Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
File:                     IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json)
Hash identifier:          I5ZajUwn6hdwvH1nK4NBfSgjZULso6TiypU17UfZZrI=
Subject key identifier:   93:51:8A:4F:A7:FE:89:A4:87:A9:27:E6:8E:AE:72:A7:42:2C:CE:CB
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
Manifest number:          03B5
Signing time:             Sun 19 May 2024 03:14:11 +0000
Manifest this update:     Sun 19 May 2024 03:14:10 +0000
Manifest next update:     Sun 26 May 2024 03:14:10 +0000
Files and hashes:         1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: qkKhZInFyh6cs/EbzgSTAuH9cFW8bPjsObuXnagPa54=)
                          2: 3DC02FC0A7C011EEBACABC6FC4F9AE02.roa (hash: +sKqxphwA1TMt+gFNlY/JFqz2M+7+ooTgIdSSkZeVeo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: May 19 03:14:10 2024 GMT
            Not After : May 26 03:14:10 2024 GMT
        Subject: CN=66496e83-457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:a3:b6:8a:da:a8:9f:2c:52:a1:79:bc:1e:
                    4f:7f:48:44:0f:5b:a3:9e:18:c3:a5:01:36:51:93:
                    bc:f5:95:da:18:8e:f3:f5:9d:48:8f:cf:11:fd:33:
                    52:6a:78:bb:4e:27:2b:ed:6f:b1:a7:28:80:39:93:
                    f2:5e:71:bb:2b:6e:e5:d2:95:ab:38:b8:34:07:fd:
                    bc:49:89:f1:50:e8:14:87:ec:54:16:40:82:ac:15:
                    68:6d:ab:57:46:ef:2b:38:39:4a:4d:b8:25:c9:04:
                    5b:22:d7:48:51:e1:6b:98:c8:01:27:0f:a5:83:35:
                    d8:14:33:48:89:6f:0f:20:aa:0e:fc:83:7e:28:c7:
                    4c:64:20:25:a4:21:45:20:96:b5:a8:d1:bf:f0:67:
                    82:be:de:1f:ab:30:42:50:2c:e8:0e:4a:6a:8c:97:
                    ba:41:35:7b:85:c6:9d:49:78:f8:51:a7:68:74:4d:
                    fb:22:79:58:18:15:5a:39:c5:2d:1c:be:dd:20:61:
                    69:98:21:b6:ab:d0:fa:85:86:41:a9:30:89:91:4e:
                    15:38:cf:fe:50:12:56:ec:70:0e:b1:b2:5f:ac:25:
                    51:da:14:48:28:78:b0:bc:a5:52:f2:21:b2:65:d6:
                    89:b4:31:a8:a9:b8:0a:92:db:b4:61:65:6e:81:a1:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:8A:4F:A7:FE:89:A4:87:A9:27:E6:8E:AE:72:A7:42:2C:CE:CB
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:99:9b:28:2c:5a:59:af:be:bc:9a:98:1f:28:83:02:cb:
         5e:fd:79:bc:ac:43:07:5c:07:1a:dd:a8:a6:9e:2b:91:85:fe:
         ba:90:cc:db:d8:df:c0:6e:0e:76:0f:80:10:13:bc:9d:1f:1a:
         b8:07:33:00:d9:7c:a7:bd:1e:c4:e9:96:64:5e:92:3b:94:24:
         d2:10:c2:38:b0:c7:2f:83:7a:d5:9e:c9:6e:4a:ab:44:90:12:
         50:4b:47:be:9f:5e:c8:f5:9d:81:24:f3:1c:5b:34:5a:0c:5e:
         7d:7b:27:c1:bd:18:3c:bd:90:5c:eb:b4:68:f3:4d:0c:27:e7:
         83:cb:4e:e3:4c:75:78:b0:ca:c3:39:63:bf:9c:79:65:b2:e6:
         e8:8b:5c:80:21:26:7c:c1:b4:ee:27:89:73:52:6d:58:11:f2:
         8b:58:1e:82:a5:d0:1e:9a:1d:e5:ac:f9:d1:5f:c4:da:cb:66:
         84:a9:aa:54:8d:47:31:ac:40:b9:e8:fb:4c:08:4c:fb:3a:2c:
         d1:85:79:0b:48:dd:41:eb:d1:6a:04:95:9c:9d:1c:c3:0b:03:
         d3:9a:b9:9d:6e:89:74:f5:08:fc:72:dd:3c:62:44:2a:20:55:
         4b:b8:6d:84:91:a0:db:b5:2b:c6:69:29:8e:ca:d9:85:ed:32:
         55:99:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org