Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
File:                     2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json)
Hash identifier:          VO9Thbxwj4yXAunt69J8jru5prBhHHoMo3tKdoW6ql0=
Subject key identifier:   F7:AA:F3:12:31:81:63:87:10:93:1B:24:9D:9B:AC:8A:D9:DB:E5:76
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Certificate issuer:       /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
Manifest number:          058B
Signing time:             Sat 01 Jun 2024 01:28:06 +0000
Manifest this update:     Sat 01 Jun 2024 01:28:05 +0000
Manifest next update:     Sat 08 Jun 2024 01:28:05 +0000
Files and hashes:         1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: iL1VUpuBZAmSibR8lLJpw8FmLwy0reKcdy2jIgk+s+c=)
                          2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: 6LSvLd7bm+YBbAZ+JMfq+FInj+bNQBqnO2rGvgKPlVU=)
                          3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: in/fb62CrRPbpXlNZPGadntOIOc6xim+BnFsOsMveGo=)
                          4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: aGrL2z2bwBzAexQy58I9/UN9GgQWFLHAcCSGvC5QGoc=)
                          5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: 0t+K64oILCqrrPsHGerNnaclKDhbB8GMY2lVj86uvsA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
                          rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
        Validity
            Not Before: Jun  1 01:28:05 2024 GMT
            Not After : Jun  8 01:28:05 2024 GMT
        Subject: CN=665a7926-31d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:8b:ed:a7:74:dc:5f:29:61:12:d9:d1:e5:
                    c6:fe:fd:04:43:b0:50:83:cf:d9:65:31:50:cc:87:
                    b3:c9:9b:8e:b0:54:65:97:9f:b5:d8:7a:cc:63:16:
                    25:36:fc:3d:1a:09:11:38:cb:23:6f:d8:81:6d:02:
                    82:a7:66:d1:4f:da:3f:1f:99:d2:9b:f9:22:16:36:
                    67:86:c2:ed:e6:b1:8c:37:bb:be:e4:34:36:87:a9:
                    c0:0f:ed:5c:6c:b5:8c:65:a2:76:e3:07:1f:d2:a7:
                    f7:47:6d:a7:a9:f5:65:2f:fe:ed:81:ba:5f:95:dd:
                    aa:ed:0b:b9:f8:dc:63:41:8b:25:a7:22:06:e5:25:
                    ed:8f:35:bd:60:ca:2c:22:44:00:3e:35:2e:24:93:
                    95:cb:d5:d9:24:ef:7e:a5:9a:d7:34:0d:57:cb:57:
                    f3:5d:6b:84:b3:b7:bc:1e:50:0e:aa:ae:a1:42:cf:
                    b0:e2:8f:f4:7d:14:aa:89:bc:85:64:6e:b1:69:52:
                    2a:60:f3:5d:8d:3e:68:a6:ef:47:b3:74:83:a5:21:
                    3b:b3:f2:38:e4:a1:87:91:3e:48:4b:e8:6e:47:73:
                    2d:93:b5:54:63:ee:04:be:82:9a:f7:20:0a:58:97:
                    a9:b3:ab:36:f2:fc:14:75:57:ee:a0:8c:cc:0a:6c:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:F3:12:31:81:63:87:10:93:1B:24:9D:9B:AC:8A:D9:DB:E5:76
            X509v3 Authority Key Identifier:
                keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:c2:e6:5e:87:23:27:3d:61:4a:2d:02:fa:d9:19:77:3a:
         cd:92:c8:80:79:1a:a4:3e:2a:3b:cb:42:95:d4:f9:2d:b7:92:
         ac:8e:5f:3a:3e:60:3b:bd:39:cd:51:bd:94:a7:51:fa:ec:56:
         96:4f:81:9e:e2:6f:ec:7e:2c:92:02:62:84:c4:32:e0:40:01:
         db:d6:b6:99:eb:37:ce:a0:28:e7:da:65:3e:2f:58:9f:32:32:
         6f:43:16:7c:ec:54:df:6e:90:2f:8b:cc:0a:24:0e:1e:5a:5e:
         af:e6:27:3a:46:b4:1a:cd:74:0c:43:93:7a:67:3b:94:6d:d4:
         82:33:fd:7e:43:d4:07:90:e7:65:64:ed:58:3d:f6:57:c9:b5:
         7f:80:71:fd:fe:e1:4e:68:3e:1b:2f:17:5a:ac:7e:e3:36:c6:
         45:71:95:d7:62:d0:e5:47:aa:95:d0:b3:7b:1a:53:77:68:35:
         89:d2:3b:37:72:7a:7f:c7:a3:b5:ae:f2:d6:01:75:3a:83:cf:
         c7:78:16:bd:2e:03:19:e2:2c:31:c3:be:04:66:ab:68:c9:4f:
         15:52:70:9c:36:73:15:0d:9e:4a:86:dd:19:97:b2:6a:00:66:
         95:97:54:0e:17:a1:c9:fe:7e:a2:06:e1:43:e4:b5:eb:a2:4a:
         df:2b:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org