Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          m52E28EDHPpaiqwi2LrO2FrC/afH9TrNZtkhrJX5FZY=
Subject key identifier:   ED:B8:37:C7:E5:C1:BE:E6:09:7C:F0:43:5A:37:AD:42:12:6C:99:7C
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          05DD
Signing time:             Sun 05 May 2024 00:13:59 +0000
Manifest this update:     Sun 05 May 2024 00:13:58 +0000
Manifest next update:     Sun 12 May 2024 00:13:58 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: I8JJLTT7hHSkJMmfTjE3hhMJKcHfPg7fvXBJ3K4ea4I=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: PiK88gR6DqLs+tMf80iFFnjiUEpuB4itY/LI7a3aIXA=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: 8m0invG+9b38yvDYCSRYwDKUjVKmIVlF+1uQJsgg3lY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: ne99q5WbmXbxjRNaAmecrR9xJiEnNFoMmvnLNzg7UUg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: May  5 00:13:58 2024 GMT
            Not After : May 12 00:13:58 2024 GMT
        Subject: CN=6636cf46-d577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:b5:45:99:ae:f1:45:09:23:65:f9:ac:ea:
                    79:45:00:3c:f0:1c:b1:c2:fb:56:e1:db:52:68:7f:
                    57:36:cf:53:37:be:b2:d8:32:b0:10:ec:52:83:da:
                    e6:2e:af:ba:18:a0:e5:67:2f:17:41:f1:ee:47:07:
                    63:90:61:40:13:62:c9:6b:4b:21:ea:33:7f:2c:03:
                    a5:8a:df:ca:6a:b0:ff:c7:d5:90:71:13:ef:10:8c:
                    4f:cf:09:f3:ab:b2:94:89:f7:d3:b2:95:73:8f:16:
                    29:d3:b2:49:23:2b:2e:fb:3e:22:82:c0:2b:92:a2:
                    cd:2f:68:e1:fd:0f:d4:a5:98:58:17:1e:c4:e0:b5:
                    e1:20:5f:26:95:0b:84:aa:2d:18:23:b9:c3:45:93:
                    22:49:c4:63:4b:22:78:29:2e:23:2c:05:38:da:d3:
                    51:0b:3f:de:fe:0e:f9:68:e8:55:e9:d7:1d:64:98:
                    96:28:a4:78:f9:12:44:01:cc:c3:87:d4:c8:eb:a6:
                    47:6c:a7:24:3b:04:db:d0:b3:94:49:cb:87:29:e3:
                    97:ee:9b:76:b8:90:b4:32:46:ea:21:ce:20:4c:70:
                    12:d8:52:62:5b:ff:19:66:78:5a:10:04:b7:67:f9:
                    12:29:50:06:77:24:9c:fc:5a:e3:8d:d2:55:60:49:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:37:C7:E5:C1:BE:E6:09:7C:F0:43:5A:37:AD:42:12:6C:99:7C
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f7:65:a2:04:7f:3d:f1:e3:e2:11:1e:1d:87:33:d7:6d:cf:
         14:26:47:2f:e8:13:86:fd:39:63:33:67:26:e6:04:d6:c9:4b:
         e2:83:f2:0e:c6:06:dd:3f:75:c7:33:c4:c3:96:01:23:dd:81:
         ab:52:94:e7:33:39:0a:12:d7:a5:41:e8:de:e6:98:d9:ca:5f:
         7e:b5:06:66:1a:9f:45:9d:10:2d:b1:64:b1:ff:94:95:bb:dc:
         78:f9:8b:b9:1d:fa:5e:12:4d:2c:85:dc:06:b2:90:14:fa:19:
         b5:84:d5:b2:13:b6:48:1c:97:1e:f9:ee:8c:e2:46:76:f0:99:
         6e:0f:c0:d9:1a:61:23:82:62:b6:40:d2:52:aa:9e:16:95:6f:
         01:12:98:be:69:4b:ce:0d:84:56:a1:1e:db:42:90:8a:be:a2:
         df:9f:59:62:96:4b:89:53:6f:a4:7b:79:2a:f5:f6:cb:ea:74:
         93:5e:37:64:9f:0f:c0:16:1a:7c:44:77:1f:62:f1:52:91:f4:
         7c:02:47:9d:8b:39:a6:6c:b0:dd:df:34:38:6d:b8:32:92:0a:
         64:4e:d1:94:d4:59:2c:91:8a:1b:9c:22:0a:fa:10:58:57:df:
         c7:8c:e3:59:69:ce:20:69:7d:f5:f9:46:3f:3b:3a:73:04:f4:
         06:ed:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:20 2024 by rpki-client on console-fra.rpki-client.org