Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          g7w2DaAuRmklVZX4/4TXdtnfMV5hUj4xVsTweuam3jc=
Subject key identifier:   77:4A:66:07:B4:E1:D5:16:21:58:19:8E:ED:CC:21:BC:CD:84:9F:D2
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          0253
Signing time:             Sun 19 May 2024 03:53:13 +0000
Manifest this update:     Sun 19 May 2024 03:53:12 +0000
Manifest next update:     Sun 26 May 2024 03:53:12 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: 9WuFkMJT3ACXHkgcY2aGrhJW5OxWsT3JMPXZ3enc2dE=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: /LGgxGmk7OJxec0kFePyyjVNXXGStmiDlKB+PEnnTLQ=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: uiO5OmGE+yOXn98MQ+7bJXSjawhzpG7YuZpmhxui8uo=)
                          4: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: 2m40/5Eiz2mxDQOIJfLfv2woUCJZElqpIT6FDqyNYis=)
                          5: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: lhSOWEE4/EOCqrU6OVCiDww4eDtSUIa4uusgIAkRF+Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: May 19 03:53:12 2024 GMT
            Not After : May 26 03:53:12 2024 GMT
        Subject: CN=664977a8-4773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:f6:ed:27:f5:ef:f8:9d:19:1e:53:b4:da:
                    4f:3b:ca:ca:fe:75:5d:ab:c3:2b:a3:7f:a0:bf:e2:
                    82:ac:4b:e5:41:f4:e2:c3:d8:22:28:12:81:c5:f5:
                    10:50:14:28:77:84:9e:a4:5f:82:33:10:79:7b:03:
                    a3:24:29:4b:0e:fe:b3:f7:a1:33:4d:8f:74:f7:15:
                    97:e2:27:97:be:ef:99:cb:b3:7a:cc:d7:6e:a3:67:
                    15:65:5d:eb:e5:88:29:6d:49:f9:64:3d:9f:74:6b:
                    cd:20:df:7e:d0:b1:b5:8e:b2:5a:1e:39:ec:6d:bb:
                    38:67:3f:52:a7:76:ea:be:10:f2:72:08:b6:e4:5b:
                    54:f5:33:d4:92:91:4e:19:66:ad:5d:18:33:46:44:
                    32:87:33:d3:60:41:ee:a4:75:d7:fe:9f:50:a1:f9:
                    57:a8:71:d3:39:a2:93:38:62:94:69:1c:68:6f:4e:
                    7d:28:49:0d:e7:65:26:9a:9a:b9:c4:bf:15:b9:88:
                    a3:9b:ab:89:61:0f:55:9c:3e:77:7a:37:d7:26:db:
                    14:f6:2a:63:66:05:d7:97:c8:c5:38:94:29:ed:9d:
                    35:83:99:7c:c1:ac:92:38:95:d2:2a:28:52:7c:be:
                    9a:1a:f3:39:90:d1:f2:b0:35:fd:74:e2:02:75:92:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:66:07:B4:E1:D5:16:21:58:19:8E:ED:CC:21:BC:CD:84:9F:D2
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:32:fd:17:6d:ea:93:09:6f:e5:81:b0:da:d1:98:09:e1:9d:
         39:a6:77:d5:8b:33:73:75:b3:a3:f0:f6:14:ef:c0:fd:11:66:
         7f:e2:ee:d8:1a:3b:e0:d0:bd:4e:bd:2d:23:35:cf:20:bc:d2:
         cf:7c:4e:9f:d2:82:79:1c:dc:c5:bf:5f:bb:a9:a2:36:bb:ba:
         98:0c:67:fa:70:25:b8:58:cf:22:b0:f3:4b:4c:5e:68:6a:24:
         11:c2:62:0a:f2:d7:f7:ad:4e:32:03:22:a2:98:08:f3:c7:c4:
         8b:b7:a3:da:a0:73:da:dd:99:01:a3:1b:e8:e9:fc:08:42:f3:
         d3:00:45:0f:70:62:2c:23:af:89:6b:f6:a6:49:3f:50:3f:24:
         5f:e7:e1:3f:35:5f:9c:45:d4:a6:c9:b1:81:86:69:75:d1:dd:
         df:1a:a4:f1:57:95:d0:22:b7:8f:b8:b6:cf:43:b1:ac:aa:97:
         fc:7b:50:19:9e:68:b6:1b:03:4c:28:4c:d7:20:d3:8a:05:bd:
         7f:d0:a0:83:78:ce:df:3d:fe:37:4d:cd:9c:f2:53:e5:97:88:
         6b:54:86:16:9d:f6:f3:91:ab:92:e6:fa:da:03:52:4e:a2:ee:
         d4:1e:4e:e5:e9:6f:be:56:a0:00:a9:47:6b:39:ae:61:5f:7a:
         a7:75:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org