Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File:                     75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier:          D28EcsphcpfnmtLtjcYssD+u2y+k3lNNVLIsUL1XIX0=
Subject key identifier:   93:59:78:D7:FD:38:DE:B6:FA:DC:90:F2:B1:F5:DD:41:EB:A7:9E:19
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number:          C2
Signing time:             Sun 19 May 2024 06:19:42 +0000
Manifest this update:     Sun 19 May 2024 06:19:41 +0000
Manifest next update:     Sun 26 May 2024 06:19:41 +0000
Files and hashes:         1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: 7gA8Z8j+tfLdNCvMz0U77mAatw93GR5aTqNu5yyLiuc=)
                          2: 3CFB1F1CEF2B11EDA9DCF923C4F9AE02.roa (hash: blcMZSvo6KhAhOHjPZ1Rt0X5o7NSUgv8BA41P7IoGJ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: May 19 06:19:41 2024 GMT
            Not After : May 26 06:19:41 2024 GMT
        Subject: CN=664999fe-3e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:f6:72:7d:c6:8b:7b:04:ff:8e:e1:f4:da:
                    be:90:1c:87:c6:7b:03:98:62:fd:c3:ba:eb:79:b2:
                    ab:7f:15:2f:e3:ad:a0:9a:48:3d:45:02:89:28:98:
                    b4:32:12:ea:b6:a2:2b:17:31:09:ba:24:16:55:53:
                    d1:dd:82:e7:64:3d:50:d2:ce:cf:b4:b0:da:ee:bf:
                    8a:27:fa:5c:77:fb:b8:d1:99:5d:3f:d2:0e:fe:1d:
                    15:be:8c:a9:13:dc:bb:eb:49:8f:6b:79:1e:4e:9d:
                    74:6d:82:91:17:2c:80:d6:df:d9:ab:9b:68:48:00:
                    0f:36:92:d6:1c:72:cb:26:d4:4c:ce:a0:1d:e6:45:
                    19:b4:b1:2e:50:af:44:d7:39:52:47:69:70:34:53:
                    fd:33:ae:e8:86:7b:51:07:98:d4:12:77:eb:85:09:
                    60:d3:03:4f:87:4d:79:e5:be:db:76:fa:57:a8:1a:
                    fd:f1:e4:91:6c:bd:ae:1a:53:0b:b5:e4:ef:b9:f7:
                    76:e6:49:9b:1a:a4:27:bb:0f:3b:7c:4e:5f:82:cb:
                    31:6c:90:d4:25:3a:dc:dd:27:87:b3:bc:82:f2:29:
                    16:7b:6a:6b:e0:d0:af:06:db:c5:fa:b5:15:18:fe:
                    e0:48:9e:f6:c5:a1:a8:45:df:85:fd:e2:9d:70:41:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:78:D7:FD:38:DE:B6:FA:DC:90:F2:B1:F5:DD:41:EB:A7:9E:19
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:e8:c8:a0:ed:da:2a:73:dc:b1:ed:59:cc:14:f4:ad:c9:
         43:64:67:b5:f5:e6:29:4f:af:2a:e0:a8:2d:22:51:73:0d:26:
         91:2a:09:2a:46:16:ea:79:7f:65:d2:08:f3:93:8c:cb:bd:34:
         51:dc:b1:bf:c1:f7:71:8f:da:e6:19:e8:e3:7a:8f:2d:d7:80:
         ed:a7:6b:73:88:66:fc:be:1b:a6:d3:9d:6d:65:56:65:0e:59:
         2f:2e:ca:90:fb:99:b6:17:71:20:5e:88:46:9b:08:71:f1:c5:
         5e:ec:1f:ec:cd:d4:92:72:0e:63:11:12:4a:f5:19:0e:39:14:
         4a:c0:51:51:34:78:55:06:06:9f:62:d1:34:97:01:fe:3f:7f:
         ca:bd:51:55:a7:d0:f9:f3:5b:30:78:8a:1d:01:69:97:d1:a3:
         31:30:0b:51:ec:09:f2:e6:27:f2:85:b3:b5:fa:d6:db:d1:d0:
         a9:e1:94:dd:a5:b2:15:b9:3b:9d:aa:d2:00:d5:a0:e7:06:70:
         c2:10:b0:0a:88:f4:b9:68:09:26:9a:38:cd:75:f5:e3:66:d6:
         b9:89:38:75:43:73:18:28:2a:6d:2f:03:49:de:2b:9e:44:91:
         b1:16:90:5d:69:4e:f6:fb:91:57:20:a4:65:72:82:d0:c8:f4:
         fb:f7:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org