Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
File:                     n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json)
Hash identifier:          zqaELNEKWhQqVq5sW3OyQ0gCq2Gsml6q6N3LnOuBXyk=
Subject key identifier:   52:13:CA:A2:FC:FA:48:9D:ED:DE:0E:C5:5A:16:1D:78:50:89:D0:41
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
Manifest number:          05B7
Signing time:             Sun 19 May 2024 00:20:50 +0000
Manifest this update:     Sun 19 May 2024 00:20:50 +0000
Manifest next update:     Sun 26 May 2024 00:20:50 +0000
Files and hashes:         1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: FAL8+HINnc0qvzyh0v7U0gOx2uBXeah6djC6gqOdA4o=)
                          2: BF351C380A2111EEA26EAE0EC4F9AE02.roa (hash: 6QT6CPhzYpZnq1Xjp9V4CBTemz3kkald3v/CAIHlyYo=)
                          3: 6C42C95C0A0411EE9FEEAB44C4F9AE02.roa (hash: jKIeZzFJKLu1WcV7f7K+QJKwpaChyzsSZP4Z3XgXAbc=)
                          4: 6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (hash: /qJsDggjlX8kCVjkMifhy3HzpLPfyW63xOi3PYDL/Iw=)
                          5: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: zLBxXDVmPsLIMkQgOn3H3bBv/zGoHa9kv878IFQiD8c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: May 19 00:20:50 2024 GMT
            Not After : May 26 00:20:50 2024 GMT
        Subject: CN=664945e2-e389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:f2:a1:7b:cb:b4:e0:08:e8:6a:d0:16:01:
                    a6:0c:82:95:7f:4a:3b:00:b9:18:24:d7:28:79:64:
                    01:55:c3:d6:f1:df:02:46:55:1a:f1:92:0e:ef:86:
                    3b:5a:34:d6:37:eb:59:d1:c2:d4:c8:69:f7:39:f7:
                    f5:cf:09:4e:c7:b9:4a:52:b6:62:73:60:fb:d9:8b:
                    df:c6:f7:ca:5c:cf:1f:70:12:b2:45:0d:c3:a6:30:
                    03:5b:e9:9e:cd:a4:c1:14:9b:00:75:84:94:06:09:
                    1a:c9:7d:0a:72:8b:23:76:fd:55:f8:2e:4c:8d:9b:
                    4e:fb:e6:72:a2:70:a8:bf:96:17:b5:4f:b7:37:6f:
                    be:e2:ef:38:fb:77:45:bf:80:29:51:e5:69:c3:9d:
                    d4:a5:6e:d0:c9:dd:05:15:d6:f6:3b:34:21:ad:b4:
                    ef:b7:b7:37:98:a4:c2:d0:eb:d6:67:bd:5d:c9:67:
                    8b:5f:3f:9a:d6:35:73:82:6e:e0:d7:e4:6d:a4:84:
                    48:51:61:32:71:ff:ce:45:d5:64:81:50:62:14:c8:
                    7e:8e:54:34:d0:43:97:e6:23:4b:12:0e:20:dd:d8:
                    06:85:36:ee:6f:b1:c8:89:4f:ef:e2:af:29:e6:35:
                    28:2b:ca:eb:a2:22:77:10:14:dc:ab:95:60:57:9e:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:CA:A2:FC:FA:48:9D:ED:DE:0E:C5:5A:16:1D:78:50:89:D0:41
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:5a:9d:c2:6d:a5:c1:b2:f9:ed:2d:b4:07:ad:94:a0:33:
         9a:ca:70:8a:5c:bf:bb:5e:98:e3:1b:e7:b9:00:5d:06:3a:ff:
         ce:cd:5a:bb:c6:41:b0:31:b9:f8:d0:a8:f3:ea:96:cf:ee:dd:
         d6:1c:16:5b:22:fd:d6:32:c8:6a:3f:94:22:45:d2:25:57:96:
         41:9e:dc:f8:4c:49:aa:0f:a7:33:b9:be:82:11:ea:97:46:61:
         79:9b:29:cc:dc:78:87:9f:80:16:e3:6b:2f:36:7f:a9:2f:e3:
         76:bb:5d:9b:f5:b3:a8:d6:6b:86:02:90:5a:0e:c5:26:30:54:
         2d:e2:a0:d6:0f:d6:08:9c:7d:07:50:51:b9:1c:2e:2f:e0:c1:
         26:59:9c:69:eb:f8:d0:4c:54:9d:e3:22:84:c5:cd:30:16:5e:
         47:b4:c9:93:39:99:f5:6f:22:65:bc:69:3d:c7:b0:cb:44:1c:
         94:31:10:d5:96:77:86:71:35:21:1e:ef:59:a1:78:22:ac:41:
         70:12:32:e5:c5:52:4c:96:24:86:e4:31:83:7a:68:f0:87:16:
         7b:74:1a:d2:24:32:99:8b:76:14:5d:2c:c7:5a:8d:c3:56:02:
         73:ac:a4:4e:bf:c3:24:31:e2:70:94:03:cc:d4:22:77:3a:7b:
         fd:4a:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org