Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
File:                     _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json)
Hash identifier:          qC29EGnt1Cm+IgkJa76607RMUWffkV5asQhFWZxBTyI=
Subject key identifier:   C6:71:71:42:25:E3:C4:71:EA:1E:80:34:46:C7:E8:E2:14:BF:DD:D1
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Certificate issuer:       /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
Manifest number:          01BB
Signing time:             Sun 19 May 2024 04:30:40 +0000
Manifest this update:     Sun 19 May 2024 04:30:40 +0000
Manifest next update:     Sun 26 May 2024 04:30:40 +0000
Files and hashes:         1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: oaMjVf4R5WsJ4sKCVbkGdGeEF2Lds2OoIITihnR5Nlc=)
                          2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: de6AgBdYKFDLnPJ/PEBqqKvZDu++14qokiXxuhux/kU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
        Validity
            Not Before: May 19 04:30:40 2024 GMT
            Not After : May 26 04:30:40 2024 GMT
        Subject: CN=66498070-cac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:a8:71:bf:95:59:b8:22:a1:a5:2a:94:2e:
                    f9:6d:cd:9c:1e:b2:dd:50:21:43:c2:9e:7f:78:a8:
                    48:96:2f:55:a6:72:25:51:be:27:12:40:43:10:42:
                    9a:29:18:11:4e:50:9c:df:86:5f:db:7b:51:36:2d:
                    f5:18:d4:82:92:e2:83:a5:2e:93:a1:3f:bf:e2:1e:
                    d9:4a:19:22:a9:3f:c0:19:12:c2:e9:cc:7e:29:2d:
                    3a:9d:70:9d:d3:d0:1c:9e:2a:0a:9a:cf:43:19:06:
                    c0:2b:ba:4f:63:77:7a:a0:e2:e2:f1:67:78:dc:76:
                    dc:92:16:16:8f:bf:9d:c7:80:9e:9f:c7:d6:ff:f8:
                    09:f7:11:64:30:13:cf:4a:68:7f:f5:2a:37:d8:58:
                    2c:e9:3c:5a:c5:1c:15:cc:91:50:ea:ab:5c:c3:14:
                    3d:86:7c:16:57:03:77:4d:ef:85:06:5c:ec:8b:ff:
                    2e:d5:05:6e:0d:8a:31:1f:bd:c0:86:b0:c8:29:e7:
                    53:75:5a:b5:fb:5c:4a:9c:65:b3:1c:1c:74:47:92:
                    59:81:56:96:65:57:39:d5:49:68:60:22:74:e5:9d:
                    59:93:31:e0:3a:cb:19:30:5d:8d:e7:91:97:98:ba:
                    f4:dd:23:f5:e0:77:e0:37:8e:54:08:23:0d:63:1a:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:71:42:25:E3:C4:71:EA:1E:80:34:46:C7:E8:E2:14:BF:DD:D1
            X509v3 Authority Key Identifier:
                keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:53:44:ab:f6:30:d2:a7:47:30:27:fe:bb:b6:f5:d1:db:
         92:88:33:62:75:e9:6f:bd:d9:b5:6b:a2:47:84:3e:f7:c5:1b:
         9b:b4:03:f5:1f:ed:0a:14:b5:b2:73:a0:0d:c7:d8:e3:a6:bf:
         16:c4:8f:e0:83:14:59:f0:ed:45:bc:c0:06:26:e6:0b:bf:32:
         67:8c:f1:32:43:cf:0b:e9:68:c9:78:e5:ae:b2:7b:43:d0:34:
         f9:58:6d:15:2c:33:ba:11:4b:36:f2:aa:be:fb:c0:2c:e8:03:
         f5:b2:bb:5e:1f:60:fe:06:f5:bd:b5:cc:06:4a:cc:f2:9d:3c:
         48:bd:b4:73:ae:61:d8:03:5f:1f:7a:af:30:de:a4:25:88:63:
         75:89:bc:0d:13:60:57:ab:5e:8b:6b:e2:76:5b:ee:bf:c7:20:
         6b:b2:92:1a:92:63:d4:e2:36:e4:4b:af:70:cf:65:8c:d1:f7:
         6c:d4:8c:fa:4b:f1:ee:cf:db:6e:e1:8e:7d:c9:13:be:bb:53:
         c7:06:a4:99:97:e4:3e:af:81:e9:16:e4:72:1c:3b:b9:98:fd:
         b2:53:77:ba:18:51:b8:0b:2a:a1:01:75:e9:29:89:31:7b:99:
         cd:06:6a:10:0c:57:b3:a7:6d:92:9a:d8:26:78:68:6a:b1:6f:
         30:db:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org