Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          2zv/exZBbsWOKF4hfGag/fIroObdlCXgxdx1D7UXqEg=
Subject key identifier:   D8:89:CE:21:36:41:3A:B0:11:4B:33:A0:FB:68:85:20:B5:5E:B8:E5
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       0513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          050F
Signing time:             Sun 05 May 2024 01:15:28 +0000
Manifest this update:     Sun 05 May 2024 01:15:27 +0000
Manifest next update:     Sun 12 May 2024 01:15:27 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: y4eGDy2HypY/vV2HPlwFDhQv1OIujP3KnI72Zo8Zjas=)
                          2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: mdfptfU1KFsjIZAm1iPXbK29nkG/PT2OQg8PEsvtPkY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: May  5 01:15:27 2024 GMT
            Not After : May 12 01:15:27 2024 GMT
        Subject: CN=6636ddb0-bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:1a:54:98:58:7f:8e:1d:42:26:5e:8c:42:
                    ea:89:46:0a:d3:78:c6:87:04:fa:65:b9:06:9f:dc:
                    d0:22:9d:71:7a:86:ee:e3:55:85:0b:c8:ce:57:48:
                    fe:10:82:2e:4a:30:c3:43:bf:f1:3e:b7:b4:71:fc:
                    bd:22:c6:b2:e9:a9:33:ec:0e:ca:9e:89:de:22:53:
                    45:5f:c4:24:00:23:aa:b3:22:8e:78:b8:38:32:c3:
                    c4:14:01:d2:e4:26:a0:37:9c:1e:a1:a0:86:15:27:
                    c8:8b:92:2f:04:e1:98:14:aa:2b:80:2b:10:52:64:
                    8d:f1:76:83:77:e5:3a:d5:8a:98:d5:3b:2e:ad:31:
                    9e:af:01:ed:5d:64:fb:4e:4c:0a:de:6e:a0:1c:62:
                    29:d8:01:cc:cf:88:f0:c5:4e:42:7c:15:1f:fe:42:
                    7d:c9:17:51:1a:07:bf:3c:a2:d5:d3:0c:97:e4:09:
                    88:a9:67:3d:2a:7b:05:f6:1e:8f:2e:b8:b5:b1:38:
                    67:07:ef:b7:19:1d:db:e4:cc:4e:c1:58:9a:d5:54:
                    72:76:bb:c4:8e:07:b5:b8:5a:fa:d6:c6:5d:ed:f0:
                    88:1d:b3:a9:bc:d9:d7:9d:ab:35:b1:d6:22:45:39:
                    fb:af:28:46:f6:f7:9d:3c:00:1a:4d:e1:08:6e:18:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:CE:21:36:41:3A:B0:11:4B:33:A0:FB:68:85:20:B5:5E:B8:E5
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:80:dc:e9:a6:ec:58:47:30:1d:9d:96:9d:a3:f4:18:f1:d8:
         d8:72:b6:56:05:6e:2f:15:73:ad:4c:4d:b5:df:bf:45:72:d2:
         ec:6e:ad:f7:59:8c:ce:b9:af:ca:cc:4a:14:95:ae:8b:91:54:
         cd:08:35:92:ed:9e:ed:45:9f:a2:6a:d5:b5:26:62:40:a6:ef:
         b4:32:bc:b2:2e:80:04:e3:0d:10:d6:62:76:69:e2:74:ee:3f:
         3e:1d:1b:25:e0:54:58:41:56:f7:64:a5:24:e0:00:88:44:70:
         d8:11:63:fa:51:1c:cf:94:df:54:a1:7f:29:b5:31:c0:52:6f:
         d0:21:f7:1d:20:f2:b5:e0:08:a1:27:97:87:cc:d8:61:79:06:
         ff:89:27:45:d9:51:b1:a3:90:a8:90:6c:82:d6:e3:e1:84:51:
         05:50:7e:84:74:fa:73:87:bd:e6:7e:0b:1a:b9:0b:3c:63:09:
         c0:3c:54:a3:96:d2:fb:97:ba:5e:73:95:73:c7:a5:de:38:68:
         b9:2e:9d:92:c3:0e:9b:fc:31:98:10:06:d8:28:cf:16:4d:19:
         86:a3:75:96:3e:2e:eb:31:45:57:0a:3c:22:58:30:8d:7c:f1:
         05:48:f1:1f:98:fa:e1:c4:6e:41:12:6c:d0:17:1c:bc:51:05:
         63:1e:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:02 2024 by rpki-client on console-ams.rpki-client.org