Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
File:                     HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json)
Hash identifier:          SADA97i2TecQZtcbQ4BJt6DKxJqrzfgTW7z6Z4owLcY=
Subject key identifier:   06:31:9B:A2:F4:4C:63:66:9F:4F:1F:87:2B:30:26:AF:1B:15:E6:09
Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
Certificate issuer:       /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
Certificate serial:       045B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
Manifest number:          0456
Signing time:             Sun 19 May 2024 01:51:55 +0000
Manifest this update:     Sun 19 May 2024 01:51:54 +0000
Manifest next update:     Sun 26 May 2024 01:51:54 +0000
Files and hashes:         1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: pYeeU4COdVneLOFcATfJONdrpEyRwdCe7d+7rC8UNtM=)
                          2: 149FB86C057511EC988EF77BC4F9AE02.roa (hash: K/5g4LbcV5JgwmzgpMURAj/bNGFQ2ixWTsmM0mwD96Q=)
                          3: 0AC20CE6846211EEBA443743C4F9AE02.roa (hash: N3M1hSqx5oHid2DsYTGtKIE5HiaDQHv1bi/QT2l7XTI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl
                          rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
        Validity
            Not Before: May 19 01:51:54 2024 GMT
            Not After : May 26 01:51:54 2024 GMT
        Subject: CN=66495b3a-a885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:e7:4b:28:e6:ab:8f:37:73:70:ac:04:e6:
                    5f:0a:f7:03:a8:91:bd:75:25:2a:5a:d9:ca:27:72:
                    4c:3e:b4:5f:a2:4f:cf:3a:a0:8b:85:68:45:00:a0:
                    8f:7c:19:49:5a:8f:53:92:c6:e1:37:89:81:ac:72:
                    0a:a6:9f:e2:14:f7:b9:04:3e:a0:d0:1c:a9:36:d8:
                    db:4e:65:1d:74:15:fc:ee:da:42:37:c5:55:1f:9e:
                    8b:a1:c0:20:d8:dd:06:96:79:ea:85:af:31:46:25:
                    cf:fe:22:c7:d4:79:85:80:42:79:8f:23:41:70:d2:
                    e6:eb:88:27:c6:1a:54:7e:c6:b5:b3:51:a8:d3:a8:
                    02:e5:7d:16:08:50:16:f6:f2:da:34:48:6a:65:52:
                    83:6e:54:f0:61:c8:21:56:93:43:e0:f7:d2:11:96:
                    75:38:ff:6e:ec:c1:b5:33:3e:58:d7:be:87:94:dc:
                    1f:9b:d0:91:71:2d:a1:1d:b2:d8:75:ef:b4:6e:67:
                    2d:2f:ed:4c:d5:0b:33:1b:14:f8:8f:e1:46:a8:1d:
                    7d:60:0f:89:a4:46:ac:74:a3:05:ee:4f:20:8e:09:
                    d4:14:53:c8:c2:05:d4:28:ee:38:f2:27:d8:27:9f:
                    b1:51:4f:df:78:0f:c1:0f:e5:10:8e:ad:d2:56:99:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:9B:A2:F4:4C:63:66:9F:4F:1F:87:2B:30:26:AF:1B:15:E6:09
            X509v3 Authority Key Identifier:
                keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:ad:8c:68:d1:1a:2d:59:77:9d:a8:a5:7f:49:d0:de:72:
         74:2f:a8:f9:51:c5:8e:b8:d4:f3:c3:7a:c3:f3:0f:d7:56:c0:
         84:eb:7e:82:f3:03:26:1a:9c:b1:49:0b:63:25:08:39:0f:1a:
         f4:aa:6a:fe:85:f5:92:2b:08:c6:54:c7:a1:83:c0:e0:93:b3:
         6c:bd:96:e7:a0:59:3b:0d:8c:9d:db:5c:fc:c8:00:72:a3:17:
         72:ef:f6:59:67:cb:ba:5e:5d:40:a9:a0:a1:8e:ac:a1:aa:d6:
         25:43:8b:f7:e1:a3:70:11:20:12:a8:6c:b3:fc:79:19:be:e0:
         a8:28:7a:18:ef:54:1b:2f:c4:df:5f:12:34:95:7d:17:ff:fd:
         81:5a:2d:3e:94:c6:7c:1f:8b:60:bb:a4:44:5b:4f:c6:ed:bd:
         e7:3d:42:0e:12:cd:ca:b2:f5:34:10:27:b2:1d:a8:ec:81:34:
         72:f8:de:a2:21:26:fc:16:33:fc:bc:83:84:f5:28:ab:18:18:
         e9:f9:ef:20:f4:b2:21:76:c6:e9:91:a5:d4:f1:8d:fa:31:8b:
         7a:bd:07:63:e2:55:0d:16:b0:a1:45:03:f7:82:13:ff:31:89:
         8e:7a:ee:93:2d:ef:90:c7:54:5b:bc:db:33:90:6f:9b:e2:09:
         8e:61:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org