Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File:                     DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier:          B42G734r5AaYrvunwRWJDvm0pa09Dt3/c4i53aSoRLY=
Subject key identifier:   24:28:9D:FD:6D:F5:5C:0A:C8:13:C2:C5:C0:65:59:94:C7:5A:9C:8A
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer:       /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number:          078D
Signing time:             Sat 18 May 2024 22:11:46 +0000
Manifest this update:     Sat 18 May 2024 22:11:45 +0000
Manifest next update:     Sat 25 May 2024 22:11:45 +0000
Files and hashes:         1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: AdC5HeaTHOSPvzepr6JuEbsa/Yau8wxliWWH5ys+85w=)
                          2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: wrz9NcO15NKFZgxZwwAqVuVrrYTqHhwaMWYAmXJ0k7U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
        Validity
            Not Before: May 18 22:11:45 2024 GMT
            Not After : May 25 22:11:45 2024 GMT
        Subject: CN=664927a1-ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:b3:49:f1:c7:33:06:bd:ff:ae:a3:54:3b:
                    0d:48:34:95:a0:5c:f2:5f:9e:b2:4f:6c:7f:b7:c6:
                    e1:8f:cd:34:1e:03:b0:11:59:c6:5b:d0:40:83:c8:
                    38:0f:6a:68:fa:d5:07:56:e0:0f:9e:10:8f:a9:b5:
                    30:fa:b9:cf:a9:bd:9c:9c:64:99:f5:6c:62:57:57:
                    c1:c5:8e:a8:6e:83:a7:04:3d:51:12:eb:b5:87:04:
                    ea:b1:d4:29:95:ca:30:f0:51:fe:64:4d:e8:9e:a8:
                    8a:ad:31:04:91:85:79:4a:68:e2:54:b2:97:10:44:
                    9b:e4:f0:a5:b5:07:9a:4a:41:70:b3:ff:f0:3f:e1:
                    98:0a:27:73:2e:fa:64:84:d2:9d:14:0c:df:a7:90:
                    37:49:2d:82:46:3f:f4:57:66:79:bb:bb:6d:80:5b:
                    d9:69:42:49:a0:b0:c1:4b:0e:96:1a:44:c8:08:a9:
                    b9:c1:e2:b9:55:93:de:5e:bc:4e:7d:66:de:59:b8:
                    44:1d:0f:6f:1f:d4:66:47:7d:1a:c5:7b:18:c9:5f:
                    27:0b:d2:e1:8f:4e:c2:3f:2c:f3:b6:7a:16:ee:d8:
                    36:ae:a2:51:1c:76:91:02:50:59:85:5b:f8:e4:c9:
                    b9:30:c6:d0:74:33:74:cc:fa:00:4a:c2:94:1c:63:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:9D:FD:6D:F5:5C:0A:C8:13:C2:C5:C0:65:59:94:C7:5A:9C:8A
            X509v3 Authority Key Identifier:
                keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:70:ee:a0:7d:c2:4b:9e:03:31:d1:6c:89:54:9d:bd:c9:
         8e:ed:a3:b3:51:e8:64:2d:0f:68:39:12:70:4d:2d:d1:22:be:
         d4:75:37:e3:e3:32:e8:61:ef:e2:35:15:3c:89:a4:c8:3b:bb:
         ac:68:91:ab:ab:09:1f:9c:32:64:d3:65:97:45:65:47:f1:e6:
         d9:7b:35:e0:65:ce:25:f8:e7:a2:8c:f9:b4:bd:ba:c0:91:ea:
         73:37:86:1f:08:5d:dc:ae:32:98:f0:5d:83:e2:e3:4e:a0:30:
         91:cc:88:1d:b9:79:96:8a:b9:de:bc:e4:cc:b1:11:83:d0:5f:
         2c:c9:cb:a1:2c:66:12:69:3b:ed:f9:c5:3c:e0:71:9b:a1:16:
         74:95:e6:a3:62:65:4c:14:e1:47:ec:aa:4d:bc:b2:cd:00:03:
         d9:2a:9f:3f:5d:ed:2b:2b:b3:cd:18:31:52:bc:45:70:5e:f5:
         63:1e:e8:4c:f3:a4:6e:f9:c7:11:96:c1:5a:a2:b0:2b:67:75:
         c5:50:dd:8e:3f:35:46:d7:5b:bc:b5:cf:c0:c1:7a:64:c9:28:
         bd:01:ee:c3:db:96:ef:e8:ea:55:1a:08:52:ca:8a:34:d8:c2:
         13:e2:11:bc:7c:0f:40:d4:77:cb:77:83:65:f3:2a:19:31:d0:
         ba:bd:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org