Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
File:                     S0fJxk08IyF6Fd2rh0fDncMBhPI.mft (raw, json)
Hash identifier:          HBR9BD51253ZlTMJfAfdxWRP06W/CkUE6WEPMz3ONgU=
Subject key identifier:   A4:FA:30:B7:52:21:34:1D:AF:F9:11:96:6F:04:BC:3C:28:4A:CE:54
Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2
Certificate issuer:       /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
Manifest number:          05B6
Signing time:             Sat 27 Apr 2024 00:14:17 +0000
Manifest this update:     Sat 27 Apr 2024 00:14:17 +0000
Manifest next update:     Sat 04 May 2024 00:14:17 +0000
Files and hashes:         1: S0fJxk08IyF6Fd2rh0fDncMBhPI.crl (hash: 3dNexKxEhdEywHZvhdyUUJaPLbBrCN85L1a1+PgN9iw=)
                          2: AA51390A822B11EE8B95E475C4F9AE02.roa (hash: q0fbiPRDclbW8ssObJUiZlehM548F6y+nk94Wtd5tvI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl
                          rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 00:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2
        Validity
            Not Before: Apr 27 00:14:17 2024 GMT
            Not After : May  4 00:14:17 2024 GMT
        Subject: CN=662c4359-2e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:12:2e:d1:0c:fc:58:2b:73:45:a2:21:c9:
                    90:d0:b0:b0:00:70:aa:5a:d4:1d:17:a3:22:fd:81:
                    51:68:f1:6d:40:dd:8d:84:85:a3:1f:14:cd:34:54:
                    cb:ea:01:0d:50:f8:fc:73:b2:67:53:41:98:68:ee:
                    c5:47:70:15:87:c3:0d:33:1e:a9:60:d5:76:d5:d5:
                    45:92:90:d2:a5:0b:32:ea:28:7d:10:b4:07:cc:d0:
                    f9:03:9e:5c:fe:25:0a:ed:4e:6f:41:cb:ec:4c:a7:
                    0d:f0:d7:a3:f9:0b:35:45:c8:1c:97:87:37:18:cc:
                    77:a9:a6:3d:01:85:18:64:bc:43:4a:81:9a:11:7b:
                    73:44:76:9e:b0:98:29:c4:bb:10:da:4a:a6:24:6e:
                    4a:b7:87:b2:d1:1d:ca:b6:4e:d3:92:5b:da:21:1f:
                    95:62:4f:86:e5:2e:eb:82:30:0a:0c:f1:b7:8a:7e:
                    9e:af:1e:77:13:66:82:88:af:ea:fb:35:ea:3d:52:
                    4f:54:6e:1e:65:bc:a3:82:11:c4:01:c2:39:0c:0c:
                    0a:8b:b2:93:bf:15:75:bf:e6:16:33:1b:7b:6f:fd:
                    5e:ab:08:94:ac:96:9e:18:7c:09:ea:c7:73:fd:b3:
                    2b:80:16:f2:33:12:76:68:ef:62:a3:89:3c:dc:d6:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:30:B7:52:21:34:1D:AF:F9:11:96:6F:04:BC:3C:28:4A:CE:54
            X509v3 Authority Key Identifier:
                keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:38:6f:36:45:fb:21:a2:9f:51:48:d6:3c:4a:42:65:d8:
         ae:00:16:03:1d:5c:29:31:9e:bd:e4:47:b1:cb:1a:12:a5:5d:
         11:8d:24:86:4d:cb:dc:71:fd:d4:3c:a5:e3:1a:30:33:1e:a2:
         fe:fb:81:c9:e9:bd:bc:d7:7c:6d:c0:d7:9a:aa:d6:39:9a:8e:
         22:de:f5:5c:ff:ea:bb:39:47:1f:82:33:15:02:6c:1a:0e:e0:
         f3:8f:be:56:53:e7:5f:20:06:91:b5:fd:c4:6b:54:20:46:8c:
         39:8a:b2:dd:e0:9d:e4:bc:85:f7:9f:f5:62:2f:54:af:b7:78:
         aa:75:a4:ce:77:bd:03:3a:ab:ae:93:2a:bb:8a:29:98:13:76:
         ff:c3:5d:84:85:a7:e8:67:cc:b2:5c:61:63:8d:20:87:3b:30:
         96:a0:f9:71:38:24:52:d3:e5:33:f5:18:fb:b5:0e:36:ca:56:
         02:f8:69:b6:c4:33:a8:7c:b2:03:2a:a3:34:fc:ab:cb:8c:fd:
         ef:21:eb:73:49:df:58:1a:0d:4e:c5:0e:ae:0e:52:d2:13:f9:
         35:0b:0d:e0:d5:f3:ca:16:1e:d5:1f:ba:67:62:cc:e2:67:5b:
         45:8c:f1:f4:8f:85:e0:1a:8b:3d:8d:2b:9f:76:03:38:b9:d8:
         7d:c7:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:20:15 2024 by rpki-client on console-ams.rpki-client.org