Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
File:                     AruX_YsfYg4CoeLK21nWVvAa2kU.mft (raw, json)
Hash identifier:          pobXLABnfz7JjzbWZ44Ygkj6ZxohcfVxtVPZqvItsXY=
Subject key identifier:   EC:6D:52:57:66:C3:D5:C1:5A:4F:F2:3F:23:17:23:CC:6B:87:39:CA
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
Manifest number:          0251
Signing time:             Wed 15 May 2024 03:58:45 +0000
Manifest this update:     Wed 15 May 2024 03:58:44 +0000
Manifest next update:     Wed 22 May 2024 03:58:44 +0000
Files and hashes:         1: AruX_YsfYg4CoeLK21nWVvAa2kU.crl (hash: SsLi3t7WhQokz9BWk1E6SQVxX8FmfAJbMh0GKgyuSkg=)
                          2: E100C846D0D211EC92E5014CC4F9AE02.roa (hash: /LGgxGmk7OJxec0kFePyyjVNXXGStmiDlKB+PEnnTLQ=)
                          3: 2DED8B66D02011ECB021972BC4F9AE02.roa (hash: uiO5OmGE+yOXn98MQ+7bJXSjawhzpG7YuZpmhxui8uo=)
                          4: 8FCF722626C911EE9F1A0917C4F9AE02.roa (hash: 2m40/5Eiz2mxDQOIJfLfv2woUCJZElqpIT6FDqyNYis=)
                          5: 2D478AFED02011ECB021972BC4F9AE02.roa (hash: lhSOWEE4/EOCqrU6OVCiDww4eDtSUIa4uusgIAkRF+Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: May 15 03:58:44 2024 GMT
            Not After : May 22 03:58:44 2024 GMT
        Subject: CN=664432f5-ebd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:9b:53:01:6e:24:9c:e3:49:7b:75:21:e0:
                    c9:dd:ec:2b:68:f5:d3:44:00:05:32:32:91:3c:46:
                    5c:4e:7c:09:01:66:47:68:ca:bf:68:9e:3a:3c:b1:
                    8e:c0:ba:fb:59:3b:3a:fd:2a:ba:a7:5f:d9:ea:3e:
                    58:bc:5e:7d:c5:a4:d5:3a:06:32:cc:b8:a3:f3:36:
                    b1:42:a1:72:b2:cd:a2:a4:2c:67:74:9c:01:a2:ce:
                    4e:ac:18:00:6b:8a:8c:af:7e:8a:47:82:e4:58:41:
                    2f:01:e7:25:17:fc:49:72:80:e4:0d:6d:d4:8a:4f:
                    73:25:b2:d9:d7:ef:b4:ff:4c:fb:3a:5c:f3:4e:4f:
                    d2:3e:89:93:a1:4e:8b:0c:9e:4d:86:33:8c:d1:0b:
                    d9:b5:f4:74:5f:34:ce:79:11:1c:50:17:d8:84:83:
                    03:f0:cf:d7:af:e6:7e:f4:bf:49:37:d3:2a:97:60:
                    5b:7d:cb:53:18:e6:10:92:a8:48:d1:69:b7:5e:de:
                    22:f9:4c:35:74:90:1c:74:08:0b:2f:8d:dc:c4:22:
                    22:1e:52:9f:3f:6a:3a:e6:4a:a6:15:e7:27:99:b1:
                    6b:1f:55:e6:3d:1a:e3:69:c5:b3:a8:a7:29:a9:72:
                    85:85:00:34:bd:63:41:6f:af:d2:5a:6f:5e:39:87:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:52:57:66:C3:D5:C1:5A:4F:F2:3F:23:17:23:CC:6B:87:39:CA
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:f2:2b:74:02:c9:69:a1:eb:42:09:62:fa:f3:76:cd:4b:
         00:61:3f:94:92:b0:d1:82:9b:0d:9f:4f:0e:3b:ae:0e:12:fb:
         44:d1:26:aa:3e:4c:4c:cf:7d:63:fc:9a:ae:1c:35:e1:9a:d8:
         63:31:bc:bd:1e:16:41:84:13:b2:d3:67:d7:bf:6d:3f:6e:d6:
         63:bb:f7:c3:a7:a2:a8:16:99:dc:76:d5:21:6f:40:35:ab:b9:
         5b:48:ea:f3:85:f9:f6:73:f3:30:ea:96:69:b4:de:98:45:1a:
         9d:bc:99:d6:e0:8c:ac:93:0c:70:3a:83:3d:8e:bd:d0:ef:40:
         ed:ee:12:10:d9:5d:a9:5c:58:bf:43:74:c8:2e:ec:99:bc:9f:
         27:8e:a6:df:e6:19:21:08:31:db:48:8c:f4:84:9e:15:d4:26:
         cd:ab:79:8c:c8:37:eb:24:e6:86:07:4a:52:30:96:48:68:f6:
         8d:31:06:15:68:86:68:9d:f6:e5:60:4b:f0:47:da:7b:43:3d:
         b5:26:0f:c7:0c:fe:0f:f0:8f:38:2f:d6:a2:c4:52:82:e2:15:
         c5:4b:b1:67:e8:28:ef:1d:fa:6a:18:d8:85:4c:20:99:e7:a8:
         ab:bd:20:d6:90:5e:2b:76:fd:02:7a:db:82:22:b7:6f:55:72:
         a8:d9:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 04:38:27 2024 by rpki-client on console-ams.rpki-client.org