Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          wKAoGmsfWl6e42v1FLK4bKjERoudrsVDbNgttqBo0aM=
Subject key identifier:   C3:99:E9:93:25:60:5F:74:A8:36:56:45:B2:44:07:C7:C3:36:23:FB
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          80
Signing time:             Sun 19 May 2024 07:10:14 +0000
Manifest this update:     Sun 19 May 2024 07:10:14 +0000
Manifest next update:     Sun 26 May 2024 07:10:14 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: oLWUjxgBhfPNCHe4NNboztclzs2KQciHrB5GvMBHdFI=)
                          2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 4rFkV1Ss47WjeMIHMctCefrOBDpAGnl/mcykTRbul7Q=)
                          3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: v32XhgPxoP5LrsTN7ytqd7Ac70YmOOk9w7cVgGhw8iw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: May 19 07:10:14 2024 GMT
            Not After : May 26 07:10:14 2024 GMT
        Subject: CN=6649a5d6-f503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:b9:d8:a4:15:4a:f3:57:b0:14:e9:b9:f1:
                    13:2c:7d:04:32:b1:13:9b:77:e4:f0:a9:bb:6c:ec:
                    96:d0:2f:74:2e:1a:7f:c0:26:5e:a1:13:65:3d:b9:
                    5d:bf:78:0e:11:f6:aa:81:fb:45:ba:fa:e2:a4:33:
                    b6:71:2a:ca:96:8e:8b:24:b9:1f:82:9d:bb:0a:99:
                    a2:4c:51:3f:99:57:13:35:32:04:2f:72:1d:82:66:
                    0a:2f:de:e3:13:06:ce:63:c9:38:e9:04:fe:17:2f:
                    4b:25:c4:54:e7:f1:3a:69:0f:a5:9f:09:8f:83:af:
                    36:73:99:cf:1d:cc:9d:05:1a:19:79:7a:cf:e4:85:
                    c8:a8:5f:12:06:ed:97:a5:ec:09:05:14:1f:a0:16:
                    14:25:fd:36:ac:a9:a6:0a:2c:d0:c4:e0:a9:72:c1:
                    6a:9c:aa:ff:23:74:d4:a8:bb:70:2e:fe:55:4f:9e:
                    f6:e9:1f:26:1d:28:a0:85:9e:b9:77:bc:97:b8:90:
                    96:87:a1:b5:5a:81:46:7f:c4:aa:5a:ea:63:69:bf:
                    22:3c:fd:ae:86:66:5f:da:a0:cb:84:bf:80:6c:73:
                    17:79:41:cb:81:f6:c6:f2:1e:0e:b9:18:37:fd:3c:
                    ab:c8:46:76:32:27:c1:a5:9d:cf:18:3f:bc:af:6b:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:E9:93:25:60:5F:74:A8:36:56:45:B2:44:07:C7:C3:36:23:FB
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:75:07:3d:ec:1f:60:ae:eb:3f:53:1b:ca:9d:db:8b:38:
         83:8a:6c:d9:8e:f5:d3:1c:47:36:c4:c0:58:eb:47:d3:72:a6:
         2c:ac:f4:04:30:18:9e:57:f0:b4:d0:6b:6f:2c:59:35:f0:b9:
         83:59:f9:0b:eb:93:6b:0d:4b:24:03:25:0f:eb:77:5c:12:69:
         7e:4d:1c:77:54:c9:39:31:27:f8:d3:24:99:8a:bc:2c:77:47:
         db:2b:c6:e6:6f:15:7c:69:d0:07:ac:d3:e0:db:01:74:18:9d:
         12:88:83:31:7f:1c:b9:92:6e:30:5e:05:97:56:97:86:ee:b3:
         2b:aa:08:88:d5:21:95:0f:7a:03:3d:09:b6:83:49:b7:91:bc:
         16:bd:55:2d:42:90:38:45:66:23:51:89:7f:9d:50:99:0a:83:
         0a:d3:bc:21:59:cd:46:34:24:57:49:f2:a3:9d:d4:4e:c7:8b:
         c5:47:ab:ee:63:bf:eb:cf:ca:09:61:ea:2d:6a:5d:45:62:7e:
         29:fc:1f:ed:d6:52:c9:f5:69:a2:11:0d:d8:32:a0:e5:da:ea:
         59:ef:16:93:cd:82:6f:aa:97:93:6b:48:cf:3c:b9:72:c1:4c:
         1f:c5:d2:5c:15:d8:92:39:c2:42:17:9c:4d:a8:fe:99:f6:a1:
         c9:72:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org