Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          06cuwDL1FLujhFQVPjjYo0SdEoO8Mh+/6jwezfDI1OM=
Subject key identifier:   CF:73:13:62:A1:F4:E4:4B:E3:0A:15:8A:0C:85:E9:6D:76:F9:C9:07
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0AD0
Signing time:             Sat 18 May 2024 23:14:49 +0000
Manifest this update:     Sat 18 May 2024 23:14:48 +0000
Manifest next update:     Sat 25 May 2024 23:14:48 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: VIXkkKGugFwPkwptYKsO74BX17YemuA93RlXwUE+DFc=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: ySlrT8ppeZpDDygW9lG8KDEVREOUc7g/wF3bneRfj4E=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: R4vb2XINGzLjrNXfNhN9sER/3BLPFSIzshMBqh9O7Ms=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: ZfJ7/UZgkrT87F0mr1Mj/yKL9GTf3YQRNmUOn/GBBdo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: May 18 23:14:48 2024 GMT
            Not After : May 25 23:14:48 2024 GMT
        Subject: CN=66493669-bec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:ec:b1:ee:ca:c1:f9:16:ce:88:cb:a8:c2:
                    23:6c:5d:c5:40:1e:ea:1a:13:54:ed:b8:44:28:7a:
                    82:3a:42:bf:ea:1f:07:0a:6a:66:f0:3a:c6:05:2a:
                    03:1d:51:53:b6:e8:8d:75:fd:d5:cc:2c:33:ec:28:
                    a9:bc:0a:f0:7a:98:19:e2:31:68:5b:2f:25:bc:b6:
                    fb:0c:d0:fa:e3:2a:f2:b1:7e:a8:c4:6b:39:d5:3b:
                    2a:be:24:b6:25:a5:5f:11:33:64:31:07:2a:44:01:
                    e7:94:e2:9e:3b:3f:22:a6:51:b7:85:36:b1:dd:3d:
                    a7:f0:f6:ef:34:0f:43:e5:82:e3:89:7b:8a:92:4e:
                    13:ef:c1:5d:8b:91:b6:82:01:56:ca:ae:e3:96:b6:
                    7c:95:2b:38:5e:11:45:f2:dc:30:90:44:bf:68:a6:
                    b0:00:c9:47:7d:2a:0c:ca:1a:67:7a:80:4f:f6:26:
                    d2:80:e0:55:b4:f6:3a:6b:04:3b:dc:32:c9:48:22:
                    90:2a:69:5c:05:81:73:48:17:aa:ea:b5:b1:e2:88:
                    52:2a:1d:06:45:bd:c5:31:3d:c7:6c:38:79:1f:74:
                    83:cf:42:f3:df:69:3a:39:7f:b1:e7:5f:65:9f:e7:
                    e8:b4:d5:03:ff:8e:d6:80:4f:33:8f:3d:ad:72:a3:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:13:62:A1:F4:E4:4B:E3:0A:15:8A:0C:85:E9:6D:76:F9:C9:07
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:e0:3f:a2:18:fb:1e:c9:72:09:2d:73:45:75:01:99:c8:
         56:59:eb:6f:9f:4f:72:d6:c5:4d:c9:55:ad:7f:3d:42:75:6b:
         08:68:72:b9:f1:48:a9:0a:99:b3:ff:6f:e1:a3:ac:24:8e:31:
         97:c4:d0:b9:9e:be:56:ec:58:1b:6b:64:19:fe:9e:89:55:0e:
         09:60:e9:de:84:a8:b4:d8:ec:a0:05:38:73:e9:ff:1d:10:0a:
         c4:9f:b9:9c:22:d1:9d:9e:6e:6a:8d:39:fe:ef:ee:9a:84:46:
         d8:34:5f:a5:fa:59:ec:22:62:af:86:62:95:a9:16:41:40:0e:
         39:9f:7f:1c:fc:87:0d:30:39:e2:6a:74:af:aa:0f:5c:62:2d:
         76:f5:df:79:f0:e7:02:f3:f9:01:08:02:0f:c3:f6:26:16:f4:
         9a:9e:b7:ec:74:bf:74:4c:e5:f6:08:c8:2e:31:f5:af:b2:c9:
         7f:0c:45:2f:47:be:9c:e6:a5:90:e1:2a:e5:40:97:3f:e6:02:
         28:c7:7a:cd:67:3e:d6:a9:0b:68:02:e6:ff:8f:fb:87:a0:c6:
         ab:c8:69:26:d2:ca:08:8d:97:94:65:ab:ad:3f:47:c4:29:40:
         64:1d:f5:ab:37:9c:1b:b8:f9:a5:5c:d7:64:dd:9c:77:d1:ba:
         29:66:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org