Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
File:                     g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft (raw, json)
Hash identifier:          i28+EhhJQ7uzOQdDA8mZJYKqA8AYK9wdWSl3ek3IHn8=
Subject key identifier:   5A:F2:B1:A0:6C:46:E5:AA:B3:D6:62:52:E1:E0:27:9A:B9:C6:52:82
Authority key identifier: 83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
Certificate issuer:       /CN=A91AE954/serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
Manifest number:          DE
Signing time:             Fri 03 May 2024 06:07:05 +0000
Manifest this update:     Fri 03 May 2024 06:07:04 +0000
Manifest next update:     Fri 10 May 2024 06:07:04 +0000
Files and hashes:         1: g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.crl (hash: b1UlfoeMBz+eeAcz2igZLLYrA+pZzBNB/rOHxa8w48I=)
                          2: F79C3F18C3EC11EE85AC553EC4F9AE02.roa (hash: L9o4JWjW+TfYSkm0uI6vx6gXfbQsmDd8XUOJWGp55fY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.crl
                          rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 06:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE954/serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
        Validity
            Not Before: May  3 06:07:04 2024 GMT
            Not After : May 10 06:07:04 2024 GMT
        Subject: CN=66347f08-3382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:ef:33:dd:07:d4:50:00:88:84:c5:82:fb:
                    3a:81:84:60:91:8b:4b:0e:81:e1:c8:3a:40:4d:9b:
                    68:2b:8f:19:41:55:7d:ab:99:df:76:aa:98:ea:fc:
                    1b:29:ac:13:b2:9d:82:e2:b6:bb:c9:60:af:bc:02:
                    7b:95:94:80:f1:f9:0b:6c:46:34:7f:3f:e9:b1:08:
                    df:e5:d4:cd:94:e1:18:b0:2d:2a:eb:6d:0a:de:32:
                    94:8b:d7:2b:2f:1c:4e:4a:bb:53:c4:ca:f1:bf:85:
                    a8:d3:b0:46:0f:d9:e1:f3:ec:bd:d5:7c:47:87:ad:
                    16:bc:b3:6d:69:be:58:e5:c5:3d:b2:52:7c:c4:21:
                    06:83:45:e4:02:4d:f7:4f:b7:6e:8c:34:e6:72:91:
                    62:93:76:14:08:bd:4e:b6:8b:12:d9:b6:1d:a9:9e:
                    65:6c:49:5b:ac:fd:ad:ba:89:bf:a7:8f:59:55:d9:
                    81:a1:a3:83:d1:f7:56:44:5a:2a:47:83:a3:86:15:
                    e3:16:b3:c3:e9:38:a9:fd:8b:6e:17:be:db:69:aa:
                    43:90:fc:bf:b1:f2:2e:1a:c2:44:ab:f1:aa:cf:9a:
                    a4:e7:2f:ec:bb:91:14:3d:65:9d:f7:73:f7:c1:2e:
                    84:0b:42:6b:4c:3b:19:94:5c:55:dd:8b:24:0f:ba:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:B1:A0:6C:46:E5:AA:B3:D6:62:52:E1:E0:27:9A:B9:C6:52:82
            X509v3 Authority Key Identifier:
                keyid:83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:04:88:5b:3c:dd:be:4f:9d:eb:19:b3:99:82:14:fc:44:ae:
         cf:ec:de:7f:99:b9:33:32:8b:98:70:13:0b:4e:6d:b0:5f:7a:
         11:16:89:99:13:76:78:f4:6b:b6:7a:33:b4:40:ff:1f:70:8e:
         21:30:90:2f:01:bf:ab:15:f8:d6:70:00:ae:c2:ec:2e:45:b3:
         6f:0a:62:a1:0c:a5:c5:1e:cf:06:3d:f8:68:67:9c:c9:d0:74:
         79:25:2d:69:5d:7b:76:23:58:57:b6:d6:21:f4:dd:70:b2:f0:
         7f:ef:3c:ff:df:e1:84:69:be:94:bd:82:da:33:bc:2b:38:eb:
         44:e2:4e:7b:03:cd:43:88:14:64:e3:a0:98:e3:21:d1:07:0b:
         ff:6a:5f:18:01:c5:a6:7c:a9:92:bd:ce:07:e3:ff:d7:4a:1d:
         45:f4:15:b8:14:b3:f6:6b:d7:b8:30:d3:d8:4c:21:bb:f7:d0:
         cf:db:73:90:7a:31:7b:e9:89:ef:4f:0d:b9:82:68:20:3f:43:
         ea:dd:e7:d6:d6:0a:78:e0:1d:e2:e3:1e:12:90:29:b2:06:dc:
         8f:8d:9b:3d:5f:7a:e6:ac:b9:30:ea:52:00:e2:e4:60:2c:0e:
         a3:c6:37:b9:17:4a:4b:8e:aa:b6:77:c1:ec:a1:ed:21:f2:92:
         1f:e3:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:09:31 2024 by rpki-client on console-fra.rpki-client.org