Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          k3Frjdmw+BDWhawpB7Kn/2wlV52KgQGT3ZZiLXMsSWs=
Subject key identifier:   A3:D9:F3:CC:C3:3E:BD:66:72:85:50:D2:EA:F8:3A:72:21:D6:90:A9
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          61
Signing time:             Sun 19 May 2024 07:40:31 +0000
Manifest this update:     Sun 19 May 2024 07:40:30 +0000
Manifest next update:     Sun 26 May 2024 07:40:30 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: nYkLr9UXx1/4zNn4XtseAsX0er+LeBawIsFoklfNwqM=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: tjxh3rndOUkMSOmtwJhWl1k7jDHiKVupPT8znN9YBZ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: May 19 07:40:30 2024 GMT
            Not After : May 26 07:40:30 2024 GMT
        Subject: CN=6649acef-abb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:45:6e:f8:14:43:d4:9f:52:2c:89:c6:42:
                    21:09:63:b5:f3:58:e6:7d:78:fc:d8:a3:33:93:01:
                    be:0e:3d:8a:9e:13:04:8a:02:2d:8b:0d:9d:25:b7:
                    e6:4b:9f:ef:90:43:af:66:e2:6a:6d:1a:9f:a6:86:
                    94:73:35:c0:3f:9a:9b:df:26:35:a3:fd:67:b3:9f:
                    48:e4:b7:eb:42:eb:c1:90:b5:cd:82:a0:bc:33:7f:
                    fa:6d:3c:f7:66:62:db:89:a8:80:10:96:d9:d3:b2:
                    12:2a:df:96:93:ba:57:02:5d:8c:a9:58:3d:84:7b:
                    43:10:0f:8b:cd:76:9d:29:82:52:08:aa:ee:02:56:
                    bf:ee:36:8c:43:d9:9a:8e:69:67:57:19:66:2b:05:
                    b6:fd:8f:23:89:32:8b:cc:23:cc:21:06:10:09:df:
                    56:e0:4d:df:ce:e1:9a:f0:56:04:7a:2d:82:e6:1c:
                    2a:ce:37:15:ee:ad:e3:9b:aa:14:57:76:a7:cb:87:
                    3c:86:84:28:81:0b:b4:32:6b:8b:a5:11:88:b5:9f:
                    95:0a:e1:0f:81:9f:df:7f:5f:50:1b:29:51:03:b2:
                    59:4f:fe:d8:fa:b2:eb:5f:20:56:be:e4:53:9e:4d:
                    58:dd:c8:ec:52:23:77:0c:1b:a3:35:9a:00:b5:f0:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:F3:CC:C3:3E:BD:66:72:85:50:D2:EA:F8:3A:72:21:D6:90:A9
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:34:ca:b2:ab:16:49:9f:9d:e7:1e:1f:42:84:d4:df:38:
         16:6a:da:94:7a:e2:d2:81:51:ff:9a:05:02:0b:83:0c:ce:ce:
         b8:75:a3:e0:c0:a4:13:8a:45:3a:a7:4c:19:b8:d8:9d:b5:71:
         3c:74:fb:54:14:bd:70:4c:6c:78:09:db:11:5e:d7:bd:c3:98:
         33:79:03:17:ce:25:db:0e:a5:b4:b9:2e:bf:69:28:ca:8b:02:
         c8:99:f1:83:93:84:2f:c3:59:d8:04:d3:39:c7:75:57:14:89:
         c3:98:93:0a:a7:e7:7a:30:04:10:02:40:ff:e8:db:e2:a9:70:
         fe:76:5c:21:83:35:e1:73:e0:5d:14:83:52:57:60:56:01:2f:
         65:a8:0a:0d:9c:00:4c:e3:17:62:63:5e:c7:26:5f:e8:f1:57:
         fd:43:6b:79:3a:77:6a:fe:2b:67:a2:4c:f1:bc:91:6b:63:a8:
         04:2f:06:a3:c9:58:52:91:fb:48:dd:84:99:c9:1d:89:9d:7b:
         c4:3f:81:49:fe:c6:eb:65:fd:f3:f2:ec:27:2a:e3:81:a5:69:
         05:10:d1:2b:67:88:02:57:52:d4:c4:64:95:49:9b:80:cd:64:
         ea:12:cd:e5:5f:32:de:9a:b4:4c:6d:0e:07:1d:17:7a:44:9b:
         a8:a4:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org