Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
File:                     f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft (raw, json)
Hash identifier:          EBKnNsOllHmq84+ZM0BrQ70lVJmoDVIxxUR8ImOcVt0=
Subject key identifier:   09:B5:EB:89:D3:D0:D6:84:F0:3C:C0:98:43:6E:97:4C:46:89:79:AE
Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C
Certificate issuer:       /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
Manifest number:          0315
Signing time:             Sun 19 May 2024 03:07:46 +0000
Manifest this update:     Sun 19 May 2024 03:07:46 +0000
Manifest next update:     Sun 26 May 2024 03:07:46 +0000
Files and hashes:         1: f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl (hash: I3M2SCk15DF2nzLv1ugVgbqFlwzoPOKcY2cTwQFNVBE=)
                          2: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (hash: M4HPgBOO5pJ7PjcbHOa/SIDwM61f1POslUg3wcmElmY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl
                          rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C
        Validity
            Not Before: May 19 03:07:46 2024 GMT
            Not After : May 26 03:07:46 2024 GMT
        Subject: CN=66496d02-b1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:75:92:39:f1:77:15:4a:40:91:27:9a:92:
                    c0:e4:0e:6d:bb:e0:60:39:c2:8f:0f:fc:91:de:36:
                    b5:79:a1:5f:1a:f5:6e:94:8a:f9:23:34:d7:e8:5b:
                    cb:6d:1d:b3:e8:42:5b:17:17:69:a7:a7:98:30:00:
                    bf:6a:98:02:e1:c1:f6:37:21:c4:7f:c9:09:2d:62:
                    8b:30:23:17:26:2b:12:98:b4:0b:f9:d1:bc:41:24:
                    40:70:b2:98:56:e7:9c:7f:b5:c5:6b:d1:3d:43:91:
                    58:27:b7:68:6a:c7:5b:0b:a4:cd:56:df:3e:14:7a:
                    ae:4b:24:28:e5:aa:09:a6:9c:ca:b5:e4:c5:86:55:
                    e1:e4:7b:8e:51:c8:e1:37:19:3c:48:3b:b4:ca:1c:
                    8e:6f:b5:bb:e1:44:8f:d0:92:97:9a:d5:a4:a7:15:
                    40:11:13:58:9c:51:23:2d:12:b3:6a:5a:2c:45:c8:
                    46:86:7c:25:52:46:0b:27:c0:5d:05:4c:d4:3c:01:
                    4c:ed:31:26:65:a8:3c:ff:b6:17:ed:58:3d:38:3d:
                    ae:32:5f:c2:dd:24:e7:fc:a4:06:6b:34:4b:d6:fc:
                    f5:ec:10:fc:d5:65:82:39:12:04:92:07:23:f3:fd:
                    9d:c7:42:dd:5c:51:ee:9c:37:f5:1c:d7:db:16:ac:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:EB:89:D3:D0:D6:84:F0:3C:C0:98:43:6E:97:4C:46:89:79:AE
            X509v3 Authority Key Identifier:
                keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:97:df:36:f8:31:1e:6a:3e:33:fa:43:e4:95:db:88:ab:
         ac:64:10:76:79:a2:e7:af:91:66:65:fa:fc:0d:ee:f3:87:17:
         37:67:62:db:7a:7a:1c:ed:78:e0:bf:a3:be:43:c8:4c:85:ea:
         ab:97:12:60:87:b4:c2:ec:be:7f:61:b8:e6:04:55:d1:b5:e9:
         2e:4e:d4:41:99:15:3f:a0:ff:a2:05:f4:f2:b0:8d:7d:00:36:
         49:a8:69:1c:c9:5c:13:17:ca:20:c4:82:e6:e3:5d:9f:90:e0:
         97:4c:2f:f1:c5:8a:6c:ee:3f:03:5f:01:01:18:b1:c0:d8:6f:
         3f:9d:11:2c:5f:71:41:7e:a5:e3:77:b7:a2:ac:b3:21:ca:df:
         9f:69:d0:6f:e0:e9:52:6c:5b:f8:41:76:72:9d:a5:a5:be:34:
         22:8f:f9:c6:5c:74:e1:18:81:7f:46:35:85:3b:b2:d1:3e:bc:
         df:1d:ab:7c:e5:2f:98:0d:ee:5c:2c:85:94:1a:04:41:d9:11:
         fb:46:1a:5c:ba:92:99:35:68:da:74:70:8d:d2:3a:5f:2e:6b:
         bd:90:de:9c:c8:c3:6e:41:2e:71:c3:34:fa:a2:2d:a6:37:8f:
         0e:00:32:5d:d0:71:1a:fc:e6:e9:e7:38:d4:5e:d2:90:0f:4b:
         66:41:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org