Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          wDHgHgPKdsZ2KqSH878YDe1NwEZ+VibE6k1klqisdYs=
Subject key identifier:   05:89:DB:E3:1B:69:4B:48:C0:01:5F:44:44:92:CD:6C:19:3B:3F:8C
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          90
Signing time:             Sat 11 May 2024 07:26:53 +0000
Manifest this update:     Sat 11 May 2024 07:26:52 +0000
Manifest next update:     Sat 18 May 2024 07:26:52 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: 1E+OfGBJQ7LCHAb3+ylyO6Jz02OiVGSJaJZ7F6Rux/g=)
                          2: 540897D485F811EEBCB6F74CC4F9AE02.roa (hash: GQXHpJf/jIXJjrdYbV52KbbcXCnIc+gfwhor2GpxHw0=)
                          3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: YQrHyToNDTMgZ4Ynw3Of1UXdMOnTPncsIuQuD3vUstg=)
                          4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: Dzc4D2svD4HZgKffca9S+m/lbPDWtOze7CoWdAxSe58=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: May 11 07:26:52 2024 GMT
            Not After : May 18 07:26:52 2024 GMT
        Subject: CN=663f1dbc-a94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:1c:9b:a3:82:b3:cc:0a:13:76:e0:8e:e2:
                    4f:7c:33:a6:8a:b7:2b:05:f4:06:36:56:fe:d2:2a:
                    34:98:8f:74:f3:bd:4c:84:f5:13:70:ea:67:fb:24:
                    8b:f7:29:1b:d9:be:4a:7a:e8:2f:8e:f1:95:f3:c6:
                    37:8a:76:26:56:cb:24:12:eb:06:e5:5c:87:75:36:
                    0e:ca:2f:57:30:e2:cd:91:a4:34:62:3a:f6:98:b9:
                    74:35:fa:0e:0e:41:0d:59:c6:cf:7b:b4:96:91:01:
                    f2:83:52:e5:3f:ed:59:a9:e3:46:4b:82:70:01:c7:
                    0a:5e:02:84:3e:42:1c:59:b8:a8:92:d8:24:84:54:
                    e7:54:9a:cf:4b:fa:09:0c:a0:32:12:a7:d7:70:61:
                    31:06:d8:a9:63:52:54:71:ed:98:8b:a6:c4:f5:17:
                    27:42:22:16:25:41:ff:1b:8c:7c:96:17:8e:cf:e3:
                    8a:23:b0:e1:ed:3b:05:f6:15:be:34:36:97:9f:0c:
                    61:14:ab:47:a7:34:cf:f5:9b:64:2d:40:e8:d7:c6:
                    f3:9d:cd:51:27:ad:92:e1:14:c7:c6:76:f0:ff:f8:
                    51:69:d9:cc:8a:14:28:61:26:08:9b:92:3b:70:a4:
                    ad:9f:cb:1d:d4:6b:2d:bb:00:70:c7:09:56:fd:71:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:89:DB:E3:1B:69:4B:48:C0:01:5F:44:44:92:CD:6C:19:3B:3F:8C
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:ab:54:97:9d:b7:12:0d:0b:92:67:ba:26:ec:d9:cf:ff:
         75:b4:d6:4b:6c:8c:b2:04:4a:79:39:bf:6b:1e:55:39:42:94:
         38:45:90:93:92:35:ac:b6:d9:72:2e:07:36:67:88:43:a7:c9:
         de:58:74:ca:20:c2:69:ce:08:62:70:e8:9b:e7:6c:75:3d:d1:
         05:57:a8:36:98:11:5b:cd:e0:74:ef:6f:80:1d:f8:cf:a6:64:
         e5:b8:83:cc:c1:cf:dd:b3:84:f5:36:fb:9d:c8:52:90:3b:82:
         17:fe:6a:d7:ce:04:fc:85:39:3b:a1:c9:4d:23:4e:c6:71:c7:
         07:eb:a7:17:d3:9a:cc:f6:66:01:e4:a3:0e:ef:92:1a:09:d8:
         da:da:21:04:07:28:7e:97:58:51:0d:0d:e3:6b:44:77:92:92:
         d7:a6:9f:98:1f:30:d1:4c:20:14:e0:ec:d5:01:7c:60:f9:ae:
         ba:5a:f0:6b:71:25:0a:2e:72:a7:07:3f:f5:5e:50:5e:c8:ab:
         1b:54:7c:d8:8d:c1:ce:7f:91:2f:bf:9d:b7:d1:db:51:a4:9b:
         50:a1:a4:50:49:32:e5:93:9a:a2:07:c7:96:7b:ce:db:bf:a7:
         69:78:f4:4d:85:1e:e4:30:aa:8f:98:88:45:79:e5:03:6f:90:
         de:a4:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:03:42 2024 by rpki-client on console-fra.rpki-client.org