Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File:                     TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier:          ZFIRip1aShQwSDBTggYWUZ4NwRlTBoUFtbcr6gCTrI4=
Subject key identifier:   06:42:A9:09:F8:76:1C:98:21:96:DF:2B:EB:55:70:60:7B:29:5B:6F
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer:       /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial:       071F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number:          0713
Signing time:             Sat 18 May 2024 22:39:23 +0000
Manifest this update:     Sat 18 May 2024 22:39:23 +0000
Manifest next update:     Sat 25 May 2024 22:39:23 +0000
Files and hashes:         1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: 2eQ0swD2myy9AhsJCc0mFmgcbAqXcvUrrzjFPb3MdKQ=)
                          2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: nqylmKzOIz2T3CklXmofhcWPiUFjmJHvqAN11Rkt1+g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
        Validity
            Not Before: May 18 22:39:23 2024 GMT
            Not After : May 25 22:39:23 2024 GMT
        Subject: CN=66492e1b-1f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:07:af:ce:04:9f:3a:7f:50:62:44:64:fd:
                    65:ec:f9:2d:4f:9c:85:a8:dd:01:da:7a:e6:5e:1b:
                    89:ee:9f:88:3f:10:6b:80:97:93:89:4c:13:8b:a6:
                    37:1c:21:6e:a7:1d:d3:ee:83:fc:4d:1a:e5:d6:85:
                    fd:0a:91:f5:64:c2:c4:d1:6a:66:b5:b2:17:29:0e:
                    9c:f0:26:ac:aa:c6:9e:b9:4d:fb:4b:43:23:4a:80:
                    cf:30:24:8f:00:d4:c2:8c:d4:56:ed:2e:ca:de:96:
                    cb:85:4f:31:c7:77:ec:4b:6d:d2:11:b1:4c:0c:6c:
                    b7:aa:72:75:fb:0f:cf:2a:aa:49:8e:a0:cc:ab:68:
                    c3:91:b1:47:00:33:e6:1d:5b:25:86:d2:a1:4f:75:
                    77:e8:b3:eb:87:4b:81:1c:7d:e8:d1:8b:bc:67:ab:
                    a0:b7:9f:05:59:13:43:0c:97:04:f3:37:9d:e9:ab:
                    8f:91:da:e8:a8:39:a3:74:5d:4d:c4:d8:f4:80:54:
                    10:94:3b:1f:16:2d:d0:13:e1:86:87:be:69:75:98:
                    e0:24:30:d5:80:19:57:f9:34:94:a1:c2:84:ff:5f:
                    c5:6b:0e:79:d4:aa:e8:4d:2d:76:be:87:ce:08:85:
                    64:dd:64:fb:71:1b:94:22:cc:ec:cb:4f:70:22:7b:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:A9:09:F8:76:1C:98:21:96:DF:2B:EB:55:70:60:7B:29:5B:6F
            X509v3 Authority Key Identifier:
                keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b8:bc:1d:fa:21:fb:3e:0e:dd:2a:66:57:f3:c8:6a:9f:94:
         9e:d0:0a:c6:e3:99:30:cc:3b:56:62:d3:47:d3:10:07:9e:62:
         3a:21:10:9a:9f:d9:1f:99:92:b5:dd:ff:03:c2:0c:ba:98:c0:
         8f:e6:09:03:04:14:4e:ea:a9:00:ce:80:b1:f4:2b:50:5f:e3:
         0f:49:43:b2:da:f5:47:25:ba:c7:8d:6e:3b:2f:e1:e1:7d:73:
         8c:da:b5:5f:a0:b6:e2:57:13:bb:30:df:48:d1:fb:5d:8d:bf:
         08:7c:84:dd:1d:68:ab:98:b1:81:8f:44:48:5f:3a:f5:a4:ac:
         44:c5:59:25:b3:10:27:b1:4c:f9:29:e3:d1:cc:36:87:fc:e1:
         5d:43:4d:9c:84:a1:5e:dd:2c:8b:c3:f2:df:c9:7f:4b:e1:33:
         b9:24:20:c8:3a:fa:91:98:2a:52:13:22:ba:6d:32:7f:38:26:
         01:b5:b3:25:79:6b:ff:af:8b:90:1a:fb:56:45:f8:97:94:b6:
         05:f2:69:9f:8f:91:31:bd:56:42:de:9d:01:75:91:77:ff:00:
         2e:38:4b:98:8a:e2:b9:69:13:e9:30:42:7a:62:92:f9:0d:d3:
         fc:2a:88:22:b4:98:61:b7:e6:95:92:32:38:0c:c0:f6:f1:b4:
         b2:95:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org