Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
File:                     keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json)
Hash identifier:          0AuqrKBGZMvizPtEGlCqYA3nOEfUYqvkM1U9ku6dIcM=
Subject key identifier:   EC:93:6E:46:0B:06:40:3D:CF:C2:95:EE:58:02:1F:DE:47:94:0C:64
Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF
Certificate issuer:       /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
Certificate serial:       045A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
Manifest number:          0455
Signing time:             Sun 19 May 2024 01:52:56 +0000
Manifest this update:     Sun 19 May 2024 01:52:55 +0000
Manifest next update:     Sun 26 May 2024 01:52:55 +0000
Files and hashes:         1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: +i7HmMqSUe7+YkJ3P3GQ1ujzFTIY+vFciHFwTAsX9h8=)
                          2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: CS6F8Mjrr/igLIk1h8UByZf+5cetq2hYhKfKiknacaU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl
                          rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
        Validity
            Not Before: May 19 01:52:55 2024 GMT
            Not After : May 26 01:52:55 2024 GMT
        Subject: CN=66495b78-530a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:87:22:04:d3:eb:2b:72:2d:ea:b2:2b:77:
                    a1:2f:11:a5:58:6f:98:b8:27:4f:e1:69:d7:91:5b:
                    c5:c3:87:0a:af:5d:07:a9:2c:57:72:8b:8d:66:f7:
                    41:9a:5e:d2:8f:79:ca:fb:15:bb:af:75:50:4f:6f:
                    5b:1f:2b:fe:ab:cd:53:bb:67:f5:47:60:79:d2:92:
                    66:34:45:55:ab:bf:46:4e:b5:b8:76:ec:2b:89:3f:
                    6e:39:11:e6:e3:9c:fb:3d:22:27:99:5c:1e:05:7b:
                    04:3f:01:a8:7e:d2:64:c6:2c:ec:af:27:1b:aa:44:
                    d8:87:b3:76:ea:8f:09:e7:aa:77:dc:db:88:39:66:
                    52:e6:7a:cb:c9:f6:c3:b5:4f:72:c9:7f:77:74:6f:
                    ac:60:06:39:f3:3b:2e:76:75:aa:51:fe:a0:10:02:
                    c8:f2:f0:d5:5b:5a:19:a2:4b:be:25:d1:81:96:91:
                    58:a6:c4:46:b1:d5:57:d4:4c:26:f2:55:bd:51:26:
                    83:e1:4b:c3:f0:a6:a4:0f:08:11:97:5e:f7:2c:ab:
                    e7:17:e9:2c:77:54:64:ed:72:52:19:59:93:de:c8:
                    21:f1:9c:43:38:4f:14:17:c1:f5:5f:af:f2:93:c9:
                    4e:a7:b3:24:da:37:cf:f8:de:09:6d:7b:48:af:81:
                    39:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:93:6E:46:0B:06:40:3D:CF:C2:95:EE:58:02:1F:DE:47:94:0C:64
            X509v3 Authority Key Identifier:
                keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:12:d5:e7:f6:38:5e:b7:05:87:e5:11:fd:13:bc:bb:80:27:
         ca:c4:a8:05:36:20:b4:96:f5:48:3c:e4:61:30:4f:7a:58:9f:
         ec:92:0a:b7:c0:87:e9:40:1c:77:76:19:3c:6e:06:99:b9:cb:
         61:aa:6c:4a:9f:77:4a:1e:f9:bd:64:4c:ab:a7:b0:d6:fc:29:
         a9:7d:a8:8b:48:c2:ca:c8:81:62:84:b4:6b:e1:34:cd:3d:d5:
         22:9e:34:8b:63:2c:d9:0f:60:01:95:75:39:46:55:e4:cf:7a:
         ef:9a:fe:e7:4a:22:29:78:d3:1f:c7:70:1a:39:58:05:e9:a2:
         46:08:47:34:48:0c:81:8b:13:13:a7:61:79:3f:0e:94:f2:70:
         fd:9c:09:20:f4:bf:f5:43:32:71:14:35:11:50:e7:d9:c2:82:
         cb:bd:ef:d4:5e:0b:a1:1d:35:37:88:dc:ab:22:aa:c5:54:60:
         9d:2d:52:cc:26:96:94:60:ba:cb:f8:3e:89:d9:22:93:71:05:
         a8:6d:17:72:39:3f:0b:52:8a:63:30:ab:dd:a9:5a:5e:d4:19:
         79:62:ff:0d:37:c3:3d:f6:64:60:e2:06:ec:2a:2e:a7:1a:78:
         64:6b:f1:4d:90:7c:1c:f4:04:ed:23:f0:1e:c4:e9:a5:5f:d6:
         b8:ad:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org