Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File:                     bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier:          js21SGMKsWuvjBUSlz3hCgrfm3TtdZnz3wavnopnHpg=
Subject key identifier:   0E:79:C1:DE:8E:26:D9:14:3A:34:36:B4:7E:CD:3D:11:08:F0:00:4A
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer:       /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial:       092B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number:          0923
Signing time:             Thu 02 May 2024 21:18:33 +0000
Manifest this update:     Thu 02 May 2024 21:18:33 +0000
Manifest next update:     Thu 09 May 2024 21:18:33 +0000
Files and hashes:         1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: pno3FXrE6CDwY3k2zPHJgSi4mt2qNYQHgAeFkxvkh60=)
                          2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 72pvQSlnT9rABWVd/v/7K5BYXphu+YLZZNPRawfEZ8Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
        Validity
            Not Before: May  2 21:18:33 2024 GMT
            Not After : May  9 21:18:33 2024 GMT
        Subject: CN=66340329-5aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:9f:40:eb:63:d7:d9:08:28:94:33:fc:e3:
                    6c:79:96:c1:87:09:b2:8a:d1:2f:b9:85:85:8f:cc:
                    c0:d1:d8:ae:fc:8c:53:7a:61:3e:61:df:15:ca:31:
                    fa:61:e9:c6:d7:80:e4:31:c9:57:9e:86:9f:a0:3b:
                    30:1f:73:fc:7d:16:56:de:86:64:9a:c9:c1:89:91:
                    e0:1f:4e:17:80:ac:92:e7:50:a6:ca:84:09:d6:8c:
                    6a:a1:b3:c0:03:91:bf:d4:c9:3d:48:e8:71:4b:bd:
                    08:e0:1c:fe:60:5e:66:f4:5b:6c:77:2f:1a:7a:29:
                    6c:0f:0f:61:ba:f1:50:27:57:28:15:00:87:60:f5:
                    38:8e:c9:2f:d2:bd:a7:71:36:04:bd:83:5e:05:66:
                    1e:e1:4f:5f:95:3b:11:6a:69:ff:35:87:32:42:42:
                    05:85:57:f5:f8:b1:4a:08:69:5b:28:fc:72:d3:59:
                    e0:19:14:51:34:a7:f8:d7:59:1f:77:dc:d5:d4:87:
                    b0:6e:83:cc:75:ab:77:cc:3b:dc:1d:e0:80:c1:53:
                    3b:1d:5f:77:92:c2:6e:5e:a2:af:08:a1:b8:80:65:
                    ff:69:92:6a:52:3f:c3:21:bd:b3:74:54:36:ee:72:
                    2e:43:e7:2f:f6:67:48:e3:b4:c8:81:6a:1c:7d:51:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:79:C1:DE:8E:26:D9:14:3A:34:36:B4:7E:CD:3D:11:08:F0:00:4A
            X509v3 Authority Key Identifier:
                keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:02:e4:f3:e5:c8:2a:68:e8:69:43:66:f5:35:55:b6:1b:
         29:cb:77:e2:c8:6f:0f:1d:75:50:c0:60:e7:c3:58:3a:19:cf:
         43:8e:66:b3:fb:4c:9d:0f:b3:3a:ea:0c:dd:51:d1:d5:97:1d:
         aa:3d:e3:34:23:71:88:92:c9:82:19:02:15:22:2a:ce:f7:d8:
         46:d4:be:43:a3:19:31:fd:ff:d9:52:8a:4e:9a:42:cc:51:73:
         2d:22:22:76:98:70:59:f0:ac:f8:cb:7e:a5:8b:a3:ae:c4:17:
         37:02:aa:8a:e9:7a:42:48:ce:72:45:05:0f:22:85:af:80:20:
         3e:80:6a:af:4a:c6:0a:57:26:a3:03:c1:ee:fa:91:6e:b3:87:
         56:ad:9a:c6:62:d2:37:68:a9:51:43:94:53:9a:0c:91:e4:3d:
         7f:4d:38:5b:4c:96:96:65:83:9f:12:fc:4d:36:21:02:14:d7:
         63:cf:4b:03:7e:73:93:9f:22:21:3e:e7:94:d1:69:7f:16:cd:
         36:2e:1f:e7:82:a9:24:80:1e:4e:dc:71:cf:37:98:aa:2c:40:
         d0:c9:cd:25:5c:dd:e3:2b:94:f9:e4:02:de:73:a3:9b:0a:61:
         56:9e:67:62:3a:c2:6f:fd:78:72:ab:ee:c8:19:c3:d4:09:63:
         db:95:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org