Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          H3unqFbPIJx+XmodX6PtIuRJkFTr74lO+e91oDrQOQ0=
Subject key identifier:   67:D6:C7:E6:69:5C:11:BA:2E:60:D9:DE:E3:73:2D:0A:07:CA:56:65
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          010D
Signing time:             Wed 01 May 2024 05:49:24 +0000
Manifest this update:     Wed 01 May 2024 05:49:23 +0000
Manifest next update:     Wed 08 May 2024 05:49:23 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: VsEiLEI8kMJEdt18w4E0bN7h0p69GvahKAsC7T4rRLY=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OETeMQXD+FgpeuSCyMapXHWOjC3yDi7rTDX/4Fgvqc8=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: YGzgYxvIKuIHYMQhUMjHIg3+2N/RfVf4heZ2M28nPAc=)
                          4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: hH0K6YvfXJ5lNcTty7kesgUMNESO6yI6GqB6RTky/Iw=)
                          5: F436492E3B3C11EEB9F6256EC4F9AE02.roa (hash: uEVXh1Qu4aiO02uDasogKDaEETU1Cm8lLi0QlXue/M4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 05:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: May  1 05:49:23 2024 GMT
            Not After : May  8 05:49:23 2024 GMT
        Subject: CN=6631d7e3-fbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:4d:c0:f8:4a:db:bc:f8:d7:59:38:74:5c:
                    a0:b3:68:33:76:13:69:42:85:28:13:35:48:e1:bc:
                    7e:3f:37:35:57:0b:a6:fd:c9:3f:70:2f:31:fa:70:
                    6a:97:d3:d9:c2:f1:df:5e:08:7b:81:6b:4e:f3:8f:
                    f0:5d:51:7c:16:ce:fd:ea:6f:50:18:ec:95:ad:66:
                    4c:bf:90:4b:27:5a:51:85:97:df:5f:52:87:12:3d:
                    3f:05:8c:d6:e9:87:3d:61:c6:24:57:d3:fe:4f:99:
                    85:4c:5b:84:cd:ec:91:ca:de:77:c0:0f:0e:00:e5:
                    33:1e:fc:fa:32:a3:cf:5a:c3:d8:d8:f8:0a:d1:0b:
                    af:d3:1e:71:9b:a8:ba:9d:3d:3d:32:5b:a9:2f:2b:
                    5c:62:57:a2:03:9e:43:d5:c7:35:d8:5f:13:94:00:
                    fe:7c:d3:fc:8e:d2:7f:48:71:50:61:07:76:91:b7:
                    04:86:8f:18:d3:bc:15:4a:49:33:90:ea:c4:dc:02:
                    3a:2d:22:72:ee:23:f1:92:9d:7a:40:32:71:c6:8e:
                    c3:28:91:e2:6f:8b:08:82:28:8d:6f:4c:b0:dd:05:
                    cb:a5:12:25:8b:21:5d:5f:f4:4c:cf:85:0c:4f:99:
                    d3:41:4b:3c:71:1d:bc:0e:eb:af:2f:e6:f1:1e:2b:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:C7:E6:69:5C:11:BA:2E:60:D9:DE:E3:73:2D:0A:07:CA:56:65
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:86:0a:89:ef:6f:25:fe:d9:86:23:ed:d5:b2:ba:a2:3e:
         c6:99:5d:0a:2e:9a:e5:f5:98:2d:f9:e3:a5:f6:d0:51:33:2e:
         1f:81:cc:3e:ab:69:29:b6:b5:ed:cd:be:9a:b7:2c:d9:7e:05:
         da:3d:c8:9d:6e:9c:0b:d3:05:36:ac:a4:80:45:b1:06:d5:62:
         1e:c1:15:15:f5:0f:e3:4d:1b:8c:9a:f7:56:1c:15:9d:88:99:
         b0:b4:5b:04:8a:28:42:60:62:72:92:dd:14:66:19:ba:b1:7a:
         79:76:1a:93:3e:1b:b5:9e:45:34:2e:bc:a7:ab:72:ae:7a:a4:
         a7:49:f1:44:b1:77:33:b2:d4:bb:2d:16:3a:6c:e9:82:21:4d:
         e9:94:ab:cb:25:f1:44:dd:b7:57:08:db:37:05:57:9b:e1:19:
         d8:6d:b7:c6:08:c1:a9:de:27:d3:bf:87:91:75:84:3d:95:0a:
         ef:19:7d:28:5f:30:c5:4d:da:3c:2c:6e:1e:4e:b1:48:ec:8b:
         69:78:e7:12:50:ad:d3:e2:9e:36:9d:c0:19:32:69:a2:2c:40:
         78:19:00:5d:93:bf:3c:0a:97:fc:95:af:f0:30:cd:46:73:51:
         7d:55:79:44:61:b8:cb:ce:6d:47:78:67:09:4b:a8:ae:c2:91:
         a1:32:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:06:29 2024 by rpki-client on console-fra.rpki-client.org