Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
File:                     qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json)
Hash identifier:          kcUPivYTfNHinTjE9AypUmzASM9FCVPpcQIGMrR+Wow=
Subject key identifier:   62:D7:AA:EF:EF:97:49:5F:D0:26:52:E1:CE:00:63:DC:2C:77:F4:23
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Certificate issuer:       /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial:       05C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
Manifest number:          05BE
Signing time:             Sun 19 May 2024 00:09:22 +0000
Manifest this update:     Sun 19 May 2024 00:09:22 +0000
Manifest next update:     Sun 26 May 2024 00:09:22 +0000
Files and hashes:         1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: Anl1XGoXophSQzOrs3kAk3dDtMgGW6srSwKfUbegqVQ=)
                          2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: n4lT+gWmvtn9anqCH3BPKg8IGWZd3CwkT2CnrdkmB4M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl
                          rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
        Validity
            Not Before: May 19 00:09:22 2024 GMT
            Not After : May 26 00:09:22 2024 GMT
        Subject: CN=66494332-286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:dc:e1:ba:3a:59:0a:6c:2b:15:52:24:7e:
                    61:63:8e:03:53:34:78:ee:0b:91:74:c6:6c:d1:18:
                    38:f8:0a:44:4e:af:1c:f8:df:d8:b2:38:4d:fd:62:
                    ad:49:af:16:c8:7b:bc:ef:f0:36:8d:6f:5f:b2:57:
                    e7:cd:1c:89:26:f3:3a:65:df:1a:7a:f5:34:c4:5e:
                    e6:1c:be:ef:bf:c6:52:57:dc:a7:22:4b:12:27:7f:
                    61:b9:e9:32:0d:10:5e:df:9c:23:4a:ec:97:04:e9:
                    9e:ad:c9:1c:ea:18:72:d9:c4:f5:9c:95:be:f7:38:
                    26:7c:47:b7:83:67:8b:a0:be:6d:cb:ae:83:9b:95:
                    e0:46:18:ac:f4:69:2c:9a:ae:4d:b5:28:34:b9:d6:
                    8b:fc:26:e6:b4:da:69:4b:f7:3b:69:eb:49:72:2d:
                    73:08:ce:27:2e:0d:23:a2:f4:0c:4a:42:3b:b0:2a:
                    8e:15:75:2c:79:1e:cc:c8:85:9a:35:a0:33:9d:a4:
                    c3:04:af:18:8e:40:ff:06:61:96:85:af:5c:3e:b4:
                    c2:43:41:64:d1:8d:af:2e:1a:69:be:13:0d:c5:a4:
                    73:00:38:4c:25:f8:77:00:13:12:72:da:5a:3b:ed:
                    d8:0f:b3:bd:e7:5e:b1:88:d5:08:57:2b:43:9c:f1:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:AA:EF:EF:97:49:5F:D0:26:52:E1:CE:00:63:DC:2C:77:F4:23
            X509v3 Authority Key Identifier:
                keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:da:6d:c1:30:10:17:41:c8:0b:33:c3:a1:32:95:6b:0d:
         e2:42:67:6c:5f:51:e6:bf:c4:4f:67:dd:17:52:99:a1:17:01:
         16:40:96:bf:5e:42:92:85:bc:f9:64:ea:3e:b6:39:fa:72:87:
         35:cf:08:01:4e:11:39:4e:98:27:cb:98:ce:e4:81:62:f2:59:
         23:90:c1:b7:79:c7:aa:b1:01:cf:46:97:80:00:93:1f:7a:63:
         1f:b0:4d:d7:84:cd:df:80:a2:9f:d1:3f:d8:06:e6:88:77:99:
         3a:c0:8b:e3:01:14:48:66:38:16:ac:2b:66:c4:24:66:9e:3a:
         26:05:a7:cd:71:a6:5c:6a:68:bf:4b:bd:16:49:72:a7:d7:06:
         c1:c6:7d:75:4c:5d:88:4b:45:5b:c2:54:87:9e:60:b8:84:6d:
         f7:a2:ff:38:45:d8:0f:34:d9:a0:40:df:8f:6a:a7:a8:8f:dd:
         57:f7:d0:56:50:bc:ac:60:7e:09:f5:e8:a9:e4:c0:08:5b:91:
         f6:f6:f5:5f:9d:bf:b6:70:0e:e2:16:cd:6e:6a:22:8b:9c:e5:
         f3:6e:76:40:9b:1b:7d:37:18:17:f8:60:fe:03:5a:1b:fd:9d:
         97:8b:51:d8:fd:4e:dd:b8:90:71:a9:1f:70:05:0f:cc:49:d5:
         10:a9:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org