Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
File:                     TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json)
Hash identifier:          JxDUAV5GPrKh+mBenr2UAz/3P1CA2xVA+E5jb87rLpk=
Subject key identifier:   6F:66:5F:88:F9:7D:55:CA:0B:6D:7D:C6:14:F8:C4:81:D7:E9:AA:8D
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
Manifest number:          D5
Signing time:             Sun 05 May 2024 06:16:08 +0000
Manifest this update:     Sun 05 May 2024 06:16:08 +0000
Manifest next update:     Sun 12 May 2024 06:16:08 +0000
Files and hashes:         1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: GobFPYhvbfwxJs5ikto+stiwxqm5tRrvZJEmVRv7oUw=)
                          2: DCD00D5E337311EE808C9F28C4F9AE02.roa (hash: rD6VAwVvV16ZZjFo6QGG1uIV2GihBjusQs+qH/I4WaM=)
                          3: A98518FE337311EE91B1A127C4F9AE02.roa (hash: lRr/bMqAHmTUb0hM9ymD3Daz4cFws0V5FBgsdibF3Qk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 06:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: May  5 06:16:08 2024 GMT
            Not After : May 12 06:16:08 2024 GMT
        Subject: CN=66372428-81f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:5d:70:85:23:47:8f:96:82:de:dd:2a:c1:
                    f7:4a:ae:d9:b1:43:f3:41:00:a2:23:09:59:c3:93:
                    11:59:87:fc:0b:89:83:11:13:ee:d2:5f:90:d0:6f:
                    bd:f5:2d:49:5a:94:f9:75:cc:34:e6:3a:d8:42:00:
                    b0:02:10:a8:12:76:34:c1:c4:f5:86:1f:17:ca:4f:
                    aa:a9:f5:ae:f5:f8:e5:89:08:2d:04:ed:16:2b:4f:
                    a9:38:8a:fa:29:4a:26:1a:4b:7d:61:6c:5d:eb:3b:
                    00:44:b7:2e:83:ff:8d:e7:82:19:ae:62:23:38:fa:
                    a8:9c:95:67:d9:22:dc:0b:88:a8:f6:57:b6:cd:22:
                    46:31:aa:c0:e4:ce:45:4f:f0:43:51:98:62:e3:57:
                    4f:2a:1a:4c:0a:54:9c:67:e8:5e:db:fe:69:a4:f5:
                    9d:ff:ca:76:af:9c:b3:19:75:78:bf:5c:2d:81:cf:
                    58:53:16:0c:0c:03:6f:66:8c:ec:33:b3:ed:d8:be:
                    7d:2a:38:85:8c:04:57:16:9b:9c:ae:10:42:30:47:
                    3b:a2:4a:94:f8:03:c0:6c:09:02:cb:73:ba:c4:e9:
                    97:88:21:d5:d3:e1:49:18:69:cb:0d:0c:28:03:0c:
                    e3:10:00:2a:ae:62:5c:8d:31:b5:7f:4c:af:67:78:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:5F:88:F9:7D:55:CA:0B:6D:7D:C6:14:F8:C4:81:D7:E9:AA:8D
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:06:b6:e1:15:4b:db:c6:a0:df:9b:87:d0:3c:2d:9a:3e:96:
         21:4a:56:8d:1b:5d:62:ad:41:74:55:17:1e:72:3a:4f:b4:5e:
         ce:1b:26:0f:08:0f:bd:b3:13:e4:ce:60:4b:dc:29:34:c0:f6:
         af:9d:70:a8:40:42:3c:49:e9:1f:93:2d:f4:a3:a0:36:48:85:
         63:6f:26:f9:d3:b0:33:66:eb:0d:34:b3:c5:32:46:17:bb:02:
         78:3e:1c:8e:19:b7:02:20:cb:d6:14:67:1d:06:1f:55:44:b0:
         fd:52:cf:4b:9b:39:69:30:23:bf:6a:bf:22:77:44:87:1a:ff:
         89:c6:58:fc:e5:ee:88:99:03:62:a8:c9:fc:85:75:0f:3e:51:
         d8:33:d3:89:6f:6d:bb:36:56:25:62:a5:c0:e4:b3:1e:6f:c4:
         c3:64:bb:85:75:2c:70:55:e3:08:94:e6:48:c9:e6:c0:88:8a:
         d2:c2:ec:d8:b3:4c:b6:67:00:20:78:38:6c:e9:d7:a0:fd:2a:
         65:24:fc:d0:10:02:8d:78:2f:d4:f6:1c:e5:76:ce:5a:af:ce:
         b9:af:09:fa:09:6f:69:fa:87:f9:ac:f9:1d:73:d7:87:0a:e4:
         47:fc:e4:7d:f1:77:75:34:fd:c9:05:7b:3b:8a:fe:59:81:bf:
         4a:b7:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:21:07 2024 by rpki-client on console-ams.rpki-client.org