Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
File:                     w0Ozu4On4j-tla-NIytSBSoP3nI.mft (raw, json)
Hash identifier:          Lgh674lujKAaKIT1boSgcysj5R8XpujfKKH/80hHDRA=
Subject key identifier:   6A:85:BE:63:4D:1E:C5:BC:9B:68:3A:1A:E5:B0:DE:D9:FB:60:C7:4C
Authority key identifier: C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72
Certificate issuer:       /CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
Certificate serial:       08D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
Manifest number:          08C0
Signing time:             Sat 18 May 2024 21:30:07 +0000
Manifest this update:     Sat 18 May 2024 21:30:06 +0000
Manifest next update:     Sat 25 May 2024 21:30:06 +0000
Files and hashes:         1: w0Ozu4On4j-tla-NIytSBSoP3nI.crl (hash: GLBz8zJZrJeM8UNOdshbZUXJ2n1Tl69LB1sJrCYiMZ8=)
                          2: 8A480EFE80EE11EBA01B8C79C4F9AE02.roa (hash: jqfH6x35WvO0eEEDkkB9hWF61qmVkg+6vhLuGPEM4hs=)
                          3: 63FE6F90232411EB87A6CB0DC4F9AE02.roa (hash: H1cBS4aH5PgEy9PRy+UvX+kYdf8K796GHa2xj2vCKcY=)
                          4: 023564E6D5BE11ECA8BE4666C4F9AE02.roa (hash: RqiSAS1pYvKkSlfgmdBozODQTeMX0fXdggDp0lhj8F4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B7/serialNumber=C343B3BB83A7E23FAD95AF8D232B52052A0FDE72
        Validity
            Not Before: May 18 21:30:06 2024 GMT
            Not After : May 25 21:30:06 2024 GMT
        Subject: CN=66491ddf-6688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:d7:ec:82:86:a4:10:91:82:f7:c2:78:2a:
                    b9:24:1a:e8:4e:81:6b:cd:60:ea:7f:24:f5:8d:d5:
                    14:7c:9f:e2:0a:df:f7:aa:8b:45:54:21:cd:d8:83:
                    9a:da:ff:30:3e:f8:18:92:23:c3:63:8f:ff:ea:ba:
                    64:86:4c:90:5a:9d:6f:b4:51:b4:da:09:d1:f7:fd:
                    5d:4c:2d:5e:39:e9:13:70:0d:f1:23:79:5f:d8:ed:
                    4f:cf:f0:11:1c:48:f4:74:0f:26:8d:32:db:19:87:
                    aa:58:bf:c6:0e:33:0a:57:86:bc:d9:61:c7:bb:d7:
                    d0:37:e0:8b:59:0c:35:dd:1d:cc:f8:56:77:8c:26:
                    0b:56:5f:96:fd:c3:55:49:30:99:ca:6b:ef:45:63:
                    60:5d:4a:05:02:5c:e1:56:d6:c8:1c:0b:78:78:9b:
                    12:79:7d:cb:8e:7c:8e:9b:df:85:8f:a3:b2:e7:3f:
                    9d:45:17:f9:fa:f3:51:43:9d:5c:8e:54:a2:6a:90:
                    35:c1:43:cf:3b:c9:a6:d7:a0:2d:90:69:69:ff:ba:
                    98:d2:2f:e8:da:1b:49:f0:2c:e2:8b:bb:73:33:0b:
                    a6:5f:90:41:8c:31:60:56:ae:52:9f:42:69:8d:90:
                    01:64:94:0b:07:9f:e7:ed:e3:d8:b6:f0:72:f0:c1:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:BE:63:4D:1E:C5:BC:9B:68:3A:1A:E5:B0:DE:D9:FB:60:C7:4C
            X509v3 Authority Key Identifier:
                keyid:C3:43:B3:BB:83:A7:E2:3F:AD:95:AF:8D:23:2B:52:05:2A:0F:DE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w0Ozu4On4j-tla-NIytSBSoP3nI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B7/66CDA4E8911611EA91C4650CC4F9AE02/w0Ozu4On4j-tla-NIytSBSoP3nI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:30:14:cd:4e:51:32:e6:b3:97:60:9c:9e:a6:1d:cc:8b:
         6a:1d:32:1f:d7:a1:ed:c7:cc:9e:87:3c:28:a8:2f:da:55:5e:
         e5:23:83:80:57:50:b9:a2:94:78:f9:c3:b6:29:95:70:fd:bb:
         cb:7e:da:42:34:12:9e:e9:d4:9f:e6:cf:e3:54:7f:cf:e9:05:
         72:d4:af:15:ee:d0:1f:24:dc:78:cd:7f:8b:54:22:4a:59:e9:
         40:9c:a8:5c:be:7c:89:2d:77:98:e1:af:5c:69:13:99:e2:01:
         54:f5:5d:b9:58:1e:5b:3e:9f:bd:57:15:16:8f:c7:ae:04:7a:
         c2:6f:54:39:ba:94:4c:45:36:ff:5a:b4:74:37:97:30:82:92:
         76:5e:4f:93:9d:1f:7d:f3:96:57:11:e3:df:03:22:33:84:5a:
         fe:e1:90:e1:1b:b3:22:b5:80:6c:14:83:bb:5c:3d:3e:1b:4e:
         79:42:23:a0:00:47:0d:64:7d:83:e4:de:d1:cd:0e:3d:9a:5b:
         dd:1d:39:7f:e2:3f:65:85:f3:f8:36:c6:49:5b:d3:d0:0c:85:
         5b:18:26:60:1e:59:58:f0:43:4b:c3:7c:f9:fc:d0:49:cb:da:
         8f:d9:e6:9f:44:d6:9e:69:91:54:9d:b7:63:f9:8e:ba:10:b9:
         99:18:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org