Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
File:                     7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json)
Hash identifier:          9J69707iLRwHhxLwg5BjQwDMsh0ni0tMNT3zU9/w1Ic=
Subject key identifier:   F6:C3:6E:DD:F6:58:C5:9B:CE:FF:4C:5B:C4:E5:8D:87:1D:83:41:D0
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Certificate issuer:       /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
Manifest number:          0100
Signing time:             Sun 19 May 2024 05:35:37 +0000
Manifest this update:     Sun 19 May 2024 05:35:37 +0000
Manifest next update:     Sun 26 May 2024 05:35:37 +0000
Files and hashes:         1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: RD0Blw2tOTGr625wwPDPSzKNqiZsS3cx5PM+cCjYbD8=)
                          2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 7DeO0VfCI4oTaSwmK9iUkVYLdmtRBaM+mO6JVXyn98k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
        Validity
            Not Before: May 19 05:35:37 2024 GMT
            Not After : May 26 05:35:37 2024 GMT
        Subject: CN=66498fa9-a4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:f4:de:a8:8b:b5:c5:1d:7f:f2:99:cc:7c:
                    1e:d3:cf:5e:0f:64:43:2c:4e:69:c5:59:cc:6c:76:
                    21:b4:af:3f:14:74:ff:83:d7:92:b7:7c:24:5e:24:
                    77:9d:41:72:4e:8b:59:e6:72:08:0e:3d:4d:14:c3:
                    cc:e7:89:0f:65:b1:21:08:e3:5f:da:72:58:d7:b3:
                    06:db:f1:6e:0f:22:d0:c9:41:4e:64:ad:0d:ae:33:
                    ec:ba:42:cd:40:1d:e2:96:d6:44:0f:74:e2:da:75:
                    ca:15:9a:75:ab:e5:37:73:ea:cf:91:b8:8b:25:a8:
                    9d:55:25:4f:70:6f:d5:d7:6d:46:99:b1:c9:e4:1e:
                    e6:23:3b:2c:e8:bc:f5:f7:5f:dd:9a:f7:b5:85:b4:
                    41:98:31:55:73:f0:e4:9c:72:0f:d4:6b:68:7d:e1:
                    b2:53:50:54:7f:d7:77:1b:09:bc:68:cf:c4:a7:5f:
                    1f:6c:ad:01:22:92:ec:53:1e:0c:4d:99:36:9e:af:
                    c0:a5:aa:4d:71:f5:34:18:c7:00:01:82:d7:49:d1:
                    c3:27:57:2e:1a:3b:72:48:6f:37:e8:17:5d:bc:dc:
                    db:4d:cd:5d:70:29:7d:b2:f5:da:e4:6e:39:09:7e:
                    56:38:fe:f7:4d:a2:c9:4b:65:c8:ce:d0:58:4e:49:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:6E:DD:F6:58:C5:9B:CE:FF:4C:5B:C4:E5:8D:87:1D:83:41:D0
            X509v3 Authority Key Identifier:
                keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ce:21:5e:c0:7b:96:5f:6a:4d:84:2d:35:4a:6a:c8:ad:20:
         3a:3e:fa:4b:81:48:88:ba:a1:cc:8d:09:08:87:8a:d5:70:b2:
         ac:c2:29:d4:b9:85:48:c7:7f:63:c7:8d:5a:cc:10:47:6b:39:
         06:cd:52:ae:3c:2b:ae:66:61:8d:38:c0:43:ef:15:21:1d:86:
         7f:b2:c0:93:40:cb:74:df:7e:ec:2f:ec:90:48:5e:f5:be:9c:
         dd:41:d6:01:d0:77:35:5d:96:d4:ec:3d:5c:48:6d:33:eb:6e:
         88:d3:e6:67:f7:a2:7e:62:eb:d7:48:ff:d8:aa:cc:31:22:de:
         03:e7:33:7e:72:78:d5:08:c9:43:e7:14:f3:0d:48:d8:e1:7d:
         0f:e1:bc:8b:8c:a7:33:e7:39:1a:8d:94:26:6d:50:e9:7b:b8:
         2f:bb:34:d1:2c:34:68:8e:6c:53:41:be:27:2d:e3:6d:a5:d9:
         12:6f:96:1b:4f:7a:c8:02:50:78:17:ad:33:54:b1:b5:53:b3:
         5f:3b:e3:b9:b1:e8:7a:80:e1:39:04:38:30:8f:2f:30:04:57:
         18:04:b5:7d:1f:f6:32:3d:14:10:c5:d1:de:9e:3f:d9:03:29:
         5c:dd:a2:99:58:bb:a0:c2:6c:e4:c4:16:7b:58:02:54:96:2e:
         27:a9:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org