Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
File:                     dR-knnEviM-ETM0Xnr4puX6hqsw.mft (raw, json)
Hash identifier:          kwEYZ6w2oxS9k5Bys5Mtt16A1PtZM9+YaDY51YJEnSU=
Subject key identifier:   29:F8:9F:CE:39:C4:B2:61:B8:A8:75:EC:83:56:79:F0:7F:2E:E7:55
Authority key identifier: 75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC
Certificate issuer:       /CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
Manifest number:          06CF
Signing time:             Sat 18 May 2024 22:59:42 +0000
Manifest this update:     Sat 18 May 2024 22:59:41 +0000
Manifest next update:     Sat 25 May 2024 22:59:41 +0000
Files and hashes:         1: dR-knnEviM-ETM0Xnr4puX6hqsw.crl (hash: lkw1COcctWLFnLI77fykl7mjigIzD3fuc0AImkk9EgI=)
                          2: 0C98BB26325411ECB11CE73EC4F9AE02.roa (hash: 5K39QtI6zVT3fqpN6dKajJUlFJSUMTHVz9h+FsAwDOs=)
                          3: 9AD7C430E06811EEAC73DC10C4F9AE02.roa (hash: 2tA9RwPxa/lcHIQc3bvgrG9Xo/3t1a2zlU5f5Mo5W+8=)
                          4: 0DD11F2E325411ECB11CE73EC4F9AE02.roa (hash: UfuDZ6dabF6a5UaUR9VUv9dPJDojsnP0ZfIBRNJXbas=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC
        Validity
            Not Before: May 18 22:59:41 2024 GMT
            Not After : May 25 22:59:41 2024 GMT
        Subject: CN=664932de-737b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:5c:86:55:ed:c1:09:00:ce:55:00:06:af:
                    9d:52:9c:86:2d:30:70:06:53:d5:1b:67:02:b7:43:
                    5e:6f:10:ff:3b:05:42:97:3d:ac:08:87:04:3f:66:
                    cf:2a:e9:f5:0c:6b:b6:91:ca:98:6c:17:34:14:2e:
                    ca:9e:5d:a5:5e:ca:8b:29:e6:b3:b9:30:c2:1d:d9:
                    c0:e6:9a:12:43:98:7c:32:68:cc:a0:b3:b5:d7:b3:
                    0c:90:83:3d:be:38:58:bc:86:33:e9:96:1b:46:38:
                    bb:8e:05:cd:a3:8c:40:7c:b7:98:c9:d1:32:6a:29:
                    d2:f2:28:a9:27:4b:10:d8:64:a5:67:54:44:4c:61:
                    18:d9:ad:54:6d:b0:3e:e2:32:b8:19:28:9c:37:31:
                    49:71:25:07:dc:e1:02:57:64:c2:95:e0:ee:a1:b7:
                    bf:b8:95:2e:c9:18:a4:55:62:25:55:44:28:28:de:
                    ac:00:19:f1:8c:b1:0b:7c:d6:af:e7:d1:4f:ad:02:
                    c5:6d:71:69:8b:0a:28:80:86:9f:a1:ee:a4:d3:4d:
                    41:ef:90:e1:e3:d2:81:58:13:5e:19:53:a5:69:2d:
                    66:63:a6:cb:a4:87:00:af:ec:44:60:bb:9e:dc:f3:
                    64:23:7e:35:a5:a7:64:d6:15:a4:19:22:c6:c8:35:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:9F:CE:39:C4:B2:61:B8:A8:75:EC:83:56:79:F0:7F:2E:E7:55
            X509v3 Authority Key Identifier:
                keyid:75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:22:89:a7:cd:d7:d6:7f:73:a4:b1:07:59:08:cc:3b:bc:
         cb:ee:1b:63:56:ba:3f:d5:db:4c:ae:b3:6a:07:b4:1a:28:cd:
         ce:91:80:f4:19:9d:48:90:55:64:06:22:51:10:9b:c1:1a:40:
         00:50:95:b5:fc:45:8c:85:ab:58:2a:84:5a:a3:f5:aa:06:75:
         b3:14:fd:54:bb:47:37:bf:39:5c:f0:00:ca:74:dd:41:3d:07:
         eb:e9:67:4e:e4:93:19:29:fc:e3:33:43:8d:42:1b:fd:ac:ff:
         6b:9a:22:73:1d:fd:37:1f:a3:7d:b5:3e:b8:2e:53:0c:9e:eb:
         01:5c:05:99:dd:91:c1:70:bf:1f:00:6e:a6:32:1b:02:83:0b:
         2b:76:f0:de:c7:47:f6:f0:e4:f7:c2:5a:91:27:e5:4b:1d:9a:
         0d:f4:26:35:66:ea:93:75:52:a4:e3:09:99:20:f6:8c:f8:5c:
         59:da:f2:39:be:6e:06:09:5d:d3:ca:88:a3:19:39:2e:81:f4:
         ea:1c:65:7b:39:17:12:4d:90:7e:8f:3e:3d:17:28:be:85:ed:
         d3:cc:7e:97:24:0d:12:99:32:64:69:e5:f3:1b:13:aa:1a:31:
         fd:08:64:93:11:d9:81:2b:00:48:fe:a1:cc:ba:d5:d4:f1:40:
         4d:db:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org