Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          OKu5rpjxvOagHywyluWm4z3t6C560/jVf5qwrOc1pqQ=
Subject key identifier:   CF:84:44:04:4F:1C:CF:47:F4:B8:DA:50:57:14:6C:FA:AB:FE:CE:FF
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          06DE
Signing time:             Fri 26 Apr 2024 22:55:04 +0000
Manifest this update:     Fri 26 Apr 2024 22:55:04 +0000
Manifest next update:     Fri 03 May 2024 22:55:04 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: olVlomypf/mNt0IJzyanRm9CzAUAZQPbhfmON7WkgkE=)
                          2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: SpHAj3YhaNQhZZDgKZjsIMSyKIiL010U5N0b38nH1Ug=)
                          3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: XKXS8w3cSzbb8tW18USwkV2T+Gxd51woMUZHsaxXpcw=)
                          4: 2F3E0638BE4C11ED9598AC4EC4F9AE02.roa (hash: Lg+5/CIRgp+ST/H5JbNbhT63WQCypcRpjs1ukUFHNj8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 22:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Apr 26 22:55:04 2024 GMT
            Not After : May  3 22:55:04 2024 GMT
        Subject: CN=662c30c8-7d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:bb:3e:b0:4e:3b:25:ac:f6:c1:ae:12:8f:
                    ec:f9:5f:32:99:b4:ef:bf:df:04:3a:cb:4f:bf:49:
                    6c:79:36:4b:c5:9b:72:f9:6a:24:26:57:3a:6b:91:
                    5b:c8:90:38:01:fa:8b:3a:21:37:32:e8:ea:57:1f:
                    75:11:29:8e:91:ad:c9:18:f9:a1:cd:28:e9:97:c4:
                    fd:92:e7:32:9e:47:5e:71:23:c2:19:10:4f:b9:ea:
                    57:c9:bb:71:19:0d:04:62:b8:4a:66:4d:89:0e:84:
                    e2:6e:ad:14:59:a0:c3:2d:4f:fc:bb:a8:e6:0d:94:
                    db:b7:5c:57:39:ce:bb:c4:2c:3b:f0:75:2c:43:41:
                    03:7d:b2:3a:2b:ac:26:63:bc:de:eb:e9:f0:db:b2:
                    cc:d6:58:97:35:49:86:7e:c4:5a:c6:84:35:d7:27:
                    6c:11:da:81:3e:5c:be:6c:06:ff:c6:c3:b7:74:07:
                    a2:d7:33:2c:84:3c:2c:01:eb:50:f7:76:ab:b7:8b:
                    3e:cc:87:25:91:11:a5:49:eb:11:57:64:4a:d7:5c:
                    4d:1a:d5:df:01:1b:e6:03:ae:3e:29:19:b4:f3:c1:
                    72:f8:4c:94:ea:3b:20:fc:b0:87:ca:15:43:73:11:
                    50:d2:af:c0:5d:a2:a6:b8:e7:a4:26:df:a1:48:72:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:44:04:4F:1C:CF:47:F4:B8:DA:50:57:14:6C:FA:AB:FE:CE:FF
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:da:f5:15:0d:b2:b1:ce:3c:85:a0:9a:6f:a1:ec:4b:8c:
         4a:64:d8:23:d2:ee:1a:48:63:87:13:1c:ef:a8:c1:7f:8b:03:
         f2:fa:c8:fe:9a:46:57:7e:02:33:a1:9b:11:90:34:11:a9:4d:
         39:c0:97:a7:72:ab:e3:b4:65:15:7f:18:db:54:63:4e:26:ee:
         d2:eb:1d:b5:68:9e:fe:b5:c6:4b:bc:66:98:52:de:af:1d:30:
         86:8b:10:db:24:3d:6e:b9:01:f5:a0:29:25:39:75:67:32:59:
         a8:2e:c1:b0:3e:76:04:3a:0e:79:66:47:01:5a:c7:7f:45:9b:
         0c:a1:ac:1a:b4:d9:af:b2:39:e9:b3:6d:f7:06:df:7a:5a:4f:
         5c:4f:9e:d8:4a:18:90:9e:21:dc:20:88:cb:07:12:24:8d:38:
         54:e1:2e:b1:08:d5:ce:ca:a9:61:aa:48:64:dc:fd:eb:43:87:
         71:60:50:00:f4:f0:45:12:c2:61:29:e4:35:37:bb:c9:ff:45:
         fb:27:cc:df:c9:d5:f5:96:0c:21:97:3e:e1:d2:40:5b:1f:72:
         b5:8c:68:75:35:f0:08:e4:3e:2f:dd:4d:d1:b5:22:21:98:8e:
         65:0c:39:e4:19:2e:9f:bf:35:d4:d9:14:5c:d0:42:e9:17:e6:
         3b:d4:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:53 2024 by rpki-client on console-ams.rpki-client.org