Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
File:                     ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json)
Hash identifier:          dEU5iSacgPxjhgpaj7MSsAJgFB/16CmimLENC7HLacU=
Subject key identifier:   9B:FA:0E:02:A3:24:66:36:EB:DD:DB:9E:60:4E:2F:AE:C8:2C:72:25
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Certificate issuer:       /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
Manifest number:          0782
Signing time:             Sat 18 May 2024 22:13:43 +0000
Manifest this update:     Sat 18 May 2024 22:13:43 +0000
Manifest next update:     Sat 25 May 2024 22:13:43 +0000
Files and hashes:         1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: /Lje5hHqcdNC1Jt4a3G8SV51NzDWSkRuUmJeHTDtWDc=)
                          2: B6EB6C5ED46611ECA1A27035C4F9AE02.roa (hash: gyJwOD8ZNr6rJJ7upe43x9E14GfXs9WDFKLRuVQq9g8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
                          rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
        Validity
            Not Before: May 18 22:13:43 2024 GMT
            Not After : May 25 22:13:43 2024 GMT
        Subject: CN=66492817-9105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:e6:4c:3c:b0:72:36:7f:53:1a:11:c4:90:
                    49:58:67:3a:e2:f3:85:41:27:37:51:15:57:de:fb:
                    a0:67:2c:01:4d:cb:fc:85:90:f9:bc:79:d2:30:72:
                    ff:da:c8:13:17:20:5c:bb:37:55:af:b6:ab:23:ee:
                    2f:86:9f:bc:a5:83:23:23:bd:37:b9:33:03:ef:b1:
                    b2:2a:0f:c1:0d:4f:37:13:82:18:de:1a:51:49:d0:
                    a5:1e:da:8f:95:5b:f9:f7:83:f3:e7:c0:4d:96:0b:
                    95:67:57:64:2d:3d:b9:1f:75:c6:b5:50:7b:74:ce:
                    b4:66:ab:1c:2f:a1:46:f1:0c:ed:e3:44:54:1c:5e:
                    42:c8:64:b7:b4:d6:f8:6f:94:95:02:77:b5:8d:72:
                    9f:6e:04:b3:76:87:92:b7:22:3d:83:d3:78:21:74:
                    54:0a:72:73:96:9e:35:36:c9:0b:25:46:cb:05:a1:
                    93:f3:77:ae:e5:f2:45:58:94:16:7d:98:e6:14:0c:
                    c7:96:51:1c:5c:e1:06:16:68:05:2c:17:41:57:a2:
                    fd:5e:c2:05:df:15:20:ec:14:2d:78:1c:92:0d:ec:
                    2f:51:fa:4d:aa:2a:66:c7:91:1c:84:f8:e9:97:cf:
                    3f:af:eb:0f:a2:a0:24:eb:52:3d:84:ed:b1:2d:8f:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:0E:02:A3:24:66:36:EB:DD:DB:9E:60:4E:2F:AE:C8:2C:72:25
            X509v3 Authority Key Identifier:
                keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:81:5e:23:d6:29:75:ca:21:1d:fa:9f:25:74:a9:49:58:
         29:86:99:dc:94:23:b0:56:e3:56:08:b4:18:bb:d1:41:c0:bc:
         68:73:7c:89:13:e1:f7:90:e3:b2:96:00:85:5e:3a:8c:da:c9:
         25:53:87:5c:e3:92:dc:a6:07:da:cb:41:36:f1:d0:fc:35:1d:
         02:c2:d2:71:7a:b9:20:98:a7:0e:be:a2:a9:f7:82:c7:1d:90:
         f8:62:4b:d1:7c:6f:bf:5c:13:70:24:8d:c2:ca:45:6d:80:68:
         de:92:6a:aa:a4:05:95:29:63:b3:b8:34:30:0e:81:d5:84:98:
         6c:27:1a:ac:88:07:25:2e:26:f5:ca:fc:7f:63:7b:0a:7f:d4:
         35:aa:9b:7c:b5:be:31:da:1f:d1:ac:5f:ee:f0:db:9f:d5:4e:
         53:13:c7:58:66:62:dc:08:d1:0e:0f:7a:b0:fa:70:cd:cb:37:
         f7:ea:18:ec:4f:55:dc:00:87:f1:7b:bf:98:74:5c:f9:17:23:
         47:be:b0:63:c4:9a:6f:82:cc:52:91:c9:50:b5:6f:92:ed:14:
         70:3b:07:29:cf:5a:f8:cb:2d:86:91:44:85:d7:b8:08:07:52:
         f1:14:0e:3a:20:4d:c6:55:1c:18:fb:52:3d:18:22:20:58:00:
         7a:a8:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org