Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File:                     dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier:          aAlaqQHTvH3kWmg6ruuIZjW6GH4NhJfs4e0wgOzSMuU=
Subject key identifier:   FE:FB:A2:0F:5D:36:5C:92:13:CA:D3:DA:F6:B8:08:0F:21:F4:71:77
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer:       /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number:          0271
Signing time:             Sun 19 May 2024 03:52:50 +0000
Manifest this update:     Sun 19 May 2024 03:52:49 +0000
Manifest next update:     Sun 26 May 2024 03:52:49 +0000
Files and hashes:         1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: nMIlBjMCTe1hd3eY03deR14WO5ggIQDCjEMavAzg3cA=)
                          2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: uNy/av1c0rAoryuYfcF23ivFrE+QY34iEnpGJhnQKmU=)
                          3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: o/ca1C0ZW8e6WT51Xg0+GAtLq1PmKwd59KzBfJNW45Q=)
                          4: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: uqa8g1C28MUoA21YpNtb7zHbRZJuEhj3XqsYhfug7Rk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
                          rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
        Validity
            Not Before: May 19 03:52:49 2024 GMT
            Not After : May 26 03:52:49 2024 GMT
        Subject: CN=66497792-89fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:22:46:4d:c9:61:c9:60:e4:1a:cb:52:64:
                    fc:9c:d2:8f:ea:30:0d:6d:36:81:3c:72:ef:c5:25:
                    83:b3:d1:b7:e6:da:a3:6e:22:4e:8b:65:f2:1e:bf:
                    6b:de:91:37:8b:f8:d0:50:13:97:1f:ed:b8:f4:c0:
                    53:d5:32:71:59:68:12:4a:8b:0c:df:8d:d6:d7:06:
                    77:a4:18:ad:3c:f2:85:5c:d2:39:15:2f:15:fd:1b:
                    f7:ac:e1:81:a5:8d:49:85:ea:0e:98:26:bd:1f:9c:
                    2d:80:72:70:1d:db:21:b9:c3:c8:49:5e:9b:b4:4d:
                    d3:be:86:b8:3f:48:23:a3:9e:ed:83:2a:ed:b7:68:
                    38:0e:4c:38:9b:af:58:0b:44:ed:43:ef:0f:93:c8:
                    bd:49:6f:76:44:47:17:b2:73:48:ff:d9:73:c0:e4:
                    e7:15:bf:ce:ba:6d:db:d2:ff:df:fb:83:ba:1d:5e:
                    6a:cd:22:5c:0b:f2:65:dc:f4:e8:16:99:71:2a:e2:
                    d9:9b:e0:16:cb:59:ce:36:25:ea:2f:f2:98:17:74:
                    6b:e5:27:9e:65:03:62:30:3a:09:74:b1:53:85:39:
                    a3:c7:fd:6a:2b:2b:00:88:4a:4f:d7:5a:ce:1e:97:
                    08:f8:56:61:d0:57:9d:78:8a:f4:97:94:83:d9:d8:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:A2:0F:5D:36:5C:92:13:CA:D3:DA:F6:B8:08:0F:21:F4:71:77
            X509v3 Authority Key Identifier:
                keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:b7:e4:9f:e3:89:e5:80:92:dc:d9:de:7a:9d:09:12:eb:
         d2:10:02:d0:9b:ec:92:53:bc:ec:1b:6d:1c:62:10:3c:75:21:
         2a:1d:07:11:32:62:d1:0c:b2:e1:76:f5:da:17:ea:26:7a:4e:
         19:8c:d0:01:5b:32:68:4d:31:d1:a1:33:8d:45:c4:62:b0:5a:
         49:47:ce:97:13:a8:83:e3:a5:d8:c3:a2:49:e2:0e:79:d7:e2:
         4c:3f:8c:85:36:1f:35:74:1f:04:2e:53:1f:ac:e2:de:98:67:
         4e:09:80:33:2c:61:53:86:1f:04:ba:f9:35:94:d2:4f:31:e9:
         07:69:1b:fd:4c:9a:25:9f:f0:6c:55:13:d5:22:2f:3a:c2:66:
         33:d3:e6:7c:ab:a8:05:7e:e6:52:25:65:fa:32:8f:cc:66:58:
         3a:67:5a:89:5a:80:4b:cd:72:b1:39:97:74:59:54:2b:31:4c:
         49:e0:a6:a5:9a:38:49:49:76:77:9d:1e:53:73:c7:aa:10:d6:
         4f:d2:10:19:4e:c9:25:07:0e:a7:40:a4:e0:32:ee:8a:86:e2:
         f2:d8:a4:23:24:92:32:53:34:dd:07:dc:5c:9d:76:b8:ba:a5:
         f9:a0:1c:c2:8f:f4:5b:af:29:21:3a:64:f4:50:66:d5:9a:62:
         03:f4:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org