Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File:                     5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier:          7SI7bZeWsoePOdStE8JBthUE2zxl6KAg9jjVu2RUmOg=
Subject key identifier:   AE:97:C7:3E:2A:36:42:E8:41:70:44:D5:C0:E5:97:3B:F4:E3:C5:47
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number:          B5
Signing time:             Sun 19 May 2024 07:00:06 +0000
Manifest this update:     Sun 19 May 2024 07:00:05 +0000
Manifest next update:     Sun 26 May 2024 07:00:05 +0000
Files and hashes:         1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: waNXkHJlibbv2DpBn/WTgpR+sYtYuJetJFV5babMx+M=)
                          2: 3300A8B0FBB911EE8D1F0F3AC4F9AE02.roa (hash: 2NDH6WSLRffSE57lRIE3IsFmyH//gcFvd6rSRXgCmgE=)
                          3: FD02F648C0DD11EE93560678C4F9AE02.roa (hash: QOcxCXaE5l3rLTsAPbmde9U5cqBVyell/5zMPhTwNWs=)
                          4: E4F793820D0F11EFA952D612C4F9AE02.roa (hash: OqzM42QXXFH2NckefeYA/OPzFySgAqDxSFM4hp52Nbc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: May 19 07:00:05 2024 GMT
            Not After : May 26 07:00:05 2024 GMT
        Subject: CN=6649a376-7160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:c1:29:29:35:9c:5a:0d:79:5c:63:df:05:
                    67:0e:3b:95:af:be:f7:76:2b:29:43:2c:6d:e1:ae:
                    2f:10:ac:44:b6:f7:7a:2a:92:93:d4:f6:46:b9:76:
                    6c:48:24:41:df:c3:62:76:02:00:a6:7b:fb:89:2e:
                    29:f5:03:e4:9d:6b:21:70:f2:04:d3:cf:61:01:9b:
                    e0:ac:c6:59:09:12:ea:44:4c:eb:61:c0:8f:9c:7a:
                    3b:56:16:09:79:ca:50:c4:09:ee:98:38:ea:eb:bf:
                    8b:40:0d:7a:ca:04:c9:8b:0c:a5:ae:68:29:70:43:
                    0f:34:95:b3:0e:96:62:7b:98:ae:3e:18:69:e8:5e:
                    0a:75:79:08:e6:e7:6f:52:9d:88:bc:92:2f:d5:03:
                    79:b8:57:1f:55:7e:aa:a9:df:d2:da:dc:0a:5b:db:
                    35:7c:38:5a:37:91:f2:a0:e9:73:56:c2:a4:66:59:
                    6e:04:5a:07:00:40:b5:3d:e3:80:e2:3c:22:40:43:
                    f4:8f:4e:7b:21:98:ae:1b:51:eb:13:31:1c:da:44:
                    b5:15:03:db:1f:e7:ae:e6:5c:ea:90:33:cc:db:37:
                    8e:a6:be:55:50:e6:f6:a2:fd:cc:ed:17:77:60:5d:
                    b2:f5:89:a9:f6:4f:62:e6:6e:77:69:34:5f:fc:d4:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:97:C7:3E:2A:36:42:E8:41:70:44:D5:C0:E5:97:3B:F4:E3:C5:47
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:09:64:1e:db:6e:bf:0b:51:64:96:8d:a2:5f:b9:f0:27:
         82:03:e1:12:b4:9c:5b:d4:b1:36:39:26:10:30:de:1e:4f:f3:
         7e:e5:a8:7f:a7:52:3f:96:4d:68:b3:ea:4c:7b:0d:9c:a9:b6:
         4d:fa:db:0f:95:b4:70:c2:5c:83:9a:5b:22:b6:72:d8:6c:71:
         13:6c:c4:e5:fe:dc:01:57:f4:87:05:e8:25:82:c4:71:32:c9:
         32:ed:0d:63:da:a3:8d:a4:3f:98:7d:5c:96:77:0a:7c:43:19:
         49:f9:fc:67:17:44:4a:5f:ce:bd:b6:2c:99:e7:7c:c6:93:2e:
         39:56:68:d3:72:f3:88:20:f8:cc:35:79:a8:04:12:b7:bc:4e:
         1e:5a:0e:a4:3b:05:53:27:50:1c:84:0c:b1:d0:82:00:1e:29:
         23:57:ad:d4:70:d4:fd:aa:35:55:32:8c:cc:4b:8c:ef:34:f7:
         a5:3e:0b:ce:a8:99:43:d6:ed:25:50:a0:c4:9b:0e:2c:ec:41:
         e4:3e:42:f8:a2:03:f0:08:40:e5:24:41:20:34:ed:93:b3:3a:
         46:4d:e1:6a:62:b7:12:c0:a4:b3:c7:17:69:66:fe:93:a7:56:
         93:73:7e:e0:d0:75:db:bb:ff:92:6f:99:11:62:96:10:2a:3f:
         08:23:a0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org