Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
File:                     DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json)
Hash identifier:          R+eteY69ZVPBKEBbEtPWJ1BZ8BqgwcqRHu3VPFyFKxg=
Subject key identifier:   0F:D2:4D:A0:B5:3F:25:D3:8E:FF:3E:EF:F7:A5:FA:8A:9A:B7:94:A8
Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C
Certificate issuer:       /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
Manifest number:          F2
Signing time:             Sat 27 Apr 2024 05:43:11 +0000
Manifest this update:     Sat 27 Apr 2024 05:43:10 +0000
Manifest next update:     Sat 04 May 2024 05:43:10 +0000
Files and hashes:         1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: 3/tQV1A6xPNjKE02L2KPyJCIod61/P4VjG/WMMYR7Xo=)
                          2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: ghW+JWtx2ipcRK5A8aOJHKLLo0T9QbwhYmPqibO1GoM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl
                          rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C
        Validity
            Not Before: Apr 27 05:43:10 2024 GMT
            Not After : May  4 05:43:10 2024 GMT
        Subject: CN=662c906e-5bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:49:13:48:7b:60:48:ae:5f:70:59:fc:01:
                    06:cd:1d:26:1d:55:ee:1a:fc:eb:6d:f0:3a:7c:43:
                    62:9d:8c:d9:f1:39:b1:d3:99:d2:62:fe:27:a9:a8:
                    ee:6d:84:ea:37:9e:78:2f:27:61:90:bb:21:ee:6c:
                    74:05:b1:33:58:90:56:c5:91:f4:2b:68:32:20:8a:
                    92:56:86:7b:2f:f3:70:c6:f0:67:0f:aa:fe:25:d2:
                    4e:83:74:30:40:7c:63:59:ee:c6:4d:ff:b9:10:71:
                    40:42:7f:fa:24:f8:31:c4:22:80:a1:f3:37:c8:36:
                    89:1a:03:45:e4:60:4c:78:9b:8a:de:ed:14:a2:a5:
                    5b:17:42:f2:40:b7:01:98:1f:ea:29:7a:1d:87:c3:
                    58:9b:48:7f:a8:b5:6d:03:4b:a2:a1:14:5f:de:14:
                    1a:d3:e6:97:09:48:fb:c5:24:e4:33:08:ba:a6:33:
                    30:a7:54:63:a4:75:4e:35:79:47:11:3d:d3:d4:ea:
                    81:89:8e:0b:d5:13:fc:1d:9b:1c:6a:97:b0:b4:9b:
                    55:a7:be:3b:d1:2b:c0:32:7b:b7:0f:c5:c4:4d:55:
                    cb:53:53:50:f4:9b:f8:85:9b:12:88:19:91:36:60:
                    a3:06:4b:40:0e:14:41:ff:63:e8:a7:69:29:0c:39:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:4D:A0:B5:3F:25:D3:8E:FF:3E:EF:F7:A5:FA:8A:9A:B7:94:A8
            X509v3 Authority Key Identifier:
                keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:65:22:11:e7:8e:5f:a8:99:0c:ed:e2:51:53:66:28:02:
         04:e0:9d:98:42:4f:42:37:dd:e2:99:a9:4c:58:7d:35:86:74:
         52:cd:f6:a1:03:a4:79:67:0a:1f:b7:4e:c6:85:95:2e:d2:66:
         45:42:3a:ea:e8:c1:50:48:ac:9c:9a:de:99:7e:cd:ce:58:81:
         bc:cd:28:2e:08:fa:89:8f:7b:9a:0a:61:8a:e8:34:2a:1e:a2:
         80:62:f9:30:93:80:6e:39:76:0f:89:dc:d0:1d:77:61:a6:93:
         a2:06:4d:1a:45:76:71:55:01:d2:67:88:ee:ca:d5:d7:ec:87:
         13:c2:36:b6:e0:08:1d:c3:45:af:1b:f6:40:9a:84:ca:33:05:
         7e:4e:8e:3d:40:f2:5d:5c:84:c8:3f:95:2f:c4:d1:e1:e6:bb:
         c5:e0:32:ba:00:a9:76:7a:d5:15:ff:ef:e7:53:14:56:ce:dc:
         6e:e5:33:b2:55:55:ad:d8:83:cf:96:42:67:b0:26:f3:b4:16:
         56:79:71:15:ee:9e:eb:17:d2:b5:d7:6f:4e:91:9b:71:25:24:
         63:b7:31:86:47:7e:06:b2:ed:12:e3:24:fd:31:46:61:f4:d6:
         92:d6:26:38:20:7b:66:93:8e:63:48:8d:38:18:8d:4d:73:4c:
         e0:aa:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org