Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File:                     HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier:          WedoiHXgfE9T6VTmZwln8vuHAC4M8WwcuuqCrJxWOwA=
Subject key identifier:   4A:E9:A8:A5:35:63:D9:28:51:FE:E4:22:C3:34:3E:14:A9:F0:BA:79
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number:          017E
Signing time:             Fri 31 May 2024 05:25:52 +0000
Manifest this update:     Fri 31 May 2024 05:25:51 +0000
Manifest next update:     Fri 07 Jun 2024 05:25:51 +0000
Files and hashes:         1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: 7ghDPv69WWA8WBy/CxgDawfWx0SDtGwhzMBb7Htp4ws=)
                          2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: BReMrJcPdWP5VKstav51f7UkEGbQ0HINNMdxpuIBj0U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 05:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: May 31 05:25:51 2024 GMT
            Not After : Jun  7 05:25:51 2024 GMT
        Subject: CN=66595f5f-c487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:ec:0c:6b:7d:e4:53:8e:6d:82:ed:e2:34:
                    5b:0d:9a:fe:91:64:1b:49:50:d8:d5:40:12:02:90:
                    03:f9:52:45:a9:2e:00:96:84:16:dc:5c:ce:c5:60:
                    33:1d:c1:9a:2a:18:2b:7a:54:03:6f:5e:bd:de:bd:
                    12:c8:1c:14:9a:6e:f1:62:bc:5d:e3:06:78:cd:f8:
                    c4:44:9f:ae:6a:4a:d2:6b:2e:55:49:16:88:ed:5d:
                    95:b6:06:9a:ff:a0:ad:3e:95:21:1e:54:0c:93:91:
                    61:60:d9:c8:c3:7f:2f:70:e5:d7:e9:56:e1:ce:37:
                    b9:51:29:e6:e5:3b:14:ba:a1:a2:73:77:53:1c:9a:
                    eb:81:0f:3b:f7:ae:4f:02:13:a7:fb:b3:54:6f:0f:
                    3f:f4:6e:e4:88:80:95:f2:e2:86:72:f2:f6:a7:65:
                    f7:ed:8b:be:b4:f8:ae:97:50:25:15:56:49:64:b4:
                    f2:c4:2a:dc:0d:a7:3c:4a:b8:d4:d7:e0:d5:57:b2:
                    03:c1:e2:f4:33:4e:9e:eb:38:a9:0d:c1:33:bc:c2:
                    10:83:03:5b:c9:b0:7b:5d:df:d5:db:3d:5e:2d:b9:
                    3c:db:a7:55:ab:95:d8:85:53:a7:e9:1b:79:a1:c4:
                    6f:9b:61:7a:16:6d:d1:82:4e:cc:b9:e6:5d:74:5d:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E9:A8:A5:35:63:D9:28:51:FE:E4:22:C3:34:3E:14:A9:F0:BA:79
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:3b:df:d2:b4:2b:b5:b0:05:02:3d:37:9f:e7:4d:28:44:
         56:13:18:45:24:85:aa:9a:ac:5f:52:32:a0:0a:45:cc:dd:87:
         fc:d1:cb:e1:dc:75:a6:83:31:79:12:9d:ba:ea:5f:c6:15:d5:
         49:6d:be:f9:f9:dd:ea:f9:09:ac:a0:0a:92:25:06:9a:b1:01:
         b6:0e:19:97:05:30:06:36:34:15:e2:05:28:18:22:50:4e:d9:
         e1:10:2b:a9:82:ca:2f:5a:b9:38:4f:97:c8:81:ce:06:28:d2:
         d6:63:21:e7:75:69:9f:40:cf:a4:67:57:aa:13:ed:a5:50:09:
         bf:6b:d9:35:e2:e2:df:b3:32:b6:b1:3c:7c:ab:9d:66:0f:41:
         f2:b8:4d:12:c4:45:cd:73:df:f9:be:16:7b:bb:56:8d:9a:7e:
         0d:f9:62:23:cc:d3:4a:02:12:38:49:24:01:fa:3a:80:1a:07:
         df:e1:af:a5:b0:71:aa:f9:bc:44:a6:da:c6:a3:09:98:77:9c:
         bd:a8:d0:c2:b2:79:cf:2a:3b:60:47:32:1b:05:1a:27:aa:c1:
         d2:43:44:aa:91:70:d5:87:c6:f5:e2:6f:f3:23:78:25:11:de:
         04:38:1d:68:fd:c5:b1:c3:06:c7:d8:84:8a:9f:cb:f2:21:c8:
         7e:94:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:29 2024 by rpki-client on console-ams.rpki-client.org