Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File:                     qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier:          F17WL3uH3tZJobSkyKoP3Zr6TR3f1hwRCGHEqzT8wm0=
Subject key identifier:   98:E5:3C:CA:F9:56:27:4A:B9:37:90:A4:D3:39:CB:34:54:1A:7E:C1
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer:       /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial:       15F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number:          15EB
Signing time:             Sat 18 May 2024 17:12:53 +0000
Manifest this update:     Sat 18 May 2024 17:12:53 +0000
Manifest next update:     Sat 25 May 2024 17:12:53 +0000
Files and hashes:         1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: mNlu+BwN0mpzbrmAraGW76ZqUZAFRRm4EhO+kRIpnGw=)
                          2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: JUGvP0VfYGf1cQNe0da3Yd6T9iCGabpJpXti+sDdJ20=)
                          3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: 3LNlvPtzA3tMttWpEXnP+j4Dk+109O2Kb8OwTlK+xas=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
                          rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5625 (0x15f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
        Validity
            Not Before: May 18 17:12:53 2024 GMT
            Not After : May 25 17:12:53 2024 GMT
        Subject: CN=6648e195-b478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:58:5d:c9:98:03:d5:e4:56:52:ee:73:f5:
                    7f:dc:af:3a:fb:66:72:4c:a4:35:dc:ff:d4:e0:55:
                    ee:c7:f1:7f:00:8f:1b:0e:92:81:52:57:ac:9f:07:
                    4b:c1:7e:56:d6:0b:17:57:97:59:77:c1:75:b0:64:
                    5d:93:3a:a0:e1:b9:af:47:5c:f8:ce:e9:a1:6e:91:
                    2e:95:93:c3:bf:30:f6:96:df:89:4b:7b:cd:30:af:
                    e5:2a:90:1b:1f:4d:b3:53:3e:33:03:3c:f8:90:2c:
                    5b:a3:08:54:a7:3d:c9:a7:57:8f:be:ef:59:26:47:
                    96:a1:3a:04:6e:ba:a5:68:39:7a:01:fb:f1:e3:89:
                    11:02:b8:cf:ab:3c:85:34:fd:f7:73:2e:53:5d:ec:
                    35:30:d5:16:2d:fc:c4:d1:ca:a0:95:48:69:4c:d6:
                    13:17:e7:01:73:ca:e5:c5:c3:9a:7c:74:4a:df:6b:
                    7c:90:f8:bb:9f:c8:39:ff:12:5b:9e:30:ed:88:ed:
                    33:9a:50:81:bc:3a:2b:bf:b1:04:39:69:eb:03:62:
                    02:7e:4d:27:38:40:fb:65:62:46:c0:ef:fa:a2:b6:
                    3b:53:93:40:89:5f:42:1c:f1:66:73:d3:78:fc:86:
                    bf:65:8f:c6:11:d4:0c:c6:f9:bb:65:79:8a:fb:95:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:3C:CA:F9:56:27:4A:B9:37:90:A4:D3:39:CB:34:54:1A:7E:C1
            X509v3 Authority Key Identifier:
                keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:93:bc:fe:42:03:be:f7:db:b5:fa:be:42:93:47:9f:65:66:
         a8:1d:28:5c:2f:3d:da:c4:4d:15:b6:c2:1e:08:97:2c:7a:53:
         2c:7d:cf:4c:6d:7b:cc:68:8d:c3:e2:73:38:e3:a3:95:2f:be:
         bc:f5:5e:9c:aa:c5:e8:67:0a:96:ac:43:7a:f9:9a:38:69:53:
         95:36:5c:04:c3:03:fe:73:22:27:b8:20:b8:d8:6d:e0:67:22:
         6b:e6:01:04:9e:2d:db:13:6b:c3:98:5b:44:cf:01:5a:06:6f:
         80:56:dd:5f:87:2b:85:9b:52:c3:ca:41:b3:93:9e:73:1c:84:
         88:41:7d:b5:71:8a:5b:d7:de:9a:74:9c:0a:51:01:d1:8b:57:
         a6:9c:a0:37:fe:ba:5d:77:26:4b:c0:da:38:c8:52:79:58:bc:
         10:3c:d6:96:2f:1b:37:cd:e4:78:07:6b:3a:fa:13:aa:a9:ef:
         43:cc:0a:cc:e1:82:56:51:e7:f6:66:9b:e2:ff:a1:2a:6a:d1:
         25:80:76:09:e4:77:78:ba:67:98:26:d1:12:6e:64:18:48:b4:
         95:7f:a5:1c:3c:4f:9b:d0:3d:05:3f:03:ad:b5:dc:a6:a4:91:
         c2:35:68:08:63:f5:83:33:3a:a9:84:09:03:c7:fe:a8:53:60:
         84:ef:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org