Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File:                     eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier:          14gavEi111Xyn17xTum03ZUD4YBivsRWaQ9DblNtePo=
Subject key identifier:   0B:C7:DB:30:2F:8C:C6:82:30:8D:79:FF:F4:FB:C4:63:04:FC:39:15
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       04A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number:          049E
Signing time:             Wed 01 May 2024 01:55:02 +0000
Manifest this update:     Wed 01 May 2024 01:55:01 +0000
Manifest next update:     Wed 08 May 2024 01:55:01 +0000
Files and hashes:         1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: 5K1nfo6ewx8zWrQHBWCJ+ryaSovO/Wl1JKebCn3bWu0=)
                          2: F86C60EAD8FF11EDBE662B5BC4F9AE02.roa (hash: 0kzJ5Ors8cjibpeEhL0qaR8YyfRJr1V6bKX+qLgzlnw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
                          rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 01:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: May  1 01:55:01 2024 GMT
            Not After : May  8 01:55:01 2024 GMT
        Subject: CN=6631a0f6-29f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:8e:2a:d4:6b:ef:40:4f:5d:c8:6a:e7:39:
                    11:d8:e9:ab:7f:2f:7b:3e:d0:29:03:0d:41:3f:f8:
                    eb:77:d0:f8:cc:d1:cf:50:b5:18:b8:a6:4d:ac:4a:
                    7f:3f:99:96:d7:a1:37:a1:dc:c8:b7:b8:d7:a1:62:
                    ab:08:1e:9e:c7:cd:f4:99:8e:3d:16:56:eb:f0:b3:
                    9d:53:24:12:ca:6c:68:fe:53:83:fc:9b:94:0d:94:
                    81:cb:5d:a1:93:56:1d:e5:be:ae:30:f1:18:a6:9a:
                    79:22:4b:74:2d:8b:81:17:cd:84:c0:d3:f9:15:00:
                    0c:e8:be:28:c6:b3:0e:e1:7a:ac:3c:20:cd:52:62:
                    52:8c:5f:a4:10:bb:62:bb:e4:47:08:0a:13:45:33:
                    e9:02:9c:f2:00:f3:5e:9c:6a:60:7d:18:77:05:3e:
                    b0:61:bb:45:4e:6e:3c:7e:2c:d9:46:46:6a:dc:7e:
                    ae:10:68:c0:c0:cc:b6:19:c5:0e:6b:7f:41:73:c4:
                    ef:8e:51:1f:6c:98:6f:d0:e5:89:85:46:ab:8b:54:
                    d2:23:64:07:ff:0d:9b:fe:a3:c1:47:f9:c5:72:e0:
                    cd:71:2a:e1:8f:6f:fc:ef:8b:d6:95:57:e6:03:c1:
                    0d:b6:e3:83:97:5d:5e:60:26:c9:5f:06:2d:71:f2:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C7:DB:30:2F:8C:C6:82:30:8D:79:FF:F4:FB:C4:63:04:FC:39:15
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:14:ff:5e:5c:1d:8f:0b:ed:41:63:b2:d8:d2:d4:f8:b6:d6:
         e0:49:b7:97:6c:40:0e:3a:ea:9a:3a:2e:8a:fe:44:38:d5:51:
         a2:c2:f1:1d:e3:1c:9a:39:9b:5d:e0:97:24:e5:28:ad:a5:62:
         b1:e3:8f:5a:da:16:df:ff:e0:ad:e6:bc:4d:c8:49:40:78:17:
         06:8d:86:2c:b0:b7:fc:9d:d9:e5:bd:80:18:95:06:5a:89:cc:
         61:5e:60:24:e9:8d:1b:c4:87:01:a0:b5:22:0d:80:f3:1f:d0:
         17:42:b1:db:9a:ed:30:f0:3d:fe:25:7c:8e:cc:54:42:e2:77:
         c9:cd:db:36:e2:30:b1:62:38:a7:82:af:93:e0:d9:49:fc:39:
         e3:0a:9b:88:86:0b:14:58:98:cf:59:28:90:30:72:ea:7d:4c:
         78:af:b3:cf:9f:c4:1e:bc:0b:47:a6:33:b9:e4:80:d8:12:53:
         c9:df:72:23:b8:a0:74:5d:cc:13:4c:56:34:11:94:4a:fc:66:
         83:5f:fe:40:1d:e9:bb:00:96:da:8f:eb:20:6b:90:73:d6:13:
         a6:a4:90:f9:fd:23:b6:cf:ce:1b:3e:b4:18:60:4a:87:11:99:
         e5:5f:56:c4:8e:2e:3b:78:0f:d6:ab:46:01:cd:4f:27:e1:0b:
         b1:0b:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:20:31 2024 by rpki-client on console-fra.rpki-client.org