Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
File:                     njXlPupre8PsKa87NiDpplTAtqw.mft (raw, json)
Hash identifier:          eykxsvV2JlJel1TgxbSW+j2oGkhmF2UfNN9gbj54OgQ=
Subject key identifier:   D9:89:0E:27:E8:7F:29:2A:24:96:B5:7E:87:C3:BE:54:DD:6B:3B:D5
Authority key identifier: 9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC
Certificate issuer:       /CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
Certificate serial:       0483
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
Manifest number:          0480
Signing time:             Tue 07 May 2024 01:38:53 +0000
Manifest this update:     Tue 07 May 2024 01:38:52 +0000
Manifest next update:     Tue 14 May 2024 01:38:52 +0000
Files and hashes:         1: njXlPupre8PsKa87NiDpplTAtqw.crl (hash: MMC5ekzEPRkxoxuk3H+aDBk+HooohFElanPal5uJ/lE=)
                          2: E11FA920F11A11EB9F005358C4F9AE02.roa (hash: dJk86CBbg4pwdv1B5jZvyscSorM/Qz1nwmQMw37XARM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl
                          rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 01:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91177A8/serialNumber=9E35E53EEA6B7BC3EC29AF3B3620E9A654C0B6AC
        Validity
            Not Before: May  7 01:38:52 2024 GMT
            Not After : May 14 01:38:52 2024 GMT
        Subject: CN=6639862d-11bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:ea:16:bc:76:81:30:7f:29:2f:09:99:51:
                    14:ab:00:f6:bc:b2:52:5e:4c:6b:4d:fe:ed:30:96:
                    d2:87:f8:db:94:36:5b:0a:28:f4:a7:3a:44:9b:43:
                    5f:51:0f:a5:d3:48:5c:eb:3b:0c:a1:16:f3:ad:06:
                    47:4b:a2:08:eb:f4:0a:48:f7:59:ba:7b:4a:d9:4d:
                    63:42:28:0a:23:76:71:db:61:6c:bf:ed:83:04:a3:
                    d4:bb:fa:9b:b8:cf:75:fd:33:1b:f4:03:43:5c:5a:
                    7d:3c:75:60:a9:08:2b:8d:24:81:f4:e7:4e:75:74:
                    4c:50:ff:4e:d8:cd:8a:d8:5f:15:e4:13:cd:ed:76:
                    18:60:8c:32:50:34:bb:e8:48:a2:26:cd:e9:fe:e2:
                    39:77:73:f0:06:8c:77:27:06:0d:11:3e:c2:49:5f:
                    9f:34:84:82:c5:2d:cf:1c:2e:c2:f2:6a:fe:56:5e:
                    07:c1:2c:c4:3b:23:a4:2b:c7:ed:9b:81:cb:93:12:
                    2c:aa:e1:60:7b:1b:46:01:bc:48:2f:b8:8f:51:15:
                    9e:6b:fe:1a:7d:84:12:21:a2:58:3b:ca:87:87:07:
                    c0:58:f9:bf:50:23:2a:c1:90:5e:84:9d:62:36:f3:
                    cc:78:62:7e:7c:4e:15:b4:f9:87:6d:d7:df:57:68:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:89:0E:27:E8:7F:29:2A:24:96:B5:7E:87:C3:BE:54:DD:6B:3B:D5
            X509v3 Authority Key Identifier:
                keyid:9E:35:E5:3E:EA:6B:7B:C3:EC:29:AF:3B:36:20:E9:A6:54:C0:B6:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njXlPupre8PsKa87NiDpplTAtqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177A8/BA526138F11611EBB0E3C74DC4F9AE02/njXlPupre8PsKa87NiDpplTAtqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:43:3f:ed:59:1a:a2:b8:4f:56:98:a0:06:89:55:b0:77:
         83:c2:60:17:a8:d4:8e:dd:79:54:6d:6e:67:e6:04:d3:0e:f3:
         0a:34:48:af:95:31:4c:cc:e7:bd:e2:5f:07:55:1a:e1:e9:b3:
         89:0e:de:44:e7:71:dc:32:b6:0e:3d:d2:c6:84:f9:18:68:a2:
         e8:fb:94:da:75:58:3a:e7:88:41:52:df:31:0c:df:98:1f:45:
         02:c8:52:ea:87:eb:c1:6d:30:bf:c5:12:27:73:e0:ab:ca:d7:
         c4:fd:f5:a7:6a:7c:e2:07:a4:7d:63:27:0c:eb:10:0a:25:ea:
         5f:39:2c:28:21:3d:23:72:12:3b:3e:6b:7f:b1:23:3a:cc:73:
         d8:14:a3:5d:d6:cd:83:9c:4b:e7:4c:dd:16:19:fd:d3:2c:74:
         5d:53:b0:c4:eb:f6:7b:f5:af:19:b9:82:14:91:da:03:b5:38:
         1c:b0:6c:9c:eb:be:be:03:54:4e:f9:8e:2f:96:51:ce:0a:ee:
         49:f2:09:25:e9:1f:29:49:43:c2:66:37:2a:89:0c:52:1d:f2:
         89:56:c1:c7:08:35:9e:6f:be:ca:5d:12:74:4a:fe:6b:5f:51:
         1c:ff:ef:01:dc:66:61:23:72:67:e4:d1:a9:ef:b0:5c:7d:5a:
         f7:3e:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:17 2024 by rpki-client on console-fra.rpki-client.org