Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
File:                     D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json)
Hash identifier:          vbVhqyjBLbB+iZZbuuzcL7CGgxF7qLi+Im/1lAYAMp0=
Subject key identifier:   63:00:B3:4A:36:6E:65:75:49:E2:94:F1:60:88:63:DE:E3:B4:2C:74
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Certificate issuer:       /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
Manifest number:          B4
Signing time:             Sun 19 May 2024 06:25:37 +0000
Manifest this update:     Sun 19 May 2024 06:25:37 +0000
Manifest next update:     Sun 26 May 2024 06:25:37 +0000
Files and hashes:         1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: ugzVDiXskG9x0kxWFrqjBgXJqctkiaYFUIaYxG0uYaA=)
                          2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: AZeJrvSFUeM8gF1O8F9ykRVrPQam2o3f9tdZxj7NXWg=)
                          3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: 1ULYMihctK0QTnF2gON3NC5zE/hLfPv7063bfyE4IkY=)
                          4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: 67JgC0/u9N2dm4xSBdGoMlHezM99N10cYVJ0urlojeA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
        Validity
            Not Before: May 19 06:25:37 2024 GMT
            Not After : May 26 06:25:37 2024 GMT
        Subject: CN=66499b61-6276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:f3:1b:07:23:0e:61:9b:69:08:da:05:b7:
                    9b:e0:a8:5a:b9:40:6a:bf:58:c1:56:11:53:09:03:
                    fe:5e:06:cb:1c:54:77:87:df:6a:db:86:df:04:54:
                    6d:88:8a:70:50:16:84:65:de:20:33:58:ef:b2:73:
                    be:09:ee:bb:89:6a:49:82:bf:e0:92:4b:aa:c1:ff:
                    94:1c:7f:55:5b:69:0e:cf:ec:00:51:8c:a7:89:b5:
                    db:44:24:42:90:48:24:0c:7a:5f:74:37:bb:e9:b6:
                    84:a2:29:de:ab:78:3d:2c:12:5b:86:07:77:23:36:
                    a0:1f:21:a2:49:22:b6:93:12:a5:53:77:05:77:ea:
                    1c:0b:7a:a7:b4:fc:25:97:be:43:5d:89:d6:9e:c2:
                    af:48:1c:2f:d6:f3:a3:2f:9c:fb:b3:1f:b0:95:54:
                    a3:9b:ce:73:94:b2:71:88:86:40:00:72:41:6b:e9:
                    96:d5:a8:6b:16:a2:3c:7b:ae:4d:9a:fe:74:7d:c1:
                    95:1e:95:8e:f8:36:40:a4:64:b5:d5:9f:52:c6:05:
                    dd:a7:37:3a:89:b1:9c:28:4a:41:c4:6e:83:59:a6:
                    26:c8:84:41:1e:98:05:a2:6c:08:41:19:69:11:bc:
                    79:5e:b2:06:7f:df:1e:78:d4:ea:2b:f4:9f:0d:8d:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:B3:4A:36:6E:65:75:49:E2:94:F1:60:88:63:DE:E3:B4:2C:74
            X509v3 Authority Key Identifier:
                keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:3f:22:d2:0a:8a:98:4c:b2:57:62:a5:ce:8a:bf:43:a9:
         6d:29:8c:a7:62:88:6b:71:ec:be:01:51:e0:36:b3:27:21:f1:
         ed:38:25:07:9d:a4:30:d0:c6:61:01:f5:63:17:ef:63:98:85:
         18:44:9b:5a:ee:25:de:2a:5d:8d:43:9e:83:25:32:22:31:2d:
         d6:4d:42:85:df:41:8d:fb:0c:d3:83:3f:2b:3b:7c:a4:2c:8a:
         df:c0:40:ad:97:ac:0d:cd:5b:4a:b6:6e:c5:91:b6:fd:cf:00:
         ff:79:b0:9b:95:10:72:8e:36:59:6b:cc:c2:18:0a:a4:ae:ae:
         ba:04:0a:f6:8c:e9:cf:6c:e1:36:73:30:81:66:02:4a:aa:d3:
         5a:fc:70:7a:92:7f:08:5f:b3:44:54:ad:ce:27:1a:e4:be:f4:
         da:cb:ec:f1:5b:8f:72:46:7a:22:ba:f1:15:36:c8:4b:f2:34:
         8f:d8:ab:cd:5c:a8:5c:03:fe:68:47:63:9b:5e:e6:1d:f1:dd:
         e7:dd:8a:85:6a:38:96:24:9b:1f:8f:c1:cb:0f:19:48:be:e6:
         1f:46:37:ff:b8:94:3d:c7:0c:16:7a:6f:ed:c9:dd:f3:83:0d:
         b1:ae:3a:5e:29:e8:c5:04:20:d9:0b:76:c0:47:0c:83:dd:14:
         b1:e4:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org