Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
File:                     ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json)
Hash identifier:          wzFrOes++klfC2Bl3x7clJkhu8byfod8Zav7Igd6ky4=
Subject key identifier:   13:54:6B:1C:27:55:0F:92:B3:81:4F:80:DE:C9:74:29:49:91:51:D0
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Certificate issuer:       /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
Manifest number:          022A
Signing time:             Sun 19 May 2024 04:03:35 +0000
Manifest this update:     Sun 19 May 2024 04:03:34 +0000
Manifest next update:     Sun 26 May 2024 04:03:34 +0000
Files and hashes:         1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: 5VkmE3Wlf31yZ7OJGVuHnKKqiopPHoD8qBS5WjTDKFE=)
                          2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: szo/ZA8KpVIOHATJaoTCrdRxhc+wJk6tYTX7mBsve/Q=)
                          3: 0E0E73A8EBFB11ED8184D438C4F9AE02.roa (hash: Nptpwy8aBE2O4nlz0N7k/Ll0b7PMoohVrgBQiRsW9tk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
        Validity
            Not Before: May 19 04:03:34 2024 GMT
            Not After : May 26 04:03:34 2024 GMT
        Subject: CN=66497a17-d4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:bb:8f:1a:ea:fd:b8:47:ed:bf:54:50:d2:
                    22:5a:42:7f:ce:d9:57:0d:40:62:c3:ce:f8:43:ad:
                    82:38:b4:50:57:ab:ea:88:57:15:5b:c8:b3:68:5d:
                    99:56:c4:94:fb:d9:2b:cc:8f:b6:5d:0c:c7:cd:b7:
                    c2:60:1e:d0:6e:87:16:5d:c9:50:14:af:5f:28:3c:
                    e5:14:36:b0:23:e4:ee:c9:cd:d5:16:7d:de:39:09:
                    13:78:a6:55:16:35:32:bb:f0:db:76:26:06:ae:09:
                    54:be:41:49:1d:60:ca:6e:08:a9:1c:7a:80:b5:14:
                    05:93:58:70:8c:18:a1:1b:43:d8:7d:0b:98:47:c0:
                    d2:f4:1a:02:02:13:78:b1:e5:9a:bf:e2:e3:e4:f5:
                    86:88:15:3e:12:bc:21:d9:b8:80:76:63:2e:87:5b:
                    e3:b5:78:92:1b:96:5e:3c:65:69:b2:e0:fd:e2:22:
                    b8:41:eb:4b:61:5c:2d:f3:fa:ff:9c:cb:28:d6:c6:
                    48:11:a7:73:24:44:4e:11:4c:7c:f8:06:fe:35:63:
                    72:81:32:1c:f8:bb:98:d2:82:86:c4:c3:57:93:17:
                    78:91:40:87:e6:57:d2:33:aa:42:ed:02:f3:45:95:
                    17:6f:b6:6b:41:25:b2:b4:fd:35:5e:27:ca:9e:5a:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:54:6B:1C:27:55:0F:92:B3:81:4F:80:DE:C9:74:29:49:91:51:D0
            X509v3 Authority Key Identifier:
                keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:1d:8a:42:e6:74:3d:12:60:0f:0f:3b:e5:c7:87:19:bb:
         b4:5f:8d:96:a4:73:3f:f0:fe:22:4b:bd:b3:b0:95:da:8f:78:
         c4:93:6e:70:28:62:c8:0c:55:43:22:5a:e7:74:8b:d9:98:7b:
         32:06:1d:8c:fb:c3:91:5a:95:5b:0a:cf:a0:95:35:bf:09:2b:
         a4:cf:90:4b:5a:bc:6e:b7:27:f2:86:47:40:f5:6e:2a:4b:d0:
         61:2a:ee:93:46:c8:9d:ad:b9:df:38:60:c1:79:81:73:83:85:
         26:74:22:41:94:ff:2c:81:fb:70:26:9b:54:03:9e:4e:a6:95:
         b3:7e:a0:c3:6c:e8:90:e4:7e:1b:74:ea:bf:09:65:35:dc:20:
         ff:42:d5:b5:28:55:17:2f:75:81:f8:3c:8a:ce:29:86:f5:65:
         b8:2f:78:84:d8:bc:4a:13:64:a7:03:ae:75:af:92:f7:fd:e6:
         0c:e4:f2:1a:dc:fb:63:4b:51:39:3d:f1:10:db:bd:42:4c:0e:
         4a:a7:a4:64:df:77:6a:df:3d:f2:5c:f4:7c:ec:94:8f:cc:c9:
         57:21:d0:e1:1e:4b:48:52:ad:36:f4:aa:7a:3e:d8:df:33:d8:
         9f:8c:22:e1:ea:fd:63:13:b4:f6:f6:c6:5b:72:eb:e8:68:9d:
         bf:9d:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org