Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
File:                     6wr0cxLfFL-ROszd3wzcPTwV6mA.mft (raw, json)
Hash identifier:          S+/FZ23rNd8qDLUtDdq+a18e5e9y+1QlxJtwvGaAiJo=
Subject key identifier:   2B:D8:85:39:79:5E:29:C2:B6:EA:1E:3F:FC:BA:DC:29:9E:7C:B4:5F
Authority key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Certificate issuer:       /CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
Manifest number:          AE
Signing time:             Sun 19 May 2024 06:33:17 +0000
Manifest this update:     Sun 19 May 2024 06:33:16 +0000
Manifest next update:     Sun 26 May 2024 06:33:16 +0000
Files and hashes:         1: 6wr0cxLfFL-ROszd3wzcPTwV6mA.crl (hash: jKTACd06ZrOgTg2Kq0ZBkzG5U1nj6hpXMWNIdi7G/z0=)
                          2: F08468EC092811EEA1BB7E73C4F9AE02.roa (hash: wNO0ge4HBlh7JSeaygTK0PtuHEUACzwWqcCrlvNgUy0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF119/serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
        Validity
            Not Before: May 19 06:33:16 2024 GMT
            Not After : May 26 06:33:16 2024 GMT
        Subject: CN=66499d2d-d7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:b2:56:6f:f0:ad:b6:4a:81:a8:56:d6:1f:
                    ab:a0:8b:71:6a:38:03:83:36:c0:22:1c:9f:0d:e4:
                    7d:21:cd:bb:a4:e9:04:10:f5:5f:e9:27:6b:89:2a:
                    a8:b5:9b:98:0f:81:76:55:94:fc:c1:57:2c:23:8e:
                    f3:fd:2a:b9:ad:15:1a:95:c0:7b:65:10:94:05:cf:
                    9d:49:1c:ef:c2:63:85:56:7e:98:4e:96:c2:3c:f1:
                    4d:f3:65:28:ed:3e:3d:8e:03:c9:8c:b1:09:bc:80:
                    04:3f:8c:ee:d2:fa:dd:ba:99:b2:43:b1:3f:7d:8d:
                    51:2e:7a:4c:17:2d:a5:09:4e:15:85:da:7f:e9:13:
                    ce:e4:19:c9:f4:1c:24:1f:f5:ab:a6:82:66:3a:f2:
                    5d:34:d7:3c:84:b9:02:45:e0:57:d9:78:b4:30:b0:
                    b2:af:b2:b0:61:91:e8:79:c0:8c:f7:bb:62:bc:96:
                    50:31:07:88:8b:73:58:e1:04:7d:9b:30:0c:1c:10:
                    0b:97:d7:e1:12:1a:e3:bb:c7:23:bd:9b:e1:ac:ff:
                    23:4b:c0:56:bb:94:de:10:20:70:07:28:fa:67:3b:
                    7b:12:64:43:f6:b7:44:51:da:53:b7:6c:0d:5d:e7:
                    c6:ec:b7:0d:03:b1:44:71:df:b3:62:87:9f:bd:eb:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:85:39:79:5E:29:C2:B6:EA:1E:3F:FC:BA:DC:29:9E:7C:B4:5F
            X509v3 Authority Key Identifier:
                keyid:EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:62:d3:2c:a2:2c:b7:9f:af:a9:83:f4:91:9f:a9:b8:96:aa:
         28:f2:b3:43:2c:7a:6a:11:0b:c3:41:ac:4b:96:14:2a:fc:4f:
         e1:3b:88:f3:77:94:c5:2d:e2:1b:9d:f4:d6:c9:33:bc:0b:85:
         40:2f:73:25:e3:9c:e8:28:4e:3d:f4:67:93:11:88:81:1c:6a:
         a3:a8:3f:9c:aa:b2:dd:57:40:f8:4b:ed:1e:90:70:79:84:1d:
         14:c3:fb:8f:27:e7:f2:cf:f4:ea:b7:a5:55:e4:b9:a6:38:b6:
         22:37:29:48:46:23:f0:9c:64:4a:c7:a4:08:94:a0:b6:ca:05:
         d1:d6:f2:81:89:5e:28:b6:05:6d:79:ec:30:c4:33:43:76:d3:
         94:ed:91:b3:1c:48:1c:b4:68:3c:c6:a9:b2:27:e7:e4:ff:71:
         69:20:ad:73:27:30:a5:67:88:e6:ed:3c:c5:bc:db:cd:45:df:
         29:2b:98:c3:dc:02:b7:e5:e8:d5:39:4d:7f:8f:d4:e9:39:44:
         0a:00:0c:4c:6c:2d:71:d5:a8:48:51:d8:44:79:3a:86:78:e8:
         7b:78:f3:6d:cb:df:74:94:9a:cb:a6:84:ff:6f:f3:e0:17:3e:
         3a:2f:7f:44:e1:3c:e7:72:c7:42:bb:91:57:11:2b:39:99:cc:
         15:35:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org