Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File:                     1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier:          LE613tTQPkfus5ePoC8mesax22ZvfO31uaPBnZdjrfo=
Subject key identifier:   8E:BD:0B:5E:15:4E:BD:64:BC:59:23:40:05:97:70:8D:D7:8F:F5:47
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number:          026E
Signing time:             Sun 19 May 2024 03:48:23 +0000
Manifest this update:     Sun 19 May 2024 03:48:23 +0000
Manifest next update:     Sun 26 May 2024 03:48:23 +0000
Files and hashes:         1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: gnpDTqhy4afLqNo1qMP+qbWoCfU4y8NiB+NpVEaabg0=)
                          2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: HT+iJuMBxdgYK5g+jEQD2a03TeM+F29o6gZsZ/BsbjI=)
                          3: F0E906D6046C11EFBDB55E14C4F9AE02.roa (hash: +EvIAKSVcLLKRH7JM7c6If3efy9mrsYAMLXqlQEuIUY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: May 19 03:48:23 2024 GMT
            Not After : May 26 03:48:23 2024 GMT
        Subject: CN=66497687-2dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:4a:bf:7d:85:99:48:b4:8d:b6:4a:55:40:
                    9c:51:eb:08:bd:70:06:68:13:bb:1b:4a:ac:4f:d9:
                    14:19:9d:67:20:d7:b5:a1:8e:50:df:9e:84:a4:be:
                    c1:8f:33:1f:5b:05:30:dc:d8:a1:48:17:af:0a:9a:
                    32:2d:12:8f:fa:d7:5f:a9:04:61:f8:7d:17:d3:0d:
                    8d:4c:a1:ca:12:15:4f:c8:eb:27:ad:aa:f7:0b:4f:
                    6a:47:04:1b:25:88:bc:ab:10:97:58:37:b8:c0:64:
                    97:0a:70:99:5e:b2:bb:10:95:b5:b7:3d:62:38:aa:
                    22:91:db:a6:58:4d:b1:68:af:d1:27:a9:13:a7:de:
                    d8:b5:14:76:f6:18:16:ae:8a:74:ec:a4:fa:85:87:
                    00:1c:70:d5:c5:fd:42:c6:0d:52:e1:13:f1:62:a1:
                    e1:13:8c:c5:ab:63:c1:fc:48:96:b2:c8:da:f3:a9:
                    20:50:c3:81:7a:8d:34:57:c2:f0:50:3d:54:8b:5d:
                    11:cd:b6:c1:6d:12:2d:81:f1:9d:a6:3f:10:d7:43:
                    9b:99:25:b9:17:39:14:58:8e:3f:30:a1:32:6d:16:
                    40:07:7f:88:f3:70:fd:4d:98:eb:47:9b:d6:57:c2:
                    63:a1:92:ac:4d:a5:84:19:7e:d6:f2:69:77:b7:3d:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:0B:5E:15:4E:BD:64:BC:59:23:40:05:97:70:8D:D7:8F:F5:47
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:60:8d:3f:64:91:be:20:ed:bc:d2:87:40:5d:fd:47:e1:
         5e:b9:70:ee:97:0a:1e:78:d0:f9:7c:c6:98:2b:45:70:71:a5:
         e3:d0:17:5a:91:89:9f:77:66:81:13:21:6b:f4:82:e6:a0:f3:
         0a:57:4e:46:b6:50:3f:8f:19:8a:53:2d:66:09:ff:a4:09:0b:
         ae:d8:70:d7:5c:71:42:d6:3c:1d:68:03:0a:5b:db:84:c3:34:
         c1:bc:a2:3f:5e:bd:3c:2c:e3:63:85:f6:e8:27:5e:3b:0b:61:
         91:97:87:d3:4f:1c:e2:7b:7f:c7:af:da:24:a0:4e:6f:cb:87:
         93:a0:50:be:45:ab:e8:b2:40:6e:df:b4:d1:21:9f:8d:f2:09:
         04:75:1f:4c:a2:7e:c5:92:50:0d:ee:c9:30:f6:4d:e2:fd:6b:
         54:e4:31:9e:6d:65:3e:0a:04:cc:f6:81:ba:6e:dc:8e:1c:14:
         92:e0:84:d5:27:59:03:45:b9:71:e4:c4:dc:e1:38:ab:2c:a5:
         83:c1:f4:ed:96:0b:49:e0:74:ab:eb:66:27:c9:74:6d:d0:6f:
         a3:0c:3d:76:ed:7b:55:8f:8f:b7:29:cb:8a:de:34:1e:3a:7f:
         8e:10:16:e3:df:15:36:87:e3:25:f9:71:0c:b7:3a:87:ec:4f:
         96:0e:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org