Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          u9uNUmxwzLEPTa/d97UoGeVvl4ujGHbdCXUx50qFHAo=
Subject key identifier:   E8:2E:23:3E:4B:72:69:05:EB:80:85:38:F7:51:DB:CE:C7:88:EE:E0
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          0123
Signing time:             Wed 29 May 2024 05:54:26 +0000
Manifest this update:     Wed 29 May 2024 05:54:26 +0000
Manifest next update:     Wed 05 Jun 2024 05:54:26 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: MExJelI9LsP3SlAR1gYLQ1w+vvyu8TyyCG+tOfNFxLQ=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: t+tOioULLbdadbVo+wcXgqHV26aKT7BFQ5ZKogdQLMI=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: 68t7AoSZP/afLoYmZ2cIjMvIFXrWh3T5i52ayRfPKe4=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: J6vqwZm1lCenuly0yp2d06eQQieFO+C8qbrJwg1f8lA=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: oOv8IWm3CJSx/2lXFPDKWEyMUTroKLJl6Cmo0UJ6tYQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 05:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: May 29 05:54:26 2024 GMT
            Not After : Jun  5 05:54:26 2024 GMT
        Subject: CN=6656c312-e05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:ea:8c:96:1d:e2:a6:2d:1d:4d:71:83:6b:
                    ab:c8:5c:e3:b6:e7:fb:8e:cc:e0:f0:12:0e:cc:f7:
                    da:52:ea:81:d0:0f:51:45:06:fe:1c:ba:d9:78:b9:
                    f2:59:86:d2:39:3f:80:98:59:70:77:e4:6b:34:d0:
                    4a:ce:74:13:62:b1:c3:60:21:93:59:32:2f:58:10:
                    cd:70:25:bd:c9:6a:6b:c0:e8:c7:e9:d8:cf:f3:21:
                    46:01:a3:2b:8a:5b:1e:c9:0e:95:0a:40:2a:f1:5a:
                    93:b9:8b:a8:62:6b:86:93:16:ac:80:7e:ea:64:90:
                    56:a8:33:cb:fb:bb:2a:a2:9a:f2:21:f3:7e:40:9b:
                    74:2f:6f:5b:93:82:17:5f:aa:2d:56:f1:5e:1f:ed:
                    30:57:6e:77:61:54:8d:2b:de:87:33:f1:50:7d:c2:
                    83:db:60:96:a7:a9:fb:26:02:87:6a:4c:98:42:f7:
                    68:b3:a9:ad:e8:2f:e2:86:e5:a0:04:99:d0:78:4b:
                    ed:5a:4b:42:76:27:b7:7e:3b:51:d6:28:e6:dd:55:
                    cf:8f:df:a5:b2:c2:93:87:d5:cc:fb:67:da:a4:41:
                    60:19:8e:bb:20:9f:a0:4b:44:6f:da:db:1f:b4:9e:
                    b2:ca:17:3b:b9:55:7b:dd:0d:7e:e2:d3:c9:f1:fd:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:23:3E:4B:72:69:05:EB:80:85:38:F7:51:DB:CE:C7:88:EE:E0
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:6e:1c:60:4b:5e:9f:bd:7a:b4:38:24:b2:27:36:fc:42:
         99:a8:00:e5:ac:0c:e4:4a:1b:bc:45:16:ab:14:91:33:f8:b6:
         b1:91:c5:61:62:53:97:0b:4e:8e:19:21:a0:51:24:ef:7e:45:
         df:9c:f2:02:08:94:aa:e2:ee:b2:ae:55:d3:7a:7b:f2:5b:c1:
         3f:7b:58:8c:3f:2e:bc:bd:80:20:09:09:fe:a0:4b:36:79:24:
         cf:e3:9f:d2:b7:17:7e:37:93:93:54:2d:b6:48:1b:51:d8:3d:
         41:94:f7:dc:fb:11:16:3c:38:72:8b:7b:51:d8:4d:b6:b8:bc:
         80:91:c6:63:29:71:c4:61:91:a5:91:89:f0:8d:b6:03:4d:9d:
         94:4e:78:dd:4f:13:a2:95:fe:11:98:d8:40:35:2c:64:ab:26:
         a8:2c:0f:cf:63:30:f6:63:a1:42:84:46:61:58:44:ec:15:44:
         92:ab:64:ef:99:70:0c:1e:f2:65:2e:eb:09:81:2c:3a:f3:6e:
         4d:9b:2d:f9:5c:3d:b3:49:c3:1a:96:cb:df:6e:b7:b7:5f:e9:
         6c:01:86:f6:56:60:7c:91:bb:b7:e1:35:94:b5:9e:47:85:43:
         21:9c:b3:07:a8:27:86:11:fb:ef:6d:96:a0:16:1e:dd:f3:e5:
         ae:10:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:39:00 2024 by rpki-client on console-fra.rpki-client.org