Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
File:                     UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json)
Hash identifier:          73mDyhUNE3KXBv2NBNtojoCbehDfJPD6kad2cyqAdxQ=
Subject key identifier:   9B:C6:D4:75:C3:CE:50:75:FB:1C:C9:2B:02:6C:DD:78:4B:6F:2F:1C
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Certificate issuer:       /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
Manifest number:          01CB
Signing time:             Sun 19 May 2024 04:24:16 +0000
Manifest this update:     Sun 19 May 2024 04:24:15 +0000
Manifest next update:     Sun 26 May 2024 04:24:15 +0000
Files and hashes:         1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: SQMcfvcDdwl0+bPYib8Ky2D4imfciEj6w2OavaStyk4=)
                          2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: Ce8LxCwa+14WBiZH4xO77gyajQG4GNjYlXvOSa5B0Fc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
                          rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
        Validity
            Not Before: May 19 04:24:15 2024 GMT
            Not After : May 26 04:24:15 2024 GMT
        Subject: CN=66497eef-ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:26:a2:5e:33:3e:d9:36:a9:62:26:3d:93:
                    4c:28:8b:08:b6:fb:ee:75:f5:a3:53:9f:c2:04:21:
                    5c:c3:f5:98:51:09:70:fb:aa:4b:a1:6b:44:d1:0e:
                    70:f5:74:72:77:b4:eb:d9:30:fb:08:71:ca:49:0a:
                    cc:a3:cc:7f:3b:8f:51:9f:fc:65:93:46:15:4e:80:
                    f8:4a:96:ee:d0:55:8c:ab:54:86:4f:28:c9:8f:d2:
                    91:f4:d0:48:30:e4:6d:b3:c6:d1:e3:91:3f:bc:7a:
                    07:a9:bb:67:85:66:db:ea:b2:a0:16:e4:d7:a7:68:
                    70:2f:c8:a8:bd:a7:36:34:fe:52:3c:9c:a6:e6:ab:
                    4f:3f:d4:d9:bf:b0:f5:90:84:62:9a:28:1d:71:17:
                    04:70:68:ba:9a:b9:42:6d:43:e2:12:7c:1a:aa:00:
                    22:60:0c:01:8d:56:82:b3:a9:46:c1:9b:83:19:3f:
                    44:04:c4:4d:27:7c:20:46:f2:1f:70:25:29:ef:fa:
                    9b:32:98:ff:7e:76:69:ff:59:11:bb:d4:09:ec:81:
                    25:fa:ca:a8:a8:f6:db:3a:a7:b0:b5:33:17:56:68:
                    81:fd:e9:3f:8d:ce:88:7b:8a:7b:2c:1c:a8:88:f2:
                    0f:b9:92:0c:16:7c:b7:85:fc:77:ce:ed:fb:59:88:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C6:D4:75:C3:CE:50:75:FB:1C:C9:2B:02:6C:DD:78:4B:6F:2F:1C
            X509v3 Authority Key Identifier:
                keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:4c:4e:38:e0:b5:ab:4e:e2:fe:3b:4c:b0:6f:df:7c:19:
         26:16:88:7e:23:a7:19:a5:62:2a:72:15:e9:08:1f:19:06:93:
         c7:f8:6b:4c:fc:04:4f:4e:eb:2b:04:0c:37:0c:0f:67:ae:bf:
         19:e8:4f:f6:b4:91:7d:47:a6:97:fb:7e:78:49:7c:51:67:54:
         23:84:01:be:3d:1e:76:12:2d:1a:79:6c:ac:a3:4a:bb:3d:db:
         c5:61:ff:c5:ee:97:f4:31:09:ea:02:ac:14:40:fe:da:29:1e:
         cb:00:37:3f:76:1a:8f:e7:ad:b3:ec:28:89:d1:6d:d0:1a:e6:
         81:32:dd:6e:28:56:7b:f1:98:b9:d3:9a:a7:6f:84:07:35:1f:
         64:f5:e0:2a:e4:5b:ce:f6:dc:9a:84:f6:81:03:dc:b6:3c:86:
         d3:90:05:bc:27:58:9e:f7:64:19:2a:6e:33:94:d4:5e:5d:39:
         80:8c:99:3b:ab:0d:76:0d:c3:3d:91:d6:40:4b:21:81:b4:17:
         03:6f:34:00:1e:b9:28:67:4e:86:60:60:96:3e:37:c2:80:b8:
         ae:96:07:e4:c7:be:c5:65:b8:15:98:b1:37:12:bc:86:52:76:
         7b:d7:05:20:10:b6:71:90:b5:49:1a:19:b5:13:e3:c9:b2:75:
         be:c0:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org