Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File:                     bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier:          S71ki1K4yxbU6UFL4VsJJh/FDjF/4Z9Ca/hbIuzHwCQ=
Subject key identifier:   1B:A3:A8:5B:DC:C0:22:E0:A3:5F:02:4B:CA:E3:83:CA:56:B2:A5:97
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number:          024E
Signing time:             Sun 19 May 2024 04:00:01 +0000
Manifest this update:     Sun 19 May 2024 04:00:01 +0000
Manifest next update:     Sun 26 May 2024 04:00:01 +0000
Files and hashes:         1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: bpheZxkH9dR2z6MRpVVxdTLf1Yn7e5SLvR+fEoR+bTk=)
                          2: 7B8DCA22D53F11EE98B61A0EC4F9AE02.roa (hash: GLDIh0I+WZrdD45kcVfxksE1LMMouxKgbwehtWz1oI4=)
                          3: 134DA870DC1611ECAACFC563C4F9AE02.roa (hash: cW4I1UNoPJA8LD5gXTerXs0oFpEE949rMRy/rNvaBhE=)
                          4: 0D207E32BE8711EE9C60D31CC4F9AE02.roa (hash: z+GKrvEqjCCqvC/1p+CkC2KpPlD1Xh1mIWkhDZjsfHA=)
                          5: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: vg1DEPzwmh8qE2AidumeQ/fULrz80QgxAjtYil40UCo=)
                          6: 1798FA5630DF11ED9C562309C4F9AE02.roa (hash: 30DPj1Ur+aGoeQXgrocvUURCS81rNeM67S01JBFeIZM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: May 19 04:00:01 2024 GMT
            Not After : May 26 04:00:01 2024 GMT
        Subject: CN=66497941-62b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:64:22:1a:7e:59:7d:70:97:57:09:bb:b1:
                    c6:53:0b:5a:d7:4b:a6:28:bf:d0:fc:9c:1e:95:76:
                    6e:b8:73:3e:4e:b5:3a:8d:a3:f7:f6:9b:95:5a:90:
                    fa:29:98:ae:b1:58:48:8a:4a:2c:2d:98:bb:e3:77:
                    8a:b0:fc:24:70:6a:3e:8d:0a:5b:64:0d:b3:d9:a6:
                    3f:8f:be:38:cc:ac:fd:94:2b:74:96:fb:de:ce:33:
                    36:43:44:fe:42:55:05:ce:b6:fe:bd:26:ef:04:1e:
                    88:23:54:b5:de:00:67:2b:03:f0:62:06:9e:ce:77:
                    06:47:ac:70:7d:4d:5a:ac:ad:5b:f5:4f:79:a8:4b:
                    76:d2:21:8e:fe:86:9b:f6:32:25:11:b7:12:c4:d4:
                    35:b6:63:f0:6b:7b:f8:57:91:8e:c0:d6:71:ec:fc:
                    ae:c4:47:f6:87:35:1d:73:4c:d9:d6:f4:56:28:39:
                    4f:c5:d5:a6:13:4c:d4:86:e2:86:ae:31:c5:a6:29:
                    49:ab:65:50:0b:93:f3:aa:9f:3a:fa:47:40:94:af:
                    39:17:5d:3d:2e:4c:17:f0:4b:4c:05:a6:44:32:76:
                    54:c2:c4:77:94:f6:7b:23:ab:6c:5d:37:02:40:5d:
                    87:65:19:f4:b1:b7:d2:de:27:1f:da:c0:24:15:ff:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:A8:5B:DC:C0:22:E0:A3:5F:02:4B:CA:E3:83:CA:56:B2:A5:97
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:57:de:8b:a1:e5:aa:9d:49:3e:bb:ae:3a:7a:af:3f:c6:86:
         f5:2b:ea:a6:77:24:9e:74:5c:ee:de:23:04:af:90:48:74:5e:
         94:65:b2:df:2c:7b:1b:e8:03:64:99:10:ed:11:fc:c1:5d:3f:
         b0:a6:44:f4:1f:54:e5:83:44:92:4e:3f:a9:44:b5:bf:c9:92:
         08:aa:d7:13:9d:33:50:27:6b:51:51:0b:02:34:00:43:cd:4f:
         b1:fb:38:57:a8:d5:e5:a6:3c:31:ca:13:9b:5f:c0:bb:b4:9d:
         e1:d2:ad:f1:1a:e6:74:71:be:34:db:eb:70:3f:71:eb:47:64:
         f8:6c:58:31:ba:ba:c6:f9:21:50:29:c9:e1:a0:dc:7b:12:5e:
         38:d7:82:bb:40:b0:0c:78:81:97:ec:02:65:f8:2a:92:f5:19:
         a9:71:f3:4d:13:15:8e:95:c3:48:6f:6e:aa:1e:ef:0a:2d:58:
         ef:ab:af:49:8c:c7:88:f7:f0:99:4d:f3:0f:26:56:76:f3:13:
         7e:6a:f5:89:da:1f:32:4b:3c:a8:1c:ec:c9:9f:af:34:4f:27:
         1e:e7:ef:c0:9f:76:90:80:8d:2a:b1:bf:da:e1:a0:01:de:57:
         ca:0d:9c:86:cb:7f:87:66:1b:24:ca:11:00:08:51:a9:46:f5:
         cc:96:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org