Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File:                     jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier:          Xck8UkKQDw2EMzHVya2wg4/RUPTDla1KgOp2ZxtRTDU=
Subject key identifier:   9C:24:41:A9:70:13:87:61:8F:52:DB:3C:BD:9B:38:83:AF:88:64:1D
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer:       /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number:          01B7
Signing time:             Wed 29 May 2024 05:00:37 +0000
Manifest this update:     Wed 29 May 2024 05:00:36 +0000
Manifest next update:     Wed 05 Jun 2024 05:00:36 +0000
Files and hashes:         1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: /8JLjNWYe2oMkyHTKYd0HPZimy7RTkHLfFpg+lDWTCQ=)
                          2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: ByMMTLJARN5yjX3wqklaZy/AwqiPVmKjwk/JcHsDM+4=)
                          3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: OZcqyskTabG9dXZ9tOQBtkIg+n17tBstz4awFEOoRXY=)
                          4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: kYt8HBbvvye45z7EQR9CTuy9yyrFOtEs94d8Z+Sgk6g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
                          rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
        Validity
            Not Before: May 29 05:00:36 2024 GMT
            Not After : Jun  5 05:00:36 2024 GMT
        Subject: CN=6656b675-43c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:84:07:e5:73:d6:16:b2:1a:b1:80:89:86:
                    fc:cc:24:5e:52:65:93:b9:d0:b6:c7:01:b5:fa:a9:
                    2c:4c:94:e4:1c:13:b7:b6:76:de:28:07:db:44:d7:
                    ab:02:fc:e0:49:e5:e6:26:11:c2:04:68:e4:37:8a:
                    8a:cc:ae:b8:c3:12:bd:5f:db:c4:a0:50:6a:e2:24:
                    09:f8:2b:c3:83:72:7c:b8:30:60:f0:c3:51:fd:5b:
                    f1:ce:e1:1c:17:5b:35:51:98:ff:22:99:9d:73:d2:
                    df:f7:69:11:87:87:0b:59:a0:56:e9:51:2e:ba:87:
                    d3:1c:83:25:38:4a:bf:18:44:23:12:50:4f:18:0b:
                    fd:49:2a:f7:46:79:41:8c:dd:a4:9f:35:fb:5d:51:
                    29:1e:f6:a9:bf:4c:c9:6b:4e:9f:11:db:8b:cf:43:
                    b1:30:60:30:de:62:2a:db:d0:c3:e1:f4:10:6d:c6:
                    3e:4c:1b:a4:5a:5a:1d:1e:c8:c3:ab:90:1f:de:16:
                    86:1e:8c:a2:a0:c2:af:70:ea:e6:4d:32:ee:a1:1a:
                    be:29:c0:34:1d:97:c0:2e:94:35:f4:69:03:7d:a2:
                    ba:b4:23:e9:1c:da:a8:88:f8:33:83:00:34:67:7d:
                    bc:f6:72:2b:07:85:ea:51:b9:dc:fb:e8:3f:f3:0d:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:41:A9:70:13:87:61:8F:52:DB:3C:BD:9B:38:83:AF:88:64:1D
            X509v3 Authority Key Identifier:
                keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0e:09:d3:c9:91:45:7d:e1:b4:fe:6c:1a:c9:bd:1b:4d:16:
         6a:e8:79:65:f5:ab:65:a3:ed:7d:f8:ae:29:a7:5c:a8:5f:dd:
         0f:d8:11:1f:0d:73:1e:4e:e9:2e:e5:4f:7f:75:f3:b1:67:69:
         d2:9c:92:6b:54:70:7b:7a:1b:ca:1f:58:64:61:11:f8:fc:ed:
         52:7d:1c:d8:94:79:12:ac:d4:92:73:06:a3:b3:f6:d2:cd:06:
         e6:5a:85:06:87:5c:b4:d8:00:f3:1f:fb:d1:90:49:53:0f:ae:
         74:11:f7:20:73:24:6a:8c:21:4e:f2:3f:fe:f4:c1:ae:cf:a8:
         69:2b:00:19:a2:aa:ef:13:cf:ef:4d:8e:06:44:aa:3c:f0:57:
         82:31:2f:dc:c5:71:3c:ac:d8:8e:71:78:52:d8:f4:c8:fb:e4:
         07:06:89:40:65:09:c2:3e:25:0e:b5:3b:9e:78:02:49:a7:4a:
         60:14:8c:21:c4:ee:10:85:70:1a:d4:f3:38:33:db:38:ce:e8:
         c8:db:5b:18:a1:05:7e:58:83:47:10:0b:0f:82:2b:5f:9c:60:
         bd:a8:55:05:b4:f5:3f:26:09:7e:18:12:2f:96:c1:ff:0b:1d:
         5b:9e:92:b3:5b:08:0c:89:13:e4:1e:eb:ba:ab:44:18:d9:bf:
         4a:b7:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:29 2024 by rpki-client on console-ams.rpki-client.org