Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
File:                     9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json)
Hash identifier:          NamzLxnT53CsgmY+xO+4Pge9x7jIb44V315bUVqCXGs=
Subject key identifier:   BA:2F:13:65:12:A6:DF:2F:30:4A:4A:26:D4:0F:6E:AE:EE:00:98:69
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Certificate issuer:       /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
Manifest number:          07E1
Signing time:             Sat 18 May 2024 22:00:20 +0000
Manifest this update:     Sat 18 May 2024 22:00:20 +0000
Manifest next update:     Sat 25 May 2024 22:00:20 +0000
Files and hashes:         1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: l1fB1jS6Y9yjF2t9nXO6Euv6aPxvQdILKltSSS9R3F8=)
                          2: A444CF80020211EE81B0F721C4F9AE02.roa (hash: zjX3p3uiX3pyZa+kjVXlshL3g8vr3pEKpQtG6FUlOfM=)
                          3: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: 8QIBOiX3H5mNTjG1m2NriE94AWtCOLgFQpnWCb2hzRI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl
                          rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
        Validity
            Not Before: May 18 22:00:20 2024 GMT
            Not After : May 25 22:00:20 2024 GMT
        Subject: CN=664924f4-83d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:51:b7:8c:6a:c2:89:68:43:78:d8:05:ac:
                    2b:7c:61:5a:53:58:2a:ec:07:0c:20:e2:c5:5d:72:
                    86:a0:e5:26:e0:41:9d:46:36:de:8a:da:da:db:35:
                    fb:c5:63:d5:1f:73:7a:44:3a:f5:23:4b:fe:67:11:
                    23:61:8a:88:e0:b5:38:8b:82:40:4f:c3:5f:28:23:
                    dd:93:f5:20:a2:c6:bd:d8:5d:32:44:8a:e9:8a:0e:
                    59:f1:f9:1f:74:9f:18:dc:92:82:2b:d1:d7:dc:2d:
                    aa:70:dd:26:27:f8:95:90:23:13:f0:60:33:70:d9:
                    59:19:c0:7f:86:b8:6f:42:60:86:83:61:75:8a:3b:
                    ef:bc:6f:96:1b:77:02:c9:b5:73:b3:fd:4d:5a:3c:
                    44:b7:84:3e:5b:1c:4f:f6:a1:f7:ba:fd:0e:58:5e:
                    24:e3:0d:e4:08:68:2d:94:43:f3:82:ca:f3:8e:ee:
                    0b:6b:c0:94:a1:cf:df:79:78:b8:a6:d6:7b:31:82:
                    5d:b6:71:b8:2c:5b:59:ae:c3:92:7d:26:c9:a9:fa:
                    d3:01:fa:80:5c:31:92:a2:1e:14:92:34:e1:de:29:
                    c1:d0:3b:eb:a1:99:6f:18:a0:b6:c8:6d:e6:a1:6e:
                    cb:0b:fc:c0:8e:2b:d4:61:29:79:b2:1b:54:f0:b6:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:13:65:12:A6:DF:2F:30:4A:4A:26:D4:0F:6E:AE:EE:00:98:69
            X509v3 Authority Key Identifier:
                keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:6b:63:ea:8e:7a:a4:39:f3:76:3d:9f:81:60:37:ed:b2:
         78:69:c7:49:14:b7:c4:8e:bc:0c:f8:04:6a:9d:ee:37:b7:ca:
         eb:f3:42:b8:72:58:c7:44:53:a0:ab:33:87:ea:6a:a1:dd:b7:
         f4:ae:50:0e:b1:2a:b8:2f:1e:44:1a:c4:10:75:9f:4b:13:27:
         13:41:eb:a7:05:12:ce:97:f3:1f:24:85:b5:82:fe:63:35:ff:
         82:58:b1:02:2d:0d:84:b1:c8:33:7d:51:07:e4:aa:11:f3:50:
         ba:67:80:d8:b3:52:04:9e:64:0e:40:05:f4:52:6d:ca:50:e8:
         5f:61:c2:30:ef:45:03:34:a0:df:ad:a0:5e:03:5a:e1:be:c0:
         b8:c4:b0:80:3c:f3:3a:9f:85:bf:96:9c:bb:c7:da:cf:d1:dd:
         58:3c:3b:cd:99:97:77:9e:ee:3c:a7:48:8d:f1:90:cc:fc:cc:
         de:ae:20:7c:6a:fd:c6:8f:81:63:18:81:26:d8:1d:5b:47:ec:
         34:5e:a1:0b:07:40:e9:de:89:b2:6f:4c:b7:90:8a:df:ef:a2:
         e0:47:28:e7:93:f4:43:f2:4f:69:4f:86:1a:b9:b0:83:96:23:
         ca:1b:13:c4:a5:32:df:ff:6f:76:8d:27:1e:e1:05:81:55:aa:
         81:71:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org