3:
                    c2:23:c1:d6:f5:68:0a:91:98:59:d8:e8:3d:24:f9:
                    01:b1:d3:14:7a:34:02:3a:ed:6c:af:cd:b1:df:28:
                    75:11:74:1e:a8:fb:33:03:d3:54:a6:0e:da:b1:9d:
                    20:f2:8d:90:89:cf:27:1a:d4:40:24:d8:65:a4:a5:
                    63:64:6d:c2:73:46:dc:d3:d6:98:de:12:6a:56:fd:
                    35:31:ee:9b:bf:7f:62:9a:84:13:06:ab:e3:a1:dd:
                    02:86:85:88:4d:53:56:76:51:e4:f5:fa:d5:40:02:
                    5f:12:d2:85:02:07:c5:a5:ee:ad:2a:e1:f7:50:8f:
                    c0:83:d5:b4:20:dd:73:74:db:1c:c2:1f:0d:db:70:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:7E:38:4A:A0:9E:8E:7B:D1:20:93:E8:34:34:EF:41:2C:87:D3
            X509v3 Authority Key Identifier:
                keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:96:f6:b7:88:f9:78:52:1b:2a:91:a9:a4:67:da:ad:c5:
         63:d0:63:b0:b8:41:82:66:1f:73:9f:a4:b0:a8:a3:90:af:95:
         09:64:c1:e4:b5:9d:85:f4:ca:ae:77:2a:3e:b8:66:cb:95:82:
         7b:b0:2e:53:3c:cb:d0:6a:bb:b1:2f:d6:cf:0c:d1:3c:af:0c:
         27:1c:fc:30:aa:ba:3d:ef:76:42:0d:dd:40:46:b6:02:5d:cc:
         f6:ab:f8:b9:e1:d4:aa:87:48:9c:be:33:19:19:3c:52:cb:5e:
         1c:69:e7:f0:da:b7:b8:61:83:f8:91:b2:59:1a:74:29:cb:22:
         b9:a0:69:dd:20:c6:1c:34:aa:e7:cb:e6:44:d0:0a:60:a0:f5:
         00:e2:35:9c:30:27:19:96:30:fe:a8:9e:4d:31:ce:f3:d0:2f:
         08:cc:c1:75:2b:f7:c6:f1:48:2f:93:f5:1c:ca:97:2d:7e:51:
         32:63:e1:3e:f8:d1:03:e3:27:b9:e8:f5:30:50:54:7e:41:2c:
         b9:63:5c:89:fe:06:2c:76:e9:78:59:a2:b7:5e:e5:b7:bb:35:
         da:0b:5d:e1:1e:0a:e3:c8:fd:13:3c:12:c2:ec:5d:db:ec:a2:
         23:6a:8a:57:b2:c5:bb:c0:22:4e:8b:e0:d8:aa:e7:3b:4c:f6:
         bf:c0:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org