Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          BjSnpnbgxU7wLTFbT6MguHJ+Oxguddfmqoye/X868wE=
Subject key identifier:   16:6E:46:EA:DD:CC:A5:2A:85:76:93:61:66:F5:D5:2D:8B:D5:6B:A3
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       06FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          06FB
Signing time:             Sat 18 May 2024 22:42:05 +0000
Manifest this update:     Sat 18 May 2024 22:42:05 +0000
Manifest next update:     Sat 25 May 2024 22:42:05 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: FBRrSt2V/AELx41CLZL6V0e+n8FtrKlGhkfZ//Ctf1M=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: 8MgpGs6pFSy2suyeB1ZadCTYdWREgBlO6Wy9MrA4OQs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: May 18 22:42:05 2024 GMT
            Not After : May 25 22:42:05 2024 GMT
        Subject: CN=66492ebd-e712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:44:89:47:8c:20:e2:91:3c:8c:37:17:9c:
                    5e:b2:2b:51:9f:ab:c6:37:20:8f:72:82:f8:18:14:
                    b3:b5:6f:48:e3:2b:4a:38:71:7c:4a:1e:c8:dd:16:
                    63:75:5a:a7:03:fc:1a:26:37:3d:f9:49:44:b2:74:
                    e4:87:8e:e2:f8:1e:f6:a5:90:50:eb:c0:d7:45:6f:
                    b5:15:a5:29:5c:cd:99:44:5c:8e:a6:32:54:40:4a:
                    b0:2e:b4:c7:fe:b3:14:bf:5d:76:94:0d:38:cd:82:
                    51:ea:08:ad:ac:34:82:42:e8:0f:2f:a9:38:ae:ad:
                    95:50:0d:7f:a8:6d:22:e4:25:95:68:19:9d:07:cc:
                    f7:b4:f9:74:be:ef:66:f5:c1:53:b2:8b:e8:c5:48:
                    be:d0:3a:7d:18:1e:37:4f:c0:d4:bd:c4:d7:88:16:
                    d1:dc:80:a9:01:d9:7c:a9:82:03:0f:fe:22:b5:f9:
                    cb:b0:8f:95:27:3f:b3:9c:e4:71:f3:78:67:2b:1a:
                    f6:85:8f:9c:26:68:5a:8b:5b:af:ac:e7:7c:52:5b:
                    9e:ff:80:88:b3:18:9b:df:fa:0a:4f:b2:4a:4f:42:
                    06:ce:b7:f3:28:67:61:8c:d4:d5:2c:7d:10:b0:19:
                    20:80:bf:2c:2c:fe:7f:dd:50:34:0d:9e:a9:ce:47:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:46:EA:DD:CC:A5:2A:85:76:93:61:66:F5:D5:2D:8B:D5:6B:A3
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0d:63:e4:71:e5:e5:c2:1c:ee:04:88:20:a8:26:66:e3:d7:
         d6:e1:28:cf:68:3f:d6:41:52:c2:a9:f6:9a:28:5a:85:f1:bd:
         bd:1c:ea:e0:ab:81:4c:6d:0c:95:ef:ea:04:a5:65:36:84:49:
         4d:c0:d0:24:c4:7e:6f:44:6b:ca:7f:51:13:a0:fc:61:6c:7e:
         52:f5:2a:7e:05:43:18:9c:da:86:eb:0e:76:af:1a:b9:0c:94:
         d5:ba:c8:b9:5a:6a:de:a7:59:7a:ca:39:ec:7d:45:4b:b9:dd:
         bd:30:a7:f6:dc:14:a5:c6:15:7d:94:64:b0:c7:11:13:f2:e8:
         6d:f9:77:98:22:4c:cb:1e:db:eb:10:dd:de:f0:1e:44:3e:b6:
         f7:b5:e6:98:91:3f:5f:f3:ce:38:f2:4d:6c:14:79:f0:1f:4d:
         cf:ca:6d:52:30:1f:f2:80:f4:ce:a2:17:7a:18:6c:a5:19:1b:
         b8:4b:1a:e7:35:e6:fa:71:a4:84:39:d6:ef:41:61:fc:66:79:
         0e:ee:dc:3e:34:f7:40:fe:5e:5e:f8:ce:03:40:d2:52:cd:18:
         28:b5:89:96:f5:79:02:04:27:06:ad:98:fe:bd:88:24:65:c6:
         dd:1c:3b:a1:34:fd:84:99:b5:3e:8a:d3:f2:08:09:05:61:c4:
         b3:e6:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org