Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
File:                     qBmAo25inKAR7UPCjOWw-9Jl3mM.mft (raw, json)
Hash identifier:          py3Jb2j5m2S+DceWXi8RxdfCgT9p1jGcNXwXLahAKME=
Subject key identifier:   36:AC:34:A7:AC:65:5A:09:EF:74:7C:2E:20:EB:19:48:15:99:85:F3
Authority key identifier: A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63
Certificate issuer:       /CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63
Certificate serial:       0724
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
Manifest number:          071A
Signing time:             Mon 06 May 2024 22:38:26 +0000
Manifest this update:     Mon 06 May 2024 22:38:25 +0000
Manifest next update:     Mon 13 May 2024 22:38:25 +0000
Files and hashes:         1: qBmAo25inKAR7UPCjOWw-9Jl3mM.crl (hash: C+yo/yR65ApA2O0XTV7nd3UYLTQDqnrK3KKnNlfblJQ=)
                          2: 92170988783711EB9F29BA6BC4F9AE02.roa (hash: ZGe2waqRa8kP17rB0AzLJLr+zD3mWcgT0rpgWNTtxhk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.crl
                          rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 22:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63
        Validity
            Not Before: May  6 22:38:25 2024 GMT
            Not After : May 13 22:38:25 2024 GMT
        Subject: CN=66395be1-806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:40:e3:72:ec:13:6b:90:0d:a3:e5:7e:ea:
                    e8:c4:d8:70:2d:7c:30:7c:34:52:63:0b:79:9b:d2:
                    69:f0:ef:30:2c:24:26:25:c7:11:ec:f4:9d:e4:93:
                    42:3e:1a:fa:74:6b:4e:8a:9b:11:32:e9:e3:81:08:
                    c5:92:ba:35:df:87:cd:9e:c5:19:35:77:a0:36:5b:
                    00:91:85:ab:68:d7:92:0a:ba:18:19:96:7d:a3:bd:
                    5b:80:13:8a:d1:28:2c:d3:0d:10:92:9d:9f:41:1d:
                    97:0c:19:f9:27:e4:c6:0f:12:6d:b0:ba:89:87:84:
                    18:f5:7b:01:ed:b8:af:6e:b9:6b:dc:92:b3:33:9b:
                    7b:34:8c:2f:69:2e:c7:b0:c6:f2:65:d3:d2:ea:10:
                    7b:42:96:33:06:da:a6:81:10:4c:c0:3e:16:f4:09:
                    b4:ef:9f:f8:f8:44:20:2a:29:6e:e4:ff:f3:e1:1c:
                    9b:c2:db:9e:5a:fe:46:6e:83:48:3f:81:2b:56:8d:
                    64:02:53:0d:71:cb:7b:66:d0:66:81:e6:67:b7:8c:
                    c4:b0:3f:07:63:9c:87:d5:da:56:35:28:72:1f:c9:
                    6e:6d:fa:22:d9:d8:54:7a:df:b1:64:c2:37:19:0b:
                    93:64:6b:9b:c0:30:0b:ed:cb:31:83:68:fd:73:42:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:34:A7:AC:65:5A:09:EF:74:7C:2E:20:EB:19:48:15:99:85:F3
            X509v3 Authority Key Identifier:
                keyid:A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:45:45:53:8e:d5:f8:12:a4:93:36:e1:9b:db:4b:e7:67:3a:
         bc:4e:7f:6f:13:14:91:98:3c:ae:6a:40:cc:58:3e:53:fd:ca:
         d9:b0:ab:26:75:dd:89:f6:39:e0:36:81:55:f6:7d:69:1b:49:
         35:49:d9:35:6b:6d:56:b6:18:ba:0a:bb:1d:93:40:f4:37:e7:
         05:39:41:b0:c9:82:f1:de:bf:a8:1b:73:d3:0c:ce:f9:a0:81:
         ec:76:0b:5b:10:37:4f:de:1d:6d:c9:f9:02:87:46:58:be:5b:
         68:93:de:a1:59:fc:ae:15:9e:ca:4a:8a:05:f0:c8:b5:ad:01:
         5d:51:78:41:d4:79:2b:89:58:4f:fb:27:e6:f9:3b:1a:ed:6f:
         45:97:88:9f:6b:3c:26:5e:c3:09:9b:8a:3a:46:73:e7:52:08:
         ec:ae:34:51:73:6d:89:f9:97:51:10:6c:67:cb:12:0c:5f:89:
         41:22:5e:5d:73:9d:dd:08:f1:e0:b8:57:2e:bd:23:8a:1f:95:
         51:f5:8e:b4:05:f3:29:d9:a0:ec:e6:7d:04:a5:20:15:52:7e:
         bf:fa:24:7d:b8:77:b2:af:44:f5:d8:dc:63:87:fe:a5:d5:0a:
         9a:9f:b1:fa:42:6b:ea:f3:ce:76:a4:0c:a7:b0:8c:2d:b9:0e:
         1c:b0:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:19 2024 by rpki-client on console-ams.rpki-client.org