Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File:                     aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier:          8PT8gv6NlVIx/22y/pe0LTpP06mkH8grZsC+o1X7Cs8=
Subject key identifier:   01:51:0E:9F:A2:DC:94:D2:79:5A:4E:1A:C8:1F:7A:1C:6E:47:44:04
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer:       /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial:       090C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number:          0907
Signing time:             Sat 18 May 2024 21:14:27 +0000
Manifest this update:     Sat 18 May 2024 21:14:26 +0000
Manifest next update:     Sat 25 May 2024 21:14:26 +0000
Files and hashes:         1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: 3z57rHUmrF1KQ/dHVIW4wd++WIvkBhjk1n3EL7P4qxE=)
                          2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
                          rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
        Validity
            Not Before: May 18 21:14:26 2024 GMT
            Not After : May 25 21:14:26 2024 GMT
        Subject: CN=66491a32-a63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:80:31:6c:4e:28:40:6b:f3:bd:27:6a:59:
                    22:1d:c1:34:d9:13:23:9f:79:29:5c:08:a6:86:73:
                    09:c0:b3:af:ce:c3:a7:44:a6:a0:ec:4b:58:e0:29:
                    8f:01:2b:e2:fd:90:4a:17:3f:17:08:de:a1:d2:fe:
                    50:fc:6a:f9:20:c5:38:66:17:a4:3d:66:2e:f7:0e:
                    e7:d4:e3:8d:98:5c:53:de:f1:5f:99:8d:cb:ee:5d:
                    db:8a:58:64:3a:1f:98:c6:c6:d7:93:be:e2:54:c9:
                    26:40:39:d9:f4:06:ba:f1:c9:95:ce:ad:a4:5e:6e:
                    bb:98:c3:46:aa:de:3d:96:d8:23:a1:c3:96:21:01:
                    16:d8:ed:36:94:e8:28:62:75:2c:3d:09:4c:13:3f:
                    14:b9:1b:c4:99:e9:73:df:71:dd:1e:2e:e6:39:80:
                    38:35:5e:3e:43:42:ec:8d:fb:2a:8e:22:ec:b4:d6:
                    bb:33:6b:b6:85:4b:cd:9a:d1:a9:73:7c:b0:de:c9:
                    f7:98:66:71:e8:a3:94:0e:fe:fe:82:90:43:7d:57:
                    2d:57:bf:ff:0d:b8:2a:23:df:a1:4d:83:55:76:90:
                    96:71:a4:d3:bf:ab:b5:d3:f6:cc:6e:fe:08:ef:58:
                    a1:e1:09:65:06:d7:17:4a:4d:c5:e4:de:5c:64:63:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:0E:9F:A2:DC:94:D2:79:5A:4E:1A:C8:1F:7A:1C:6E:47:44:04
            X509v3 Authority Key Identifier:
                keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:26:03:ef:28:36:22:25:df:98:e7:03:9a:11:b4:f8:21:f6:
         4a:0e:95:a5:af:97:92:1a:5d:9d:79:b0:bf:6e:94:a0:cd:bc:
         37:d6:fd:ec:5f:13:34:ee:2b:0a:b1:99:4b:4d:3c:c7:94:3f:
         03:30:f6:86:f8:c8:9f:2c:b3:ae:70:51:04:31:c5:d5:85:43:
         a3:f0:2e:a5:28:09:ad:31:41:bc:6c:0f:d4:da:70:fe:01:bc:
         d3:0e:74:a3:5f:0c:da:83:1e:ef:ca:df:33:20:17:5c:2f:0e:
         81:26:85:0d:87:c3:43:8d:b8:54:d8:9a:63:90:e1:fe:6b:a0:
         f5:4f:3a:53:b8:44:6a:f8:74:30:f1:53:d8:82:8b:5e:2d:41:
         b8:6d:20:c0:6d:e7:d3:e7:3e:47:c2:06:9c:9e:13:8c:45:ac:
         3b:eb:66:b9:7e:54:a1:e5:a8:d1:e4:dc:fb:82:a1:15:8a:66:
         c9:c8:6f:bf:20:9f:e4:d7:21:e6:72:de:4e:d3:b7:92:a1:29:
         94:23:b6:f4:07:5f:d7:af:75:58:7b:4b:b1:76:a8:4e:d8:4d:
         80:5d:46:81:17:8b:c7:20:54:f0:f0:f3:28:00:a1:d7:8b:06:
         d5:4a:22:13:ae:89:72:a2:43:d9:d3:b1:55:d0:b8:a1:b4:b6:
         28:f3:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:57 2024 by rpki-client on console-ams.rpki-client.org