Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File:                     R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier:          IVd18QWzictGefvWu29w+FMyb7e0ljctuIwJqc0XMMY=
Subject key identifier:   55:22:88:78:3B:E0:09:7E:95:D9:3F:2B:AB:52:74:3D:7E:A9:11:80
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer:       /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial:       11BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number:          11A6
Signing time:             Thu 02 May 2024 17:49:46 +0000
Manifest this update:     Thu 02 May 2024 17:49:46 +0000
Manifest next update:     Thu 09 May 2024 17:49:46 +0000
Files and hashes:         1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: JB/QZkWuWzKYhByJRFNB7QNztKtiBhTwM5pZaEuLpaU=)
                          2: D4F8B4B407D511EF86AD0733C4F9AE02.roa (hash: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok=)
                          3: D23C828C07D511EF86AD0733C4F9AE02.roa (hash: TIcF9eCaMV6FnGaU4Vlj0gKLnYzPZQ9nJWLLlWU8tG0=)
                          4: D30F4BB807D511EF86AD0733C4F9AE02.roa (hash: hyPyTgVROwH264cYH1g18w3q6Dp/RsLhE4jRRmTdm6Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
                          rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4541 (0x11bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
        Validity
            Not Before: May  2 17:49:46 2024 GMT
            Not After : May  9 17:49:46 2024 GMT
        Subject: CN=6633d23a-226c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:78:54:42:46:9b:d0:d4:0c:94:73:46:36:
                    7a:17:d9:15:0e:38:82:8c:7f:b7:20:7a:e1:02:54:
                    23:46:05:92:67:f1:39:ed:4c:97:e2:4b:88:57:ed:
                    4a:00:7e:9e:04:fa:17:1e:77:fb:85:d9:2a:88:d3:
                    9b:9e:26:43:6f:6b:9b:56:fc:75:02:7b:da:dd:b9:
                    6d:58:74:1e:5a:dd:db:c3:f7:b6:56:7e:00:3b:47:
                    cd:b2:90:83:38:6c:57:c2:a1:57:ba:da:79:ce:55:
                    01:14:a7:df:47:e1:50:96:fa:0d:65:d5:73:43:08:
                    a7:50:32:af:ee:0e:ec:ff:63:c4:4d:e3:b0:b2:be:
                    61:5e:c8:42:ad:00:fe:f3:3b:56:54:6d:1f:f8:ee:
                    d2:f3:51:2f:57:7a:fb:d0:91:0d:b9:c9:03:4c:67:
                    aa:89:95:80:97:3b:59:b7:19:12:dd:c0:10:74:2f:
                    a3:c8:3a:f2:50:ce:8e:e0:6c:e2:87:b8:ae:b8:c9:
                    26:df:ef:ee:cd:36:10:fb:00:3d:0e:39:b5:7a:75:
                    97:05:85:0e:01:fb:5f:11:43:eb:b6:4a:21:6a:73:
                    ba:cf:41:d6:99:97:1c:2a:ac:6a:9b:dd:eb:6f:cf:
                    41:a5:7b:f6:1c:6f:65:46:dd:29:00:df:a4:9b:93:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:22:88:78:3B:E0:09:7E:95:D9:3F:2B:AB:52:74:3D:7E:A9:11:80
            X509v3 Authority Key Identifier:
                keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:7a:54:35:42:e3:4c:c9:4c:f4:59:4a:2f:45:a9:6d:49:
         e1:56:17:f0:78:38:29:86:0a:bf:69:87:41:45:dd:2a:98:48:
         1e:24:44:51:a0:45:2b:bd:32:d4:ee:61:04:32:9a:41:3d:0c:
         e9:34:61:29:d2:a7:5a:79:ac:a0:a4:af:de:d5:4b:22:5f:ce:
         6f:e5:de:7a:8c:19:55:e8:54:ec:fd:85:dc:ad:d7:e0:30:35:
         f0:d1:e1:08:e7:5a:16:c7:37:9a:49:7f:57:2f:27:44:bd:8e:
         64:7b:25:cd:fa:1c:be:c5:18:4f:c7:db:27:3b:85:70:8c:a5:
         97:ec:24:26:96:81:23:b2:62:14:0e:2c:d2:73:ef:10:44:ad:
         fc:7f:e0:18:bc:84:0c:08:3f:a2:f2:40:a8:cc:a1:46:0e:4d:
         14:53:65:36:cf:5e:9c:e2:e8:5d:af:4a:98:3c:f2:88:65:d7:
         b4:52:90:e9:ed:23:68:ff:24:f9:49:0c:ba:2e:dd:70:37:b6:
         57:06:75:6e:55:79:8e:66:88:4d:00:2c:58:d4:10:08:c4:14:
         1b:87:ab:27:e7:e3:e4:f8:51:f0:d0:4f:81:6b:56:f7:eb:95:
         62:8d:be:96:ac:d1:a6:fb:01:1b:e8:e0:01:ff:6e:e8:0d:de:
         f5:f3:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:18 2024 by rpki-client on console-fra.rpki-client.org