Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
File:                     rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json)
Hash identifier:          3a+1KoNASDe3cg6X64Tw1yCGDLWlDJ0JR9Fep71tQlk=
Subject key identifier:   2A:89:AE:AB:90:0A:2D:4E:48:2D:8D:CA:72:AB:2F:EE:16:E3:02:E9
Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3
Certificate issuer:       /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
Manifest number:          5B
Signing time:             Thu 17 Oct 2024 05:32:01 +0000
Manifest this update:     Thu 17 Oct 2024 05:32:01 +0000
Manifest next update:     Thu 24 Oct 2024 05:32:01 +0000
Files and hashes:         1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: oAfAS3v6jcpbsa8xtHbJqdliz1ZjbxrQiEM/KbvwLrA=)
                          2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl
                          rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3
        Validity
            Not Before: Oct 17 05:32:01 2024 GMT
            Not After : Oct 24 05:32:01 2024 GMT
        Subject: CN=6710a151-78ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:d1:9a:82:7a:7f:e9:7a:75:40:cb:15:91:
                    cd:19:25:31:bf:1f:b7:9f:36:cf:28:7b:cf:18:10:
                    f3:98:45:92:9b:da:0d:d6:f6:a4:5f:1c:57:99:5a:
                    6c:a9:77:32:df:47:29:11:00:cd:45:b5:a9:52:51:
                    5a:23:fc:a8:28:51:c9:f2:5f:b0:17:e9:ef:5f:22:
                    b6:73:31:7a:84:03:c6:d9:5a:96:83:b3:4f:d4:92:
                    7e:38:0a:27:ae:e8:8e:e3:83:ff:70:8e:6d:0f:1e:
                    35:86:10:58:f2:1d:f0:7b:91:16:ce:3d:b3:32:75:
                    cb:96:46:12:95:be:ae:2c:1a:42:cb:55:03:a4:01:
                    d3:4e:9a:b5:70:0e:56:9d:f9:1f:92:ce:9b:2e:0f:
                    cb:dd:69:4c:8c:d7:9e:a6:7d:cd:ca:8c:7c:e6:c0:
                    94:af:f1:ba:ac:78:d3:db:d0:94:07:6c:16:13:0f:
                    7b:55:4e:7a:6d:c4:90:ee:3f:de:91:66:05:4c:a3:
                    fb:50:bb:c4:86:43:c5:2f:35:ab:2b:cb:bb:4c:34:
                    5b:52:49:e9:f0:f1:f2:ac:b4:a9:7b:29:81:c5:6e:
                    5e:75:76:ac:f7:4e:7c:57:ed:5c:b1:83:01:54:9e:
                    02:82:eb:ba:7c:45:e0:41:58:dc:e3:ac:b0:d0:06:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:89:AE:AB:90:0A:2D:4E:48:2D:8D:CA:72:AB:2F:EE:16:E3:02:E9
            X509v3 Authority Key Identifier:
                keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:61:0f:73:21:da:50:31:cf:6b:e7:9d:21:23:7f:1e:f7:
         6b:23:3e:e4:6b:4b:c7:8a:9c:b2:e4:f7:7c:df:33:07:4b:36:
         53:37:bf:f0:96:69:3e:36:c5:d7:4e:0a:ab:49:a1:91:aa:86:
         15:9f:8a:e2:e1:5a:13:94:40:52:e3:81:e7:16:8b:df:c3:9c:
         0f:4b:8e:b6:a3:7b:7b:64:2c:d5:a4:96:6b:49:dd:b3:08:4b:
         c1:85:15:a6:34:79:eb:42:4c:eb:e1:17:dd:e7:28:06:c4:37:
         fd:bd:54:22:b7:af:f2:53:78:28:c3:c6:59:4c:ba:ff:2e:6e:
         4e:0c:0b:89:a2:4e:7d:3e:ee:0b:f1:72:06:44:88:13:93:00:
         b6:73:00:b2:89:ea:ad:e3:e5:65:f2:4b:5b:7e:80:ad:4b:7d:
         20:a2:55:1f:a6:07:6c:57:21:1e:4e:80:dd:98:d5:49:50:58:
         c3:dd:d3:0e:ca:33:2d:d5:e1:12:45:91:19:c4:ac:2a:ab:8d:
         79:9c:85:2c:ec:03:52:c4:1b:0c:58:45:e2:12:8a:e1:fb:f7:
         8a:d8:b3:2e:80:2a:d3:77:24:dd:d9:00:0d:fd:36:47:26:e1:
         b4:6d:6e:71:04:90:10:5e:7c:7d:14:8a:cf:0c:eb:ab:a6:e1:
         8e:38:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:05:45 2024 by rpki-client on console-ams.rpki-client.org