Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
File:                     MOIGH3wgvYQ77lNywTIcNfux0-8.mft (raw, json)
Hash identifier:          ngHZgtD2zFn5+pxhgB4oY/UwNhPD4gbOPmUnlxWDiBY=
Subject key identifier:   4E:CA:9A:BD:B4:3B:60:B5:B0:25:D7:E0:78:FB:AB:A5:D9:F1:E6:71
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
Manifest number:          0273
Signing time:             Sun 19 May 2024 03:52:28 +0000
Manifest this update:     Sun 19 May 2024 03:52:27 +0000
Manifest next update:     Sun 26 May 2024 03:52:27 +0000
Files and hashes:         1: MOIGH3wgvYQ77lNywTIcNfux0-8.crl (hash: KXt5q+wj9MdAMwI3yt98gKIP8g/uvRF56/RSqdJKQFI=)
                          2: FF651336509D11EEA33AE874C4F9AE02.roa (hash: SiNF4aV1FOd4JwMqdQ7rIdI0wqB/uKVlCxOZznKXsW4=)
                          3: DAAECE38C77711EDA89BE25DC4F9AE02.roa (hash: pS9eQz7HAJnY1YXYtYFQZSrpu8lRMG8HzMjRsuoKnM4=)
                          4: BC17B1DCB96311EDA3070C82C4F9AE02.roa (hash: 8b/FpG8GrPulykjSLpq04MWdqfXgELjr63OGSRVAPDA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: May 19 03:52:27 2024 GMT
            Not After : May 26 03:52:27 2024 GMT
        Subject: CN=6649777b-a229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:a3:ea:13:09:d1:13:52:ea:59:ab:ce:f1:
                    0c:67:1c:ad:97:34:22:63:4b:21:8b:02:63:8a:35:
                    f8:3d:13:82:22:6f:3a:fa:cb:b6:66:b3:ec:9f:3b:
                    42:9a:9e:2c:28:64:6e:26:85:72:1e:89:27:2b:35:
                    5b:86:ec:29:df:73:4f:88:fb:c3:62:5b:55:22:8b:
                    d5:73:d3:41:79:60:b7:85:d0:21:fc:18:27:49:de:
                    40:0d:25:0c:8b:e9:1d:ce:f2:85:8f:38:ba:6e:69:
                    52:d7:b5:56:06:c5:03:db:f1:83:77:04:9c:9a:a1:
                    72:2a:f4:fc:e0:ca:51:f1:3d:92:93:f0:aa:ef:a7:
                    c6:44:1f:30:bb:39:f4:0c:83:ca:6e:70:99:a2:e6:
                    42:17:87:f5:b2:f4:bb:3a:5a:3e:d5:90:ab:48:e4:
                    97:a6:0e:9d:b6:af:34:0b:4d:66:23:67:e2:77:f0:
                    01:e0:8a:61:93:e2:84:45:1d:e7:21:e8:52:6a:ba:
                    25:02:64:66:5d:ed:71:0b:44:b3:e6:64:62:9d:c3:
                    ec:bb:e0:48:dc:7d:29:ec:a0:56:06:8b:8d:f8:50:
                    45:7c:88:39:a3:e1:f8:5a:6b:be:28:7d:3a:54:bf:
                    62:3e:3e:46:bd:4f:72:73:56:e8:87:f4:99:83:a5:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:9A:BD:B4:3B:60:B5:B0:25:D7:E0:78:FB:AB:A5:D9:F1:E6:71
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:a3:8a:c4:a6:89:66:18:f2:3b:2e:2b:26:10:dc:48:2a:
         06:01:e2:24:7f:cf:00:56:59:4b:3a:1d:a0:c8:8d:8a:a6:5c:
         e0:c0:d0:12:f6:e7:8a:17:77:33:9f:3d:b3:b8:37:70:70:3a:
         e5:3d:6d:d7:b9:2a:ae:26:f7:01:0a:fa:5c:0e:45:9b:bf:1c:
         ea:a7:b6:0f:3b:03:13:23:82:a2:18:81:b7:f4:80:16:ed:d1:
         1f:be:87:00:dd:fa:b6:88:cb:3d:2e:47:87:52:ea:70:d5:91:
         cc:ff:d1:64:e2:16:65:fe:26:b7:68:bd:9c:bc:1c:9a:95:44:
         81:50:cf:26:e6:29:79:39:05:f9:00:c1:b6:cf:1b:dd:17:a7:
         f6:aa:68:fc:b1:a8:04:0d:29:4f:fd:73:f3:ca:3a:c3:95:ee:
         86:d1:ea:ca:74:da:d1:e8:7b:a7:56:62:08:a7:ec:0a:25:bd:
         4c:67:80:1a:19:a8:6a:90:01:ea:e2:2f:cb:40:8d:db:d0:b2:
         32:6c:3f:d3:47:21:c1:e2:d2:1c:db:70:e2:08:16:2c:1c:a7:
         1f:c6:f3:30:41:4e:c2:3f:42:53:a8:01:36:01:bf:3f:85:93:
         7e:f2:17:f1:40:99:61:ab:99:c5:f1:1d:af:1b:4e:ca:f8:a6:
         9e:08:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org