Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          4QpzQvaVFOLJoxXinzMvGAKT6v9dwctL/X3MDqJXnLY=
Subject key identifier:   9A:83:E1:D4:68:42:AB:9A:11:DC:3E:53:EE:37:C5:6C:ED:34:2B:8D
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          76
Signing time:             Sun 19 May 2024 07:24:23 +0000
Manifest this update:     Sun 19 May 2024 07:24:22 +0000
Manifest next update:     Sun 26 May 2024 07:24:22 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: hhto8pbfY1+2+sEP+X3OxBSkVNYILwMglLKCOeJ06hE=)
                          2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: nBaGmQe7E1Ii0zNw5I/pterD5pbChi0lHQwMvNC+vIU=)
                          3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 67tMcBm5eVdUDPwNktyza5/lKXwHrTHlx6PSxFH97cM=)
                          4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3QTG6LhpOgcKFD8RWgJUpB/DlxbRcSbERDKyASPHebU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: May 19 07:24:22 2024 GMT
            Not After : May 26 07:24:22 2024 GMT
        Subject: CN=6649a927-5d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:3c:32:cf:3d:5b:e2:d7:c0:59:b6:2e:f4:
                    24:3b:0a:4f:2a:2f:65:c1:d2:e8:64:bd:17:d4:d5:
                    41:98:d6:e4:2a:0c:52:91:69:65:f9:67:21:a5:37:
                    83:4b:68:aa:13:7e:42:97:14:a4:97:19:09:a7:b4:
                    18:1e:02:c8:a9:a0:20:74:a0:c3:79:3c:fb:c2:ef:
                    a9:1a:af:97:c1:78:0c:20:69:c3:3d:56:6e:e3:aa:
                    ba:06:85:87:d2:6d:f5:1c:97:78:3d:bb:bf:df:01:
                    a2:3e:95:57:67:a6:0b:d2:12:55:a6:09:70:fc:f5:
                    8d:5a:9e:58:67:39:2b:96:6f:11:e0:96:55:ae:57:
                    6c:c3:af:9e:30:6b:56:4c:f4:50:25:9f:0f:5d:7d:
                    c4:6e:e5:cf:ad:78:36:86:d2:a9:c5:f4:1a:ff:ea:
                    39:37:6c:1a:a2:16:df:ec:c3:b8:e6:d7:34:64:94:
                    b1:b3:59:3f:f3:e6:48:3b:38:ca:23:19:80:e1:83:
                    be:c6:bf:a5:0d:7d:d0:8e:7e:08:13:09:ea:2f:65:
                    86:b8:1a:73:bd:8b:06:78:57:8d:ab:03:d9:b7:71:
                    43:c8:53:fd:b7:24:3e:03:36:c8:e8:35:6a:6e:a7:
                    8d:f6:23:45:15:e2:98:fc:ce:e7:ef:32:38:cb:a2:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:83:E1:D4:68:42:AB:9A:11:DC:3E:53:EE:37:C5:6C:ED:34:2B:8D
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:81:22:35:a5:38:fd:5f:68:69:45:c5:a5:ac:10:93:52:
         bf:8e:fd:5b:85:e3:7e:8e:c0:3d:56:9c:00:28:d2:40:c1:53:
         d9:34:40:05:4b:74:3e:ae:59:1f:cf:de:1c:9c:37:d2:99:d6:
         42:ab:e7:1b:56:75:1a:04:96:14:79:35:af:05:6e:d7:91:43:
         6e:17:8e:6f:d8:b6:86:fb:1f:e6:8b:50:8f:bc:dd:ae:97:0a:
         e9:de:b9:d8:63:8e:b1:d9:7a:36:fb:3e:f1:2e:be:32:3d:12:
         5c:9f:cc:98:b6:d8:82:5c:53:18:b8:76:26:e8:cc:5f:87:2a:
         7f:ef:0c:f1:47:93:c4:91:cf:7b:47:44:cc:8f:b9:89:39:6f:
         81:cc:e4:a7:14:ca:75:7e:d9:a5:1e:5b:80:e1:04:06:74:ff:
         64:7d:32:38:8e:28:00:dd:3e:64:54:88:9b:2e:a0:98:71:f2:
         fd:55:5c:4b:35:11:5a:b1:95:26:85:a6:74:d9:a8:ef:39:92:
         b4:de:df:95:52:ec:94:51:85:9a:e4:bf:1d:38:71:47:ce:70:
         23:cf:a0:cb:c7:7c:3e:b7:18:77:7b:bd:dd:1a:e5:ef:d8:be:
         7d:c9:ca:a4:a8:7e:08:00:f8:b2:af:ec:af:0a:c4:34:97:b6:
         42:5c:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org