Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
File:                     mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json)
Hash identifier:          smTRCdbEPSDRMMywfyilHtlJZXpME85PD+kmjAc+dj0=
Subject key identifier:   E4:EE:6E:11:35:D9:E7:3C:78:9C:60:1E:39:46:68:8A:8B:4A:E8:D3
Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77
Certificate issuer:       /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
Manifest number:          8E
Signing time:             Sun 19 May 2024 07:01:53 +0000
Manifest this update:     Sun 19 May 2024 07:01:53 +0000
Manifest next update:     Sun 26 May 2024 07:01:53 +0000
Files and hashes:         1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: /hslzvKfgcLueN8bs3JeffJmUvJZtZqdZh3+vp/AVQs=)
                          2: 78CAEF00404711EEBE56794DC4F9AE02.roa (hash: o7Hy1NgfCavKhkvCbXt/0noEUrRnyYugOx1u59VzWi0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl
                          rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377
        Validity
            Not Before: May 19 07:01:53 2024 GMT
            Not After : May 26 07:01:53 2024 GMT
        Subject: CN=6649a3e1-12f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:30:ab:55:d8:7b:45:b1:5e:8d:fd:7b:57:
                    a7:2d:58:6f:3a:ac:96:9c:3d:8a:9c:aa:8e:e9:b0:
                    50:6f:b5:01:e8:de:7d:c6:8f:11:3a:43:d5:11:e1:
                    f7:8c:5c:a6:f0:01:84:45:d6:61:ef:78:e7:7a:9f:
                    9f:77:38:d3:50:58:a6:71:3d:68:0b:fd:6a:bd:bd:
                    62:d6:85:32:2e:9e:bb:f2:6a:82:97:17:c1:b5:3a:
                    7f:86:45:cd:26:49:7c:76:ba:cc:a3:7b:ef:3e:79:
                    46:e5:9b:32:6f:17:2e:79:b9:c3:92:79:1f:2c:55:
                    e4:fc:57:e6:79:a9:1f:5f:4d:67:08:45:22:fb:53:
                    d3:a5:3e:f9:3d:98:97:e9:ad:7b:2b:e2:2c:1e:d9:
                    5c:bf:e1:12:e8:2f:ba:cd:da:e4:d9:91:55:67:82:
                    80:fc:06:df:85:14:15:52:2e:f1:03:81:94:b4:54:
                    38:8a:5e:72:a9:8a:7e:d4:28:2a:3f:54:43:26:47:
                    cd:85:8d:76:c5:4c:ca:4b:8e:71:b4:74:43:68:f6:
                    bf:23:48:2f:f3:95:b3:f5:d3:7f:77:a3:28:37:e4:
                    a6:d1:1b:2b:7a:ff:6d:c7:91:de:0a:98:5a:4d:f3:
                    75:e9:f4:9b:69:f1:cf:9d:bf:79:b1:bd:ca:8f:57:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:6E:11:35:D9:E7:3C:78:9C:60:1E:39:46:68:8A:8B:4A:E8:D3
            X509v3 Authority Key Identifier:
                keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:e0:d9:b2:04:ce:0b:28:73:49:ca:e9:4f:03:d5:9f:55:
         1e:8e:f8:7d:8a:84:9c:99:39:a3:be:09:69:a8:18:15:43:5f:
         d6:f3:00:09:a0:cd:73:fa:d4:fd:5f:78:11:e4:94:2b:78:62:
         de:32:92:93:0f:5e:b1:23:fd:69:5e:bc:80:7b:b8:ba:6d:a5:
         aa:90:8e:a5:2a:03:9f:bf:ee:78:d5:7b:6e:fa:7e:95:68:e6:
         6f:e0:c7:c7:a3:0e:f6:76:1e:6a:a0:9f:72:91:98:82:23:84:
         90:a8:09:e0:d4:ee:99:8a:b4:3a:63:60:3f:8a:2a:bd:7c:fa:
         a2:50:65:d6:40:fe:bd:06:01:79:6b:20:45:42:86:6e:e7:10:
         4b:9b:47:eb:e0:b4:39:53:44:32:b3:a9:0e:11:9a:4e:62:da:
         88:12:3d:0f:11:47:09:cc:14:18:c3:1a:49:82:92:48:59:44:
         5b:f8:b0:ff:80:a6:3b:e7:0b:78:c9:e3:71:cc:2b:37:54:75:
         11:7c:57:4e:88:0c:46:e5:92:57:88:62:4d:4b:d4:76:d2:bf:
         f7:a3:77:dd:69:dd:0a:8a:d6:8f:24:a6:d5:f7:a0:b1:26:9a:
         45:25:91:10:74:b5:3a:68:8a:39:ea:ca:81:38:3c:77:1d:6b:
         31:35:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org