Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File:                     RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier:          nXcjc050mhle3mCppzrBwQcM7+UtsGphP2BX4vDQu7E=
Subject key identifier:   0B:BE:5D:35:C8:CA:9C:97:18:11:5B:22:10:C8:ED:30:29:5E:D4:76
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer:       /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number:          0105
Signing time:             Fri 31 May 2024 06:21:03 +0000
Manifest this update:     Fri 31 May 2024 06:21:03 +0000
Manifest next update:     Fri 07 Jun 2024 06:21:03 +0000
Files and hashes:         1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: Qk1pkWdI3ewBJdYbucWbPteuyaKQPE8UWJ/Ss/BPGSA=)
                          2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: U8ZBte2uNWwIrX6bSKbypyVGCqOFeRohsjTofPcbVp0=)
                          3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: VvRWFM8hSr1F+uDn107EVzpQtzcyRibgxYedeLMEFnw=)
                          4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qaqh2gmAH0q0AVhnqHVnbULHtQ39NeqtniJ4X0tiZyw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 06:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
        Validity
            Not Before: May 31 06:21:03 2024 GMT
            Not After : Jun  7 06:21:03 2024 GMT
        Subject: CN=66596c4f-5a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:84:5a:0b:1e:5e:5a:15:3c:91:37:97:3e:
                    60:db:10:83:70:c7:4c:c7:10:b3:44:fb:27:11:79:
                    b1:d9:dd:74:f2:6c:7e:aa:03:c2:46:80:69:22:04:
                    4f:9e:bb:68:b9:ea:c7:b7:d0:9e:7c:8c:05:71:a8:
                    a4:e2:73:58:1e:00:be:eb:9a:0a:85:3f:dd:06:55:
                    73:44:cf:e4:a8:62:0d:19:d8:e7:2e:49:71:3b:4b:
                    a3:fc:16:16:72:f8:53:c2:16:3c:42:1b:14:a9:fb:
                    24:f6:68:34:18:40:ed:f6:b9:c5:d2:da:dd:0b:8d:
                    b4:5f:4a:54:86:79:bc:68:93:e5:72:77:a0:48:0a:
                    63:ca:e7:b8:a4:c8:32:32:96:83:71:bc:6e:d1:77:
                    71:22:c9:98:e9:55:02:a1:d4:84:47:94:03:4f:61:
                    ea:7e:34:80:96:66:49:60:04:2e:80:f5:2c:2b:61:
                    99:fe:c0:cc:32:07:80:cf:23:47:25:8a:b7:e0:e5:
                    82:b4:39:fa:38:63:02:40:0e:f4:fb:80:7c:b1:bd:
                    03:9a:da:6b:03:9c:6f:d2:ab:6e:6c:e4:82:f6:a1:
                    71:61:4f:31:d7:47:1b:0b:c2:a4:ed:dc:ff:d0:2c:
                    82:3c:c9:d8:59:5e:6a:17:30:61:15:3e:76:d7:05:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:5D:35:C8:CA:9C:97:18:11:5B:22:10:C8:ED:30:29:5E:D4:76
            X509v3 Authority Key Identifier:
                keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:96:12:0d:4f:3c:d5:48:62:cc:59:dd:b6:d6:b7:a1:5d:
         f0:35:74:02:6a:63:c5:3a:0e:cc:a0:69:2b:1f:71:d2:23:de:
         0e:49:07:d1:98:73:56:57:8e:75:32:c0:37:38:05:74:27:c9:
         22:a8:0b:e4:e5:d4:19:d6:d7:31:12:5e:e5:3c:70:51:50:30:
         20:c7:fc:ee:24:ce:62:05:3a:90:aa:aa:01:45:98:47:86:53:
         a9:45:87:f3:87:e0:75:b1:cd:be:9a:97:7b:5d:4d:80:2a:7f:
         4a:8a:47:a0:69:da:3b:b7:27:18:b2:7a:d6:39:8a:61:96:a4:
         41:bd:7e:1e:32:06:a1:bf:69:be:a1:37:b6:5f:5f:32:ba:ed:
         5a:21:1c:c1:76:b6:da:a3:e5:81:fd:13:c9:1f:11:18:70:ed:
         d0:a1:4b:5f:f8:9d:14:bf:e7:4e:5d:66:59:48:7f:88:88:2b:
         1f:4b:b1:2b:31:2d:09:12:38:6f:e8:2b:62:77:e3:e1:49:3b:
         d6:82:bd:ee:e3:05:7e:7d:7b:61:1a:06:8a:68:57:38:d7:c7:
         09:d7:b3:33:7a:2d:82:84:0a:12:1e:8f:4e:d9:a3:14:59:9c:
         c5:e3:31:43:f9:54:9a:f2:94:5d:5d:3a:dd:b4:d1:f3:71:82:
         c6:b6:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 08:39:02 2024 by rpki-client on console-fra.rpki-client.org