Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File:                     a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier:          Q3IVHcZrAZiAM8FWz5T2HKvBDdZBLLLDfeHfl1CuONE=
Subject key identifier:   60:BD:0D:6F:A1:92:5B:35:A0:BF:EA:A2:C3:F4:23:03:92:9E:DC:3A
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number:          0ACE
Signing time:             Sat 18 May 2024 20:05:28 +0000
Manifest this update:     Sat 18 May 2024 20:05:28 +0000
Manifest next update:     Sat 25 May 2024 20:05:28 +0000
Files and hashes:         1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: Fy8Rz3friCYm4IOZyv5IFfM+6tvTmrLycVkNbbpywsc=)
                          2: 845A6A58312911EEBE440C7FC4F9AE02.roa (hash: bYtfJiWM+Fv9eVEg0yRFi27E8dgwLLvOt6iFCto6l00=)
                          3: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: AUIJbzRiqiEOfaNjWrdJt9yS/V8oDNTxfEJH1gokT3E=)
                          4: 777A546212E511EFB071A31CC4F9AE02.roa (hash: A+Z5rQeN5ZpxqOqTnOAQ3ztY3L8UIQ+D9vk367QiiEM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: May 18 20:05:28 2024 GMT
            Not After : May 25 20:05:28 2024 GMT
        Subject: CN=66490a08-090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:bd:47:80:b1:2b:eb:2d:73:8f:88:e9:c2:
                    59:47:05:3a:ce:70:ca:a0:fb:d8:85:57:2e:99:d6:
                    cd:08:15:d8:81:d9:12:f5:7f:4f:c5:b9:e3:5c:74:
                    cf:b8:2e:18:ce:cf:dd:38:47:b6:84:ad:14:fa:91:
                    36:1c:d6:4f:88:0d:07:94:2a:dc:54:ad:65:45:28:
                    fa:b4:31:a6:70:72:ba:56:11:a2:b3:e5:7f:80:14:
                    ee:5b:bd:89:37:e0:03:4a:43:4a:29:ed:a1:de:47:
                    2a:3c:c5:a8:bd:5a:f5:2e:f0:de:5e:29:7c:12:c7:
                    07:7e:1b:e3:21:2d:58:87:22:8c:21:5d:2e:51:d7:
                    df:f7:24:28:56:46:6c:aa:29:8f:a7:40:b4:1f:df:
                    2d:8c:bd:e9:8a:b1:cb:84:ce:04:61:fe:1d:33:44:
                    4c:96:20:76:c8:a9:15:1d:ad:38:32:0f:95:73:0d:
                    f7:81:e4:c4:5f:7f:ad:cf:4e:00:32:e6:ef:62:9b:
                    43:65:5d:0c:0d:0a:47:4e:34:93:a8:28:32:86:75:
                    3f:d4:90:6d:79:73:6b:19:d9:b8:3c:f1:30:a8:9e:
                    99:64:84:e4:72:85:d6:a7:1f:12:d2:79:69:73:c0:
                    d1:73:47:cb:1b:b2:dd:f8:07:ff:78:cb:52:c6:75:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:0D:6F:A1:92:5B:35:A0:BF:EA:A2:C3:F4:23:03:92:9E:DC:3A
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9e:4d:c6:50:ac:ef:f5:a0:30:0b:ac:18:7a:89:19:2b:8c:
         54:0d:e4:fc:4a:9a:89:bf:bd:cc:8c:ff:11:e9:a2:c1:07:a1:
         44:0e:8b:4b:56:51:08:10:c6:36:28:11:6d:24:74:c3:8e:18:
         94:2c:a1:fd:3c:fe:79:5d:b6:cb:71:e7:91:2f:a8:d1:a5:04:
         cd:97:8e:14:15:7b:3d:65:90:35:b5:fd:10:c8:75:25:00:37:
         56:e9:3c:61:58:af:b7:38:1e:05:2a:8d:ee:cb:20:b0:e0:88:
         52:c2:ed:c9:98:6d:a0:fe:05:71:c9:47:9b:bb:64:7f:0a:12:
         96:2c:6b:6d:ac:c1:e7:81:51:ce:c3:4e:fd:b7:7f:de:43:e0:
         94:cb:75:34:d3:b0:ec:c1:48:58:e9:2f:9f:9d:db:67:f2:59:
         4a:18:8f:44:4a:a4:08:d3:fb:7a:a9:24:f6:87:7e:e9:29:63:
         24:84:d6:99:9d:34:d5:ba:e0:52:a5:02:08:a3:c2:a2:ed:d5:
         ee:17:84:95:53:b5:52:2d:aa:c1:3b:0c:f3:93:ce:4b:67:47:
         85:04:f2:b2:85:ee:4f:92:2a:1d:40:2e:89:d3:4b:c5:ea:1a:
         63:be:87:54:c0:c9:a1:d9:51:55:9c:31:22:43:68:91:57:00:
         9c:99:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org