Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File:                     dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier:          VMk6NpekNah/+z9o/2WfjYAcmwmEX1HWXfkoP8bfUBw=
Subject key identifier:   06:39:4D:3A:AB:58:57:32:66:EB:ED:9D:27:C8:A7:34:5A:D5:0C:C3
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer:       /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number:          013C
Signing time:             Sun 19 May 2024 04:57:05 +0000
Manifest this update:     Sun 19 May 2024 04:57:05 +0000
Manifest next update:     Sun 26 May 2024 04:57:05 +0000
Files and hashes:         1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: kVizhIh5/v2U67QUUCcX74LfLtbZ4xtFIyQjG3reeZs=)
                          2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: m+UggDiKnlsr7oDYe2JvPaLjrumOSk4OCYStSoz32JE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
        Validity
            Not Before: May 19 04:57:05 2024 GMT
            Not After : May 26 04:57:05 2024 GMT
        Subject: CN=664986a1-18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:9e:2f:6f:01:8d:cd:88:5e:5f:c5:ab:bb:
                    85:7f:9e:86:4c:d6:ea:a3:67:67:e9:17:9e:85:06:
                    f5:30:3b:d5:f5:f3:1d:26:0e:b6:be:65:cb:12:85:
                    9f:21:50:81:be:fb:97:c4:eb:6f:8d:60:5f:3e:e8:
                    31:2a:b9:cd:66:a4:dd:b0:c5:f0:b3:25:e7:4d:29:
                    2a:ae:e9:c5:59:fa:69:8c:b0:0b:ea:9a:aa:1c:91:
                    e7:96:0f:83:31:be:b6:8f:08:39:f9:3c:8d:ed:6d:
                    7b:df:d2:f3:94:ed:be:c6:f6:86:26:c3:5b:05:15:
                    6f:ee:5b:03:6a:2b:36:91:0b:dc:ed:14:53:0e:c3:
                    5b:cc:84:98:93:67:f3:c8:e9:b7:6d:de:d2:0d:ca:
                    1d:f0:a1:62:e1:28:2a:67:77:f5:d6:dc:ce:52:76:
                    6b:e8:bc:05:75:87:c8:71:d2:2c:7c:8b:3b:4e:7b:
                    77:4a:75:61:0f:18:b2:14:74:b8:51:92:95:56:14:
                    73:f8:58:bf:15:2d:13:1a:61:62:6b:29:14:f6:57:
                    e6:fd:32:99:9f:2a:2e:9f:de:42:ab:27:79:80:e5:
                    2b:30:58:59:dd:3e:4c:49:64:0b:24:25:11:32:b4:
                    82:47:7c:fb:3d:76:45:75:5c:84:95:04:63:15:a6:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:4D:3A:AB:58:57:32:66:EB:ED:9D:27:C8:A7:34:5A:D5:0C:C3
            X509v3 Authority Key Identifier:
                keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:54:b2:65:99:4c:3c:37:e4:e9:68:d4:ad:1a:d0:89:a2:0b:
         6e:43:da:77:97:6c:02:ad:75:9a:a3:f1:81:34:00:24:38:a8:
         1e:ad:b8:5c:5b:d6:78:e6:7b:90:f1:e9:07:f2:58:b2:de:0f:
         b5:9d:c3:64:50:a5:84:c9:95:ee:ab:85:8d:ce:a1:ce:25:2f:
         80:e2:6a:3a:2b:7b:0b:56:f4:e2:48:35:b1:9e:3c:f2:03:9d:
         d0:59:7f:41:22:aa:ba:38:3c:08:59:ae:70:da:0b:3c:47:8a:
         82:e3:9c:3f:dc:d4:bc:cc:0f:9c:cd:9b:e7:a7:eb:1d:8b:8d:
         c0:38:66:1d:59:a3:58:19:46:eb:9d:33:e2:9a:e5:0f:b1:70:
         82:e5:ae:be:68:06:f8:e9:db:d5:86:de:ae:86:09:01:07:fe:
         63:7b:92:0b:10:13:66:f8:59:cf:30:a1:7f:7c:96:38:1e:89:
         67:f9:dd:82:ab:d4:2d:f8:43:5f:18:e4:71:5c:22:20:e1:a2:
         32:fd:00:6a:51:6e:7b:e8:b7:c9:be:fb:37:1e:c4:cd:d4:f4:
         33:d9:98:06:bc:e6:57:5a:24:14:ff:28:fd:ec:ef:e7:ee:9b:
         5c:29:64:5b:23:55:17:a1:40:61:6f:ff:92:9d:66:3c:dc:b7:
         ec:6d:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org