Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File:                     1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier:          0qj/+hiYx9rkFLschnuuXGIAFYbnomSpQfl3C+srAlU=
Subject key identifier:   E3:22:28:0C:F2:90:1A:D4:87:5A:DD:D4:AD:C9:90:A7:C5:DE:9F:90
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer:       /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number:          1D
Signing time:             Sun 19 May 2024 08:41:19 +0000
Manifest this update:     Sun 19 May 2024 08:41:19 +0000
Manifest next update:     Sun 26 May 2024 08:41:19 +0000
Files and hashes:         1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: LAtjYF11BNdbLbWNPPIW8Xf/kZSyU232IEzy0ePzbTM=)
                          2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: Rg0JDlVpf5av9xgphUcwW8L/umN7c++X0aMQPmcAyBg=)
                          3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: pNXp/zitcEGKo6/gAz8K4qpjBS4Aa7CoWSI3NGsPSw8=)
                          4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: aGLy/8PjmHM9bBnjKLxACS5cFbKo+n0HrFlLFQU8ICc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
        Validity
            Not Before: May 19 08:41:19 2024 GMT
            Not After : May 26 08:41:19 2024 GMT
        Subject: CN=6649bb2f-78e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:b1:79:fd:93:95:fd:c8:26:dc:02:3f:f5:
                    8c:85:68:1e:2f:ab:57:16:b4:ac:e7:91:d2:fd:a4:
                    8a:b1:ee:e2:26:fd:03:d8:e2:15:d8:e5:59:fb:37:
                    5c:45:fe:c7:1e:d4:af:92:e2:e6:3d:53:42:c4:47:
                    bf:d4:46:ba:84:3f:b0:86:14:f2:69:48:39:78:6f:
                    73:f9:a6:08:a3:e4:6e:69:df:69:25:0c:53:ae:91:
                    9e:ab:24:f1:ba:85:4f:78:2b:30:9f:88:36:69:09:
                    68:16:80:7c:12:ee:a2:50:bf:f5:fc:25:e5:c3:e2:
                    be:f1:9c:4a:9f:91:2f:36:74:fe:53:82:9f:13:86:
                    1e:74:3f:53:90:4e:15:12:73:42:34:6d:e3:ba:3e:
                    d1:11:8e:ad:87:83:bc:b6:1b:f0:e4:58:77:1b:6a:
                    75:31:5d:69:78:1f:35:cb:db:e1:f6:0c:b5:c3:09:
                    a7:73:75:cb:e1:84:44:4e:c6:2a:3e:af:98:3b:51:
                    ef:21:55:9f:33:d8:54:c3:36:b4:e6:47:3f:bf:0a:
                    e5:06:76:1c:88:da:c6:27:39:c3:c4:2c:aa:e5:4d:
                    9b:20:29:69:07:fd:9d:29:0e:8d:78:ed:c8:5f:2c:
                    ee:19:3e:15:2d:dd:47:17:04:89:2a:fa:64:d2:c9:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:28:0C:F2:90:1A:D4:87:5A:DD:D4:AD:C9:90:A7:C5:DE:9F:90
            X509v3 Authority Key Identifier:
                keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:48:70:7c:ea:db:1a:b6:54:15:97:a0:f1:94:5f:cd:a1:
         40:01:1a:60:8e:55:10:12:28:58:b6:42:76:9f:43:42:81:ac:
         12:6c:84:09:ea:e3:db:95:79:1c:62:bf:b1:e5:ac:f0:9c:32:
         ef:8b:b6:8b:4c:4a:2c:d5:2e:41:e3:ed:ae:bc:03:d4:8e:3b:
         fb:55:77:2c:69:ef:46:6e:a0:60:df:ea:14:a3:d9:e2:66:fe:
         64:12:74:4b:55:9e:2a:08:63:2b:c3:43:fb:5b:95:07:7d:c9:
         33:6f:2a:57:e4:79:d9:c5:76:f0:b3:4c:98:62:bc:39:0b:61:
         73:5d:8c:26:73:a6:b9:4d:26:b4:8b:36:24:79:45:3c:f8:fc:
         83:29:1c:1d:da:81:d3:0c:17:c6:0b:54:7d:7a:53:fa:f5:34:
         e4:5c:8a:77:4c:4c:79:31:49:ba:ac:a4:90:49:af:44:49:59:
         64:95:20:12:b5:63:f9:5c:7e:88:49:48:b5:37:15:b1:29:df:
         c6:6c:f5:bc:bb:a7:55:de:b9:ff:d4:6f:0e:10:f1:d9:73:fc:
         67:a7:19:9f:0b:55:14:e8:68:85:7a:e7:79:66:78:b2:19:f8:
         6e:0d:fb:ab:ef:42:e6:1b:43:9f:fe:b9:a0:52:a3:03:67:84:
         d1:65:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org