Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          TWUij6TyiePEUwNWczxp1M+NjHVVEzl/7mzcbICEpwE=
Subject key identifier:   94:01:D4:7D:62:76:E5:74:90:91:DD:A0:54:C9:33:C2:26:8E:61:35
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       0801
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          07E4
Signing time:             Tue 30 Apr 2024 22:17:40 +0000
Manifest this update:     Tue 30 Apr 2024 22:17:40 +0000
Manifest next update:     Tue 07 May 2024 22:17:40 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: Q+hnTOG9Uu/E8LhTcWNB2aMxmWr9Bd2trkNJYl4UqjY=)
                          2: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: TOoycVQLqh121NlJvNyjynwJnmqYx7f7wGx8GbND+mU=)
                          3: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: FuHjgpF9oPy+/0lXja+8JX73oSq2n/MaM9og5kXtBRc=)
                          4: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: 1nDeoh6ARNV/1usL+bDBy0j2Um1gOnbqC0xIxYBygJI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Apr 30 22:17:40 2024 GMT
            Not After : May  7 22:17:40 2024 GMT
        Subject: CN=66316e04-9d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:6e:0e:96:57:59:21:28:e9:8b:c2:d4:a3:
                    3f:45:90:ad:40:e5:41:99:1c:55:46:ad:e7:88:20:
                    f1:c7:b4:37:0e:e7:f6:e8:00:d0:3c:47:85:78:17:
                    59:5c:0d:1a:ee:61:f8:55:36:51:a4:19:a3:00:13:
                    8b:36:d2:81:75:49:f0:b6:b7:84:cb:f6:36:cf:b1:
                    88:83:79:d9:9a:cf:ba:a2:28:17:80:a6:5c:11:a1:
                    dc:67:30:cb:5f:0c:58:17:9b:75:a0:32:2d:19:3c:
                    1e:93:5c:db:da:c8:77:63:74:da:58:8d:51:8e:f9:
                    aa:c8:be:19:de:7a:f3:9c:d6:33:54:ae:44:6e:db:
                    22:50:d8:4b:11:14:39:58:cc:a8:90:35:5d:54:a7:
                    59:34:2e:93:7c:66:eb:b9:ed:2d:d5:93:07:e6:49:
                    64:fc:41:36:43:72:d4:04:36:7f:e0:36:a3:1e:37:
                    02:c8:15:82:f7:28:45:d2:b5:64:ae:e0:02:65:a9:
                    4f:cd:2a:fe:e7:e5:20:67:e1:bb:d6:45:22:c5:2c:
                    d5:27:9e:63:1c:45:cc:77:1b:98:9d:fd:42:a3:b0:
                    07:82:f6:83:e1:10:b0:4a:86:d0:1f:2c:0b:16:1a:
                    85:09:51:64:6b:55:50:79:7a:6b:2d:72:1f:b4:72:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:01:D4:7D:62:76:E5:74:90:91:DD:A0:54:C9:33:C2:26:8E:61:35
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:23:cd:24:ae:b4:9f:27:92:4a:d8:e4:63:5c:51:4d:5f:64:
         36:2d:3b:f2:c1:45:4c:f1:be:95:8b:2a:47:8f:ad:85:18:5b:
         fa:8b:e4:5f:72:da:78:d5:2a:2d:aa:bc:e9:88:25:c0:9d:cd:
         ef:81:70:8d:7e:57:7d:c1:73:bf:a1:fd:ac:f4:00:ab:35:9a:
         af:53:55:a2:25:62:3a:8b:4c:b9:70:6b:75:92:dc:f2:05:5f:
         20:fd:17:dd:0d:3a:ca:7e:41:f5:a9:78:f7:21:9d:30:2c:a7:
         be:88:a2:a5:f5:0c:12:c2:8c:38:c8:14:c7:4f:a3:cf:1c:29:
         3b:3d:6f:d0:71:51:76:82:8b:6d:ec:81:04:79:d4:60:94:6a:
         84:3b:1f:e3:e1:73:2a:93:a9:3a:1f:db:2d:25:61:7b:19:f7:
         ef:89:3b:ae:ae:15:b8:08:67:21:50:62:6f:9f:73:ee:f0:3e:
         ce:84:6c:03:86:58:72:28:bb:44:b4:0e:b0:6f:53:d4:84:f5:
         bc:4f:e9:00:8d:4d:ee:38:a5:f7:20:65:7d:3c:ae:59:74:4a:
         fc:ef:13:b0:8d:3e:6a:ad:c4:50:46:4e:ab:48:9c:e7:ca:08:
         d2:40:02:b6:81:e2:56:e7:5f:71:ca:41:69:06:db:7e:28:21:
         25:48:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:05:08 2024 by rpki-client on console-ams.rpki-client.org