Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File:                     vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier:          p9t5hg7nTxaxMds1gAUjpaD582ulyuu6cptTwMU8ZXw=
Subject key identifier:   92:CF:02:71:7B:42:3A:04:6F:47:C7:B8:0C:50:77:82:67:AB:8D:52
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number:          4A
Signing time:             Sun 19 May 2024 08:04:22 +0000
Manifest this update:     Sun 19 May 2024 08:04:21 +0000
Manifest next update:     Sun 26 May 2024 08:04:21 +0000
Files and hashes:         1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: 0CbnGux0sU5eRp0NqpjSoQGWQKZm+dBYFoKkFQxmAPQ=)
                          2: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (hash: ahyXQ4Lm+79APPoe5vKdDvkPQen1I/FoTAFBCvMh1/Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: May 19 08:04:21 2024 GMT
            Not After : May 26 08:04:21 2024 GMT
        Subject: CN=6649b286-fa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:da:63:3d:f6:51:5a:e9:66:fb:20:a8:f1:
                    ff:e9:7a:e0:cc:60:2d:19:ad:6a:8c:2b:ac:7b:7b:
                    60:b9:48:70:88:07:8e:f8:e9:e7:e1:71:b2:ed:3a:
                    f6:26:2d:ba:4f:3e:7f:17:9f:f8:db:2c:9e:cc:5d:
                    a8:b4:ea:79:26:ee:88:65:fe:35:1d:cf:84:8d:7b:
                    7c:97:50:46:79:2a:a9:cc:1d:98:6a:4a:8e:fd:17:
                    a6:f0:91:3a:97:40:55:14:ec:5c:8c:7a:d4:f8:1d:
                    a2:9e:f7:c9:63:46:1b:fe:d6:7e:22:ba:53:ab:06:
                    c3:1c:3f:63:2c:87:7f:53:6f:45:56:8f:f5:cc:ce:
                    cc:10:8d:5a:9b:44:46:75:31:95:a3:f3:b2:f8:3d:
                    ec:b4:cf:ee:10:f9:23:58:58:29:d7:fb:14:5c:6c:
                    a6:d6:73:63:6d:4d:6f:60:0c:a8:16:1e:eb:3a:74:
                    20:ce:e9:66:96:1b:92:14:f5:46:5c:b7:f0:74:07:
                    cb:21:e8:b3:65:65:8a:94:45:4b:76:e8:1d:9b:b4:
                    96:2c:5b:5b:d6:48:4a:8c:4c:74:59:aa:b2:ca:e2:
                    ec:a7:e0:7f:06:d0:21:75:ba:80:c7:cf:e3:18:2d:
                    66:58:8c:10:00:14:39:95:60:c9:fd:e2:1b:f8:7a:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:02:71:7B:42:3A:04:6F:47:C7:B8:0C:50:77:82:67:AB:8D:52
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:39:40:a0:29:8e:0a:8a:89:97:84:43:2e:0f:12:87:f3:7f:
         af:0f:0f:60:83:a8:53:b5:54:7d:46:c1:87:f8:af:e0:48:77:
         65:d5:9d:5c:38:9f:3a:dc:3d:51:cf:07:08:88:e1:87:02:b0:
         f6:e0:66:0a:66:bb:30:02:bb:c5:8e:b0:50:1b:2f:fd:49:93:
         66:b4:e9:f1:b5:0d:af:ce:a7:92:3d:04:0b:be:85:f8:ba:03:
         74:b8:87:c3:7f:3d:b6:f2:d1:51:7d:46:bc:4f:38:a2:e2:5f:
         b8:dd:66:51:4a:c3:85:1a:55:d4:d3:70:aa:84:a8:7c:ca:f8:
         37:44:70:6c:17:0b:fd:07:e2:d2:1f:ff:98:20:8b:46:fd:65:
         93:dc:2c:78:50:20:ea:d8:fc:b9:e0:08:e6:d3:f9:5f:24:8d:
         9d:ef:1f:5a:a5:ba:59:49:f9:73:e2:52:7f:4d:fe:26:bb:88:
         03:e1:06:e4:89:4e:cd:08:4d:20:9b:02:68:45:db:e3:d5:cd:
         1d:ae:f0:51:06:eb:40:21:ae:d2:ed:01:b0:3a:9b:74:28:1c:
         0b:69:9c:fb:ea:67:b6:7b:7b:8b:dd:28:2e:d1:ba:a5:a4:8c:
         a8:96:97:03:da:50:0f:f7:57:e2:87:6e:25:c9:8b:69:3d:25:
         74:25:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org