Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File:                     fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier:          PySCFWSFq4M2//TiZPYWCiodL+bYhG8kZFc4GxQXKs0=
Subject key identifier:   EB:AE:5D:43:1D:6D:BC:50:13:1F:98:AB:0F:99:77:30:AF:6C:71:B5
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer:       /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial:       0ABB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number:          0AB6
Signing time:             Sat 18 May 2024 15:26:08 +0000
Manifest this update:     Sat 18 May 2024 15:26:08 +0000
Manifest next update:     Sat 25 May 2024 15:26:08 +0000
Files and hashes:         1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: koj94RRNYDNzuadEPU5uyYgGMmUm8pQTzednZDxG1Zs=)
                          2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: tLtn7CFG0HbQ9XWzYKgOAxAROG1jTzb9mpWP5oMuzzI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
        Validity
            Not Before: May 18 15:26:08 2024 GMT
            Not After : May 25 15:26:08 2024 GMT
        Subject: CN=6648c890-6f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:00:3d:fe:31:e7:ba:66:aa:b1:51:5a:eb:
                    29:ee:99:6e:0a:3f:69:2c:17:b0:48:84:a7:cb:e0:
                    17:6b:0e:66:d6:62:ce:73:a3:ff:b9:2a:c9:2e:66:
                    f5:33:5b:15:d1:46:5c:fe:43:ab:c4:85:b6:9d:6a:
                    f8:40:bf:94:0c:b0:60:14:6c:04:9d:63:ce:3c:18:
                    13:d2:2a:7a:d2:a0:8c:76:24:72:15:ad:47:28:dd:
                    a6:c3:0f:d8:7b:7a:df:f5:e3:01:de:8d:1b:f1:bd:
                    a5:b1:81:9a:11:94:cb:b5:bc:60:3c:79:c9:9f:52:
                    13:5f:5b:43:52:62:ef:9b:bc:5c:8d:67:11:bd:62:
                    d8:3f:53:7d:38:36:6d:a6:6f:5d:3d:c5:a9:5e:15:
                    62:67:49:b2:de:ab:f3:8e:c1:57:cf:20:f0:3a:70:
                    f2:22:37:6d:0f:f4:ac:3b:e5:5a:f3:26:a3:7f:11:
                    96:fc:17:a5:c9:09:c0:4a:16:5b:37:c8:f4:45:e5:
                    f2:de:1b:08:e5:8d:93:d2:38:cf:e1:46:32:5c:1e:
                    36:58:00:5a:ce:29:11:aa:bc:33:aa:89:17:8d:6f:
                    d8:e0:fe:be:ae:7b:82:40:59:d4:3a:38:ff:90:2d:
                    b7:26:bd:ec:78:2c:0c:38:88:8c:1b:f9:52:32:88:
                    02:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:5D:43:1D:6D:BC:50:13:1F:98:AB:0F:99:77:30:AF:6C:71:B5
            X509v3 Authority Key Identifier:
                keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:7f:5d:18:5a:b4:66:54:9c:e4:9c:d3:c8:81:2b:28:a4:
         4d:97:7f:d9:96:4a:04:14:5c:a8:16:bf:7b:33:f9:3b:76:44:
         f3:b9:5d:b6:8c:a5:a1:1f:d6:3d:4d:49:b7:dc:0e:b0:80:07:
         7f:ff:3b:d5:bf:54:94:a4:80:4e:60:a9:a5:26:52:13:27:4f:
         77:50:3f:e6:85:28:4a:7b:be:e1:84:37:c8:c5:f8:9b:ff:fa:
         a0:16:57:3f:46:ec:4f:04:a3:3e:26:3d:c3:21:02:a5:dd:d8:
         0d:fc:09:27:37:c2:99:37:52:87:93:e6:98:06:b2:00:10:d6:
         1e:f4:25:b2:d3:8a:d6:7f:d7:60:50:ca:b2:61:9b:23:0c:47:
         50:a0:80:ff:12:49:38:ba:9c:b3:e5:1a:0d:0d:1e:07:b2:a7:
         be:27:c7:c7:f5:e3:b1:91:f1:66:9e:6c:12:1c:1c:ba:e1:d7:
         d7:dc:2c:d0:11:fa:03:35:a0:20:ef:43:e8:ff:76:9d:f7:e7:
         03:19:16:3f:33:db:13:93:91:1e:d9:5f:52:a5:b6:47:aa:4d:
         28:d5:12:69:b7:f9:cb:2f:80:a6:01:51:74:69:12:7c:c7:22:
         c8:ef:0a:96:0c:cf:91:b0:16:c8:39:ad:6b:79:08:ff:66:0e:
         81:c7:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:20:15 2024 by rpki-client on console-fra.rpki-client.org