Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.mft
File:                     k4-Qyde5hQVi7d4QpkZA8v2gZOQ.mft (raw, json)
Hash identifier:          eWt16h4HtdnBQFRbLS5wcrFxXOLMaLdF29X/MoREii0=
Subject key identifier:   DD:21:16:DE:41:A1:DE:BB:82:86:29:12:A0:DC:83:D3:05:85:C7:E0
Authority key identifier: 93:8F:90:C9:D7:B9:85:05:62:ED:DE:10:A6:46:40:F2:FD:A0:64:E4
Certificate issuer:       /CN=A91DEE66/serialNumber=938F90C9D7B9850562EDDE10A64640F2FDA064E4
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.mft
Manifest number:          DC
Signing time:             Fri 17 May 2024 06:13:39 +0000
Manifest this update:     Fri 17 May 2024 06:13:39 +0000
Manifest next update:     Fri 24 May 2024 06:13:39 +0000
Files and hashes:         1: k4-Qyde5hQVi7d4QpkZA8v2gZOQ.crl (hash: 67W7Mo+lyhwA3LKWLDBEQsTQpwNfS+PYr3IyDHpmhRo=)
                          2: D9B3417ACD9F11ED9482781BC4F9AE02.roa (hash: hMXSqPRIKLRFTeFmmDkY6lkBdSblfWWTBj/Abb5sDos=)
                          3: D932B74ECD9F11ED9482781BC4F9AE02.roa (hash: qzTnbvzErJZ/P8Lz2O7p335lGYg4VxeDcLxkEP6eGpo=)
                          4: D8971E06CD9F11ED9482781BC4F9AE02.roa (hash: P7FHrbMryXxjftEwBZGR6SU5FROPHRgA6FtCg80U6Gc=)
                          5: D7F85F32CD9F11ED9482781BC4F9AE02.roa (hash: 9Kq7AHx9k3Er4jA0TtFGH+SrHAE1kPDUbOOSH1UUiag=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEE66/serialNumber=938F90C9D7B9850562EDDE10A64640F2FDA064E4
        Validity
            Not Before: May 17 06:13:39 2024 GMT
            Not After : May 24 06:13:39 2024 GMT
        Subject: CN=6646f593-0fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:2a:c8:4a:dc:32:a3:d4:60:5a:4f:ea:52:
                    97:67:f8:26:76:81:89:ac:a9:1a:07:82:7b:e6:17:
                    52:c9:3a:5e:bc:6b:f8:05:80:4b:c8:90:e8:8b:6a:
                    46:c5:d7:21:42:c3:be:31:bb:47:59:ff:3c:6a:a6:
                    24:29:20:6d:2b:0f:6c:6c:8a:af:0e:e0:71:e8:ae:
                    03:57:84:5a:76:ae:49:b9:f0:a5:bc:3d:f9:48:0c:
                    96:ce:a2:8f:02:82:c3:1c:a2:c6:59:80:3c:5f:a2:
                    b1:70:16:f7:82:e7:94:b1:01:fe:20:cc:51:ad:40:
                    13:cd:82:30:74:de:6d:54:ee:ce:dc:bb:2f:64:4d:
                    70:41:d0:60:fe:f2:6f:f1:bb:ab:55:5a:66:e9:03:
                    80:0b:44:32:aa:37:5b:27:6a:39:65:3e:a9:20:f1:
                    66:c1:2b:ec:dd:e3:94:ab:4a:52:26:e9:5e:60:5a:
                    02:70:e3:3a:11:c0:5f:82:1e:3f:6c:48:1c:d2:f2:
                    1e:cc:59:50:7c:e0:ad:89:a9:e9:52:6c:97:78:d6:
                    6c:d5:b5:9f:29:a3:9c:7c:54:75:79:60:59:79:9b:
                    88:8c:d1:44:a7:bd:f4:43:76:71:b0:c6:c8:f9:27:
                    30:cc:da:af:52:84:d7:8f:53:cb:52:03:c2:f9:8d:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:16:DE:41:A1:DE:BB:82:86:29:12:A0:DC:83:D3:05:85:C7:E0
            X509v3 Authority Key Identifier:
                keyid:93:8F:90:C9:D7:B9:85:05:62:ED:DE:10:A6:46:40:F2:FD:A0:64:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEE66/FBD22964CD6411EDBED73C37C4F9AE02/k4-Qyde5hQVi7d4QpkZA8v2gZOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:99:8e:a8:86:5c:1c:82:33:73:47:32:bc:10:8e:af:da:65:
         91:47:6f:69:cc:e5:ce:a6:f7:24:e1:94:62:a4:cf:66:f6:51:
         e3:0b:34:e4:6a:f1:ca:8d:3c:eb:32:cf:5d:a0:4f:9c:f4:05:
         57:f5:6c:8e:50:7d:04:12:28:78:39:c2:37:78:6b:5f:4c:f0:
         00:68:20:d2:66:a9:46:d4:39:11:f1:d7:0a:55:ed:3f:c9:d0:
         3a:6b:e0:a4:e6:c5:89:16:0e:9a:cc:fc:6b:03:3f:8d:9a:d2:
         aa:e8:c7:9d:b6:09:42:20:32:02:ff:fa:21:6b:48:30:1e:a2:
         a2:d3:8d:8f:b4:95:f1:8e:aa:71:f5:03:cb:e3:13:39:3e:c2:
         3b:2f:65:d1:2a:73:7c:42:4e:eb:4e:c5:39:cc:67:af:7a:ac:
         29:0b:41:7b:89:8e:60:b8:41:b9:42:13:23:d2:e2:f2:ee:9c:
         76:2a:a8:42:93:03:8b:df:24:1e:c2:a8:e3:25:35:2b:a7:61:
         29:9c:8d:b7:36:67:9c:e1:be:5e:77:5e:27:7f:91:40:8d:01:
         33:53:27:28:63:b4:c0:c0:e5:2d:5e:d5:63:81:be:b8:6c:21:
         84:fe:6b:87:33:ed:33:cc:2b:c8:ff:52:bd:36:37:e2:d5:ac:
         55:e8:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:29 2024 by rpki-client on console-ams.rpki-client.org