Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          freZVWLL6p0+nuCqj2DJ3gof4TAoYUw0TBjQZXps6Pc=
Subject key identifier:   97:75:F9:F9:39:BC:64:69:27:3F:08:80:DA:40:C6:FB:2C:6D:A9:E8
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          45
Signing time:             Fri 31 May 2024 09:05:45 +0000
Manifest this update:     Fri 31 May 2024 09:05:44 +0000
Manifest next update:     Fri 07 Jun 2024 09:05:44 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: AJHVwVNeyDn4LH/nsSNRNfBJ7QtRXMk8u59PIz+8j4A=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: kRccPK3IKp4TRD5L4za5mKd4/pqRwQieUy3McXFTulI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: May 31 09:05:44 2024 GMT
            Not After : Jun  7 09:05:44 2024 GMT
        Subject: CN=665992e9-534d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:84:63:a4:ec:21:41:7e:36:90:c7:ab:d2:
                    7e:a7:0b:d8:cc:5c:9e:60:f8:a1:49:18:50:4d:85:
                    59:3c:ab:40:e2:44:3f:e8:0e:8d:1a:44:b1:79:50:
                    8d:07:d4:e6:ce:aa:45:87:fd:43:2f:50:e4:61:00:
                    ac:a1:2e:8a:1f:b9:c4:dc:6b:5c:11:17:75:99:d3:
                    27:2f:6f:4f:ef:1a:86:fb:cd:0b:ed:5c:ca:49:71:
                    e8:0e:e7:bd:f5:7e:b7:75:5f:a2:d8:66:b5:18:c1:
                    81:fe:22:8c:0d:19:fd:df:f1:c3:0c:0c:3a:5c:3e:
                    63:6a:e9:7a:da:12:9a:f8:52:5e:c2:8c:93:e8:0a:
                    9d:98:10:cc:81:72:5e:00:d2:26:8a:95:36:6e:59:
                    e3:57:45:cd:9d:f6:98:9a:67:1a:f6:bb:ab:a7:d0:
                    dd:73:96:7a:ac:9b:60:8b:46:28:0c:d6:2c:a1:b5:
                    c0:44:a6:64:d5:c4:ef:04:eb:d9:f1:78:ab:af:78:
                    29:31:3f:35:59:10:68:3a:46:d8:b7:8b:1b:3c:7a:
                    d8:8b:70:fd:8c:09:01:6f:45:46:da:0c:3c:c1:e6:
                    72:85:db:71:b8:00:db:0e:45:f0:0a:0a:55:b5:e7:
                    3e:fb:82:35:8e:05:4a:ca:99:33:b6:6c:4c:d2:6a:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:F9:F9:39:BC:64:69:27:3F:08:80:DA:40:C6:FB:2C:6D:A9:E8
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:8d:a4:1f:01:e2:e1:92:3f:42:ce:fb:9d:ca:dc:43:6b:
         3d:38:66:a3:12:d4:17:b7:a7:ad:f7:c8:25:2b:81:29:16:ab:
         5a:4c:97:91:b1:18:a5:d0:03:98:8c:1f:88:b2:ea:65:d8:53:
         9e:cc:6d:45:0b:37:80:2b:d3:99:86:74:54:e0:0b:32:95:34:
         ed:3a:f0:84:b6:3e:01:3d:c0:7d:45:6a:2b:c1:f6:25:6d:50:
         d4:78:d8:03:68:76:c0:e2:6d:1f:b3:77:be:d1:da:f0:52:48:
         1f:91:20:bb:02:af:2b:d1:60:76:0a:0f:60:88:93:5c:56:58:
         3c:c8:e8:01:bf:ce:41:6f:61:27:d8:cb:0a:23:a2:ce:ff:85:
         64:8d:97:40:f0:16:16:3b:5c:ea:c5:42:02:10:fc:c8:b7:7a:
         2f:59:57:3b:f6:2d:8a:06:ad:f0:b9:e1:88:1e:c9:a8:a4:59:
         9d:3b:01:97:3a:f8:47:7a:9f:ad:9e:26:2b:f9:c4:cb:1b:b6:
         b7:24:02:6b:d0:34:04:bf:5c:cd:e2:fd:61:8b:11:e7:a1:82:
         27:30:f9:5f:9e:24:78:e2:11:52:a2:fc:fd:15:27:59:4e:a3:
         0a:85:ec:d2:32:68:69:23:26:43:05:c9:79:05:3b:b7:cf:4b:
         9f:eb:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:42:51 2024 by rpki-client on console-fra.rpki-client.org