Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          h+Q7zxJMBz0Dj/7V0zDr0WqXD2WAFirOtbNwkJGapMQ=
Subject key identifier:   03:77:70:E3:B2:0A:07:7B:A3:4D:21:7B:56:48:6F:90:22:D6:64:76
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       19B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1986
Signing time:             Mon 06 May 2024 16:54:45 +0000
Manifest this update:     Mon 06 May 2024 16:54:45 +0000
Manifest next update:     Mon 13 May 2024 16:54:45 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: U+x/GZBB9DFXv8V6t987NmAjxoKDCRZ6B4nYZs4UWD8=)
                          2: 6C897E54597B11EDB603273AC4F9AE02.roa (hash: ag1Pddz2zGOl40000GuyzDYG6L53rMlZ4a9fYvlMEw4=)
                          3: 6E44CE88597B11EDB603273AC4F9AE02.roa (hash: sm5vPKkEaH8kN/zqvnkW8+ebxqe9IR2OltpT7FLU+38=)
                          4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: zDCsN8EEjXtOp6TqSejBVXPQH40GaqpRg9VrLJEVNzQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 16:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6585 (0x19b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: May  6 16:54:45 2024 GMT
            Not After : May 13 16:54:45 2024 GMT
        Subject: CN=66390b55-a963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:0a:9e:a6:d7:51:e9:f0:3a:35:cd:a8:cc:
                    79:bd:96:1e:8b:b6:c7:ac:98:3c:e0:92:96:14:c8:
                    e1:cc:3e:34:de:d2:cd:32:32:60:1c:ed:e9:5a:26:
                    35:54:66:92:ca:54:41:53:70:ab:44:c2:3d:56:2b:
                    43:f3:8e:e8:a1:b8:ed:66:41:d2:1d:f8:23:e9:fb:
                    c1:59:35:4f:8c:a1:d6:00:73:b2:fb:83:98:32:14:
                    16:3a:73:c7:99:f6:d9:9b:ae:0f:ef:fd:07:94:50:
                    3d:91:f7:78:b7:3b:d5:2e:93:72:ef:d4:3c:81:27:
                    02:d3:48:c8:ca:7f:51:cc:cf:61:bc:6e:99:1b:47:
                    ba:7d:be:7f:e6:3a:b8:9a:68:df:46:9b:50:92:10:
                    f1:49:ea:63:2a:01:05:56:ad:d1:33:33:f5:16:a6:
                    53:d2:c8:46:f0:0d:d9:4d:5d:c2:d6:0c:23:86:cb:
                    7a:43:1c:a0:71:89:cb:3e:44:8f:29:8a:02:f2:5c:
                    cb:64:b0:7e:7b:b4:61:69:03:ab:50:d8:ad:11:65:
                    b6:a4:a5:72:de:1f:37:cb:4f:21:00:8d:3a:77:01:
                    20:e8:83:72:9c:90:6a:ba:fa:b7:e3:b3:ee:38:f7:
                    af:30:c1:0b:48:1f:b9:7f:29:d4:1a:97:1a:7d:6f:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:70:E3:B2:0A:07:7B:A3:4D:21:7B:56:48:6F:90:22:D6:64:76
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:61:2f:0b:e4:8d:19:59:4d:1d:7e:9c:35:3d:52:61:36:
         85:87:18:a9:dd:1c:64:77:84:9e:68:56:b6:b4:29:56:c9:a6:
         74:9c:88:76:3b:94:f1:02:d9:3b:bf:a5:49:87:57:f2:f6:a6:
         84:82:20:bf:d7:f4:c1:14:da:9b:4f:83:bb:b1:e8:28:5f:e6:
         7d:a7:bb:de:4c:bd:f6:a1:db:c6:68:ff:96:f2:a0:89:14:b4:
         2a:3a:17:40:86:22:14:68:fb:f6:7f:80:ed:e6:1f:24:09:78:
         6f:71:5d:af:32:29:30:b5:9d:36:3d:ee:2c:fc:f0:2a:5c:1b:
         9b:7f:55:ad:fd:09:d7:9b:ad:62:8d:21:3d:54:68:9e:ba:7a:
         b1:53:19:2e:8e:52:1e:40:12:5f:2e:63:86:78:98:3a:93:75:
         6b:d0:61:44:d9:4d:6a:a1:ed:16:22:a7:9b:d5:40:1b:d9:14:
         99:d0:58:69:12:26:2d:9c:a1:0c:e1:d5:66:42:c2:27:5e:00:
         f3:d8:8f:33:2f:65:83:83:25:58:68:3d:d3:ee:b8:09:68:23:
         f1:5f:32:8d:f4:fe:d1:22:cb:07:7d:5d:2c:e1:85:7a:f5:9c:
         3c:ec:bf:e5:64:a6:12:ff:08:9e:7a:87:77:06:9b:76:04:08:
         f6:33:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:43:27 2024 by rpki-client on console-ams.rpki-client.org