Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File:                     TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier:          Q5qBEasSKUCKkjvuQK7GPgw0NX4kbTp7eoIyns9RwSQ=
Subject key identifier:   51:5A:01:B3:4A:24:53:B0:DB:F4:2C:EE:8A:4C:B1:47:A2:20:B7:D7
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0955
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number:          0948
Signing time:             Thu 02 May 2024 21:13:01 +0000
Manifest this update:     Thu 02 May 2024 21:13:00 +0000
Manifest next update:     Thu 09 May 2024 21:13:00 +0000
Files and hashes:         1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: RkGU8KBeShJz+s/bDB8dwQxstgjD3DSTOlj6okZUBns=)
                          2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: UMhjFbbalG7w8eME8JTzI1O8t172t2BGkKC2dZ0AVhI=)
                          3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: Hub66uYgREsxjR6e2wS6DwG5YQeBQuKhNY0vyuu4Unw=)
                          4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: s6hBv6YxfWmimyfh00ce0AvSwTNpbanedXSX1YiE0EY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: May  2 21:13:00 2024 GMT
            Not After : May  9 21:13:00 2024 GMT
        Subject: CN=663401dd-cfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:cb:0b:26:f9:bc:89:77:33:d4:9e:ae:32:
                    a7:90:7f:d6:2c:a8:f4:1c:41:8a:84:3d:ee:77:b3:
                    9b:2f:3b:b2:a7:f7:71:0e:c5:65:5c:03:8b:9a:55:
                    11:62:1a:a0:0e:9e:46:65:28:61:2b:60:75:9d:ac:
                    e5:c2:4c:1b:5c:ae:fc:41:e8:88:5c:48:76:0c:3a:
                    5f:ef:b0:5e:f9:41:69:1f:b9:aa:96:2f:bd:bd:7f:
                    a7:83:e5:c8:ca:ed:5e:3b:bb:05:0e:d4:54:da:6a:
                    6f:dd:5d:11:04:ed:91:e6:d4:91:dd:a7:5c:4f:a7:
                    fb:78:7b:69:67:d5:77:cd:d6:3c:e2:7f:a4:b1:12:
                    82:74:5a:96:ef:7a:c8:3d:84:40:fa:58:11:7b:7f:
                    95:69:c1:29:0f:e7:8d:d0:6d:9f:98:43:fb:5b:8c:
                    08:97:47:47:a6:1e:7c:04:fa:ab:23:64:19:8a:e2:
                    88:09:24:6a:4b:47:02:0d:81:60:35:35:9f:83:15:
                    14:54:94:1d:4a:05:fb:57:d8:8e:66:28:af:f1:a0:
                    21:a9:e4:30:48:5e:9c:e1:8d:40:d8:c8:a5:a0:ff:
                    1a:0a:ce:7f:71:b5:ed:cd:d9:3b:9a:b0:ce:88:5f:
                    d2:58:80:83:ff:76:a0:d6:ce:f8:1d:72:07:97:e4:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:01:B3:4A:24:53:B0:DB:F4:2C:EE:8A:4C:B1:47:A2:20:B7:D7
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:1d:2c:16:e0:b6:60:bd:3e:dd:71:02:08:20:1d:b2:64:
         d8:df:e2:e0:bb:fa:db:32:fb:60:83:82:45:9b:dd:68:a9:42:
         b7:8b:1b:bf:01:93:16:c7:72:d6:1c:d2:2d:f4:25:84:bc:cd:
         d9:33:b3:47:77:e8:88:12:16:80:aa:59:60:3c:9e:d5:0a:11:
         fb:c1:21:6b:1f:f1:29:f4:84:56:c8:e9:95:69:27:7e:6a:ea:
         e8:e3:ec:1a:22:22:b5:25:2e:22:c7:5b:5a:ef:15:11:f2:40:
         e3:da:83:b0:ad:52:0d:a1:09:50:dc:27:97:63:7e:d2:ee:2b:
         a7:46:15:2f:45:d7:d0:c3:70:85:e9:92:c1:e6:78:af:5e:e2:
         76:8f:b0:4c:e8:d0:4b:64:ee:35:d1:52:19:05:21:56:5e:83:
         57:46:64:71:d1:cc:2c:bf:94:3a:4e:d5:e3:1f:e1:e0:46:96:
         ab:a8:a7:1b:a6:d2:2c:f8:44:5f:f4:ee:23:6c:0a:7b:e3:55:
         7c:1a:68:f4:0e:0a:5e:65:c3:62:10:47:d5:25:3d:d1:b3:a2:
         38:48:f1:79:98:8d:94:a3:79:29:39:16:17:c8:6e:df:d9:ce:
         23:cb:13:b1:4d:02:33:a1:8d:d7:9c:fb:db:a6:94:88:d6:36:
         ae:9b:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:47 2024 by rpki-client on console-ams.rpki-client.org