Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
File:                     UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json)
Hash identifier:          veRqlmVaZvM917KL2R4CJG6IVsDZWp28I9Fx035vzRw=
Subject key identifier:   57:D4:13:37:AB:3C:27:62:03:38:05:42:BA:A0:BF:13:3C:0A:78:83
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       06BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
Manifest number:          06B5
Signing time:             Sat 01 Jun 2024 00:01:43 +0000
Manifest this update:     Sat 01 Jun 2024 00:01:43 +0000
Manifest next update:     Sat 08 Jun 2024 00:01:43 +0000
Files and hashes:         1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: Ttrlk2m4TXOpn6z7zQ6zBwaBSDMazR770Uo/aMsmW8c=)
                          2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: JivzgJ+k2/iUOpvsy3y8FaHjbJGiz8TL55U0x2CsjIc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Jun  1 00:01:43 2024 GMT
            Not After : Jun  8 00:01:43 2024 GMT
        Subject: CN=665a64e7-f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:ce:5d:21:ac:f7:23:02:1e:47:f7:99:6b:
                    cf:a5:65:8e:36:cd:78:ae:34:e1:aa:52:63:0d:53:
                    ba:9a:ff:97:33:c0:d5:eb:35:66:81:5d:5e:8a:a4:
                    81:36:79:f2:54:ad:37:f4:94:46:a3:7e:b7:f3:d8:
                    bb:59:0e:af:71:25:c2:24:d5:77:2d:1d:5c:66:ce:
                    41:53:85:c4:4a:7f:94:6f:07:4b:eb:13:1a:d9:62:
                    2a:b9:9b:9a:14:b4:5e:56:63:11:26:be:21:66:01:
                    33:eb:69:0c:e3:4d:3c:f2:81:ec:a4:9c:03:96:6b:
                    84:99:b4:67:67:10:8a:ce:56:ce:db:63:f0:5e:1b:
                    e9:35:e5:2f:ae:42:3f:cb:b6:34:00:d3:0e:6a:95:
                    3f:1f:56:60:e2:33:cb:43:55:d5:b4:56:7d:c8:8c:
                    c0:1c:bc:52:58:12:e6:70:bf:15:2f:4b:c0:a5:da:
                    b3:42:c7:b2:f4:d2:e9:ad:20:18:b2:0f:68:ad:08:
                    51:33:1e:7e:48:8f:f1:7b:29:7e:33:84:7b:c2:66:
                    d9:07:3b:98:e3:b7:b1:b6:65:0d:f2:35:e4:c1:41:
                    ca:86:9e:34:f0:66:39:06:1e:43:ba:de:cd:d7:e6:
                    d3:1f:ea:2f:2f:d0:e7:f8:49:47:5d:ff:fd:50:56:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:13:37:AB:3C:27:62:03:38:05:42:BA:A0:BF:13:3C:0A:78:83
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:ab:b8:10:f9:ab:bd:55:35:61:a3:dd:cc:f3:5a:03:9d:
         e8:bf:43:07:3e:10:70:8d:13:6f:2a:4c:e4:6f:63:70:86:af:
         62:b3:d2:e1:59:33:46:e7:9e:6c:2a:8a:1e:02:f2:02:a5:05:
         5b:b5:f5:27:dc:49:f2:4a:a6:dd:4c:cf:9a:cc:d9:25:28:11:
         5c:6b:2c:f8:95:2a:90:a2:75:06:bf:69:c6:ba:67:8d:24:c5:
         b5:f5:fd:68:30:c5:66:5c:1d:72:93:98:f3:04:39:59:b7:67:
         a3:1b:f7:6f:95:14:ad:bc:3f:00:1e:d9:7b:cf:66:df:d4:83:
         70:46:1f:d2:a6:f4:88:c7:c0:51:15:ad:fe:f5:6b:b6:0b:57:
         ec:da:4f:76:d4:b5:ff:1f:72:1a:7a:b8:ef:24:e2:f4:63:5c:
         c4:89:05:c8:d2:e5:9a:df:01:9d:11:b5:0f:22:36:28:dc:99:
         5d:6e:87:2a:e3:29:85:54:98:f4:5b:3e:b8:69:1f:07:f3:96:
         a2:3f:e2:8b:3c:be:d6:94:a2:8c:0d:09:0b:cd:fc:1d:00:ea:
         c7:bd:da:55:5e:d8:c0:74:fe:89:59:d9:c4:83:ed:c0:84:4c:
         a2:7d:81:8d:e7:70:dc:15:a1:58:2e:1c:96:f0:0a:c9:9c:da:
         e8:3c:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:24 2024 by rpki-client on console-ams.rpki-client.org