Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
File:                     Ide4chBUge2CqeYiOyVAa7dSLyM.mft (raw, json)
Hash identifier:          jFr1sMm4tDaCb6lUC8cpSV5nTWvLNSGK1aI9H8Y27kk=
Subject key identifier:   B5:C0:72:0A:C5:A3:17:A3:CA:3A:BE:81:74:DA:EB:08:FA:06:84:8C
Authority key identifier: 21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23
Certificate issuer:       /CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
Manifest number:          9E
Signing time:             Sat 11 May 2024 07:04:53 +0000
Manifest this update:     Sat 11 May 2024 07:04:53 +0000
Manifest next update:     Sat 18 May 2024 07:04:52 +0000
Files and hashes:         1: Ide4chBUge2CqeYiOyVAa7dSLyM.crl (hash: 5YW7TmuzxkHwgcgIUEYsRoa35MpZuRM/VK1Q5JimGWw=)
                          2: EAF3AA12222A11EE9FF85B26C4F9AE02.roa (hash: 3cMaQ9zMnG8es4ygN0Q7y4co1Wiz8F8bF24OVfdgaJE=)
                          3: EA66A39C222A11EE9FF85B26C4F9AE02.roa (hash: rYvd0Abeo976MkDa0FRvq8mujTQue9gFVMYSeGaIWk4=)
                          4: 53F2219C3FFE11EE864C8A4CC4F9AE02.roa (hash: 4nYOg8Rn9QohcgSqIyIFdQgJoL/+yUzbG/kUO5Wm4us=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.crl
                          rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1ABC/serialNumber=21D7B872105481ED82A9E6223B25406BB7522F23
        Validity
            Not Before: May 11 07:04:53 2024 GMT
            Not After : May 18 07:04:52 2024 GMT
        Subject: CN=663f1895-ca68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:8b:fd:7b:fa:d0:99:ac:13:e4:af:6c:73:
                    2c:30:7f:5d:2e:8d:fe:a2:0e:8f:5b:73:7d:19:9c:
                    cd:8e:68:55:12:57:d7:bf:7a:64:87:db:5c:bb:21:
                    64:60:52:00:44:1f:d4:63:f3:64:92:38:40:bc:d1:
                    24:97:c6:6b:00:80:8c:cc:14:59:d7:a3:3a:f5:a9:
                    15:e9:e8:24:aa:3a:82:3a:2e:80:06:6b:39:6c:b9:
                    4f:95:a5:ef:b7:e0:de:2e:c2:57:3f:4b:9a:f5:1f:
                    72:6a:3f:18:62:99:1c:b7:86:8d:e1:fb:3f:3b:45:
                    ac:f2:13:de:bd:32:68:e3:d4:5b:08:66:c2:ce:a0:
                    a3:47:e2:9f:b9:9b:7d:a7:dc:4f:6b:4b:dc:8c:36:
                    8c:2c:0b:c5:f4:1a:ca:88:79:a6:e7:2e:10:c1:04:
                    8a:41:5e:ad:7f:04:c7:15:e9:33:3f:3e:15:58:72:
                    7b:86:a4:27:21:f4:1e:b6:ae:21:be:5a:75:e6:e5:
                    8d:4b:cb:21:f5:a7:37:12:2d:f0:c4:58:23:8d:79:
                    65:eb:d5:c4:ce:0b:9b:75:4c:cf:5e:56:c0:d6:e9:
                    59:90:4e:8b:b9:e4:31:52:63:72:66:69:5b:ca:ba:
                    ca:c8:e0:59:b4:f3:f2:43:3e:ea:7a:54:29:b8:29:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C0:72:0A:C5:A3:17:A3:CA:3A:BE:81:74:DA:EB:08:FA:06:84:8C
            X509v3 Authority Key Identifier:
                keyid:21:D7:B8:72:10:54:81:ED:82:A9:E6:22:3B:25:40:6B:B7:52:2F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ide4chBUge2CqeYiOyVAa7dSLyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1ABC/E30BF5DA222911EE8444C621C4F9AE02/Ide4chBUge2CqeYiOyVAa7dSLyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:48:1a:86:cf:80:f5:88:d3:77:d6:08:1c:37:40:ba:b4:d4:
         85:1e:3e:62:eb:65:36:ae:02:db:2f:5f:5d:7d:cc:b2:40:da:
         da:b1:9e:c7:fd:24:0f:d5:90:39:65:04:f8:78:fd:55:95:dc:
         27:4d:d9:e3:e0:c0:ca:df:b2:d3:c1:c5:29:42:a3:2c:53:c6:
         e8:7d:ce:d9:74:d9:23:76:51:74:e5:42:d7:ce:70:23:77:04:
         0b:4c:9e:dd:90:0c:1c:df:e7:f3:8a:39:9d:26:e6:c9:39:1a:
         43:6a:7a:b5:63:35:79:3c:d9:5d:f7:be:1a:26:b0:6f:05:16:
         d6:7e:81:73:67:de:06:52:5b:de:d5:8d:d2:13:a6:da:0c:f1:
         24:a9:31:2d:ab:a4:4f:ff:d4:0b:d5:9f:5e:55:fa:4d:82:fd:
         67:0a:49:26:9d:4f:d9:9e:99:3b:d5:4d:cf:fd:f3:e6:ee:29:
         0a:c3:15:ba:b8:c6:29:15:6b:d1:55:fc:2a:d0:9b:63:f6:c9:
         7b:82:d6:38:c8:58:1d:24:89:56:19:e1:90:a5:67:42:67:ec:
         ce:3e:d6:ec:b4:47:7d:26:63:97:43:d6:2d:32:40:bc:a3:db:
         40:26:c2:c9:72:32:e0:a5:78:6c:1e:b6:c2:e4:d3:4e:47:79:
         7b:97:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:50:58 2024 by rpki-client on console-ams.rpki-client.org