Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File:                     7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier:          Sg+ZvtV8bVbPJzvddIBGI4C8/7AJTF8NKSY3+Q4b7Fs=
Subject key identifier:   53:F3:EB:66:21:F9:15:55:0A:60:B7:42:FD:57:D9:33:21:0E:BA:05
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer:       /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number:          0106
Signing time:             Sun 05 May 2024 05:37:58 +0000
Manifest this update:     Sun 05 May 2024 05:37:57 +0000
Manifest next update:     Sun 12 May 2024 05:37:57 +0000
Files and hashes:         1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: EVmgUZEmsX3Tb2mcJjCeX3ZoN5lepzLLL6jK3jzxtH8=)
                          2: 33EC894A7D5E11EDA43E0186C4F9AE02.roa (hash: Giytra5oYOQUic0QKJntra/mWB2HSJ1ws3wH71aT+/Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
        Validity
            Not Before: May  5 05:37:57 2024 GMT
            Not After : May 12 05:37:57 2024 GMT
        Subject: CN=66371b35-9981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:91:d4:66:5b:7d:06:08:37:56:fe:4f:72:
                    24:f7:76:37:1c:6c:fc:c6:be:96:ea:ba:58:d5:0c:
                    16:85:ac:e7:b9:2f:8d:4e:cc:5b:e9:c6:b4:0c:ec:
                    02:8a:1d:68:c5:0a:e3:71:ad:93:e4:64:0b:5b:ec:
                    c4:ce:62:91:b1:3c:fd:d0:fc:41:9e:79:3f:73:c4:
                    db:d8:73:cf:32:24:f1:a0:a5:29:7f:a5:23:90:01:
                    0e:06:b4:d0:fd:37:5f:4b:6b:fc:3b:b0:ad:14:92:
                    af:53:f0:a8:c2:d3:70:12:fb:e5:07:5e:3d:e9:86:
                    80:2f:a0:1e:20:2b:f1:dc:ee:35:e8:3d:c2:a8:59:
                    f5:59:f2:53:26:f0:a6:b1:d2:36:e5:2a:bd:3a:c5:
                    45:c7:ea:58:34:51:3a:03:11:46:d9:58:bb:4b:9c:
                    c6:de:35:fd:0a:16:fd:59:e2:37:7a:eb:61:b3:a8:
                    d6:62:f9:77:de:7e:8e:3c:08:56:72:a4:af:66:d0:
                    86:97:14:93:fe:bc:e3:c6:73:7c:f0:d2:ff:35:3c:
                    17:f8:d5:9f:11:65:bd:5c:4d:fe:c0:b7:64:34:90:
                    8f:28:14:aa:8b:c6:4c:30:e5:3d:e0:1b:52:2e:43:
                    a5:1a:62:c2:4e:2d:20:4f:ce:70:58:3f:17:1c:26:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:EB:66:21:F9:15:55:0A:60:B7:42:FD:57:D9:33:21:0E:BA:05
            X509v3 Authority Key Identifier:
                keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:12:7e:9d:08:3c:eb:9f:9d:cf:76:45:39:a3:e0:ea:8a:2a:
         80:c9:31:37:de:db:9c:f4:ff:38:be:8c:f5:80:2f:dd:0c:e2:
         41:de:53:7f:04:9a:8d:51:85:b0:38:28:74:5f:df:fa:ce:37:
         8d:2a:00:76:80:35:26:b4:aa:22:9e:62:da:fc:6d:95:aa:a8:
         68:43:5b:f4:4c:6b:08:d5:51:63:39:7c:0e:93:b6:9f:6c:ae:
         ae:25:4c:05:74:0a:09:aa:05:68:52:57:97:73:3b:af:c5:41:
         21:09:13:30:0b:2e:b0:b5:55:8d:03:09:39:65:10:e2:e0:47:
         34:df:43:c7:07:f9:69:d2:af:94:fa:c7:de:80:2f:28:ad:c7:
         9e:4d:67:ac:e6:ec:fb:72:d6:49:86:2c:91:6e:6a:b3:f7:0e:
         fc:73:5b:9c:9d:5a:4c:e3:d1:d0:02:53:68:41:69:e6:70:51:
         9e:77:02:a3:a3:10:f5:ff:bc:b3:61:7f:60:dc:0f:77:2d:1d:
         53:00:83:7a:a4:79:85:09:48:90:d1:54:a7:82:e4:d8:2a:2e:
         44:9e:3d:93:81:a1:27:df:17:b2:3c:eb:0a:cb:03:be:dd:87:
         95:74:f9:8f:fc:a2:09:26:74:be:60:57:89:a3:b3:d9:97:fb:
         ba:1d:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:13:36 2024 by rpki-client on console-ams.rpki-client.org