Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File:                     zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier:          1TexStgc77Ksl+shRg7LhXysVi2yuI90/9bAmkQNitU=
Subject key identifier:   25:D8:54:B7:D4:8D:C7:71:07:E0:CD:0A:BD:DD:92:72:C4:C9:D6:66
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer:       /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number:          F6
Signing time:             Fri 03 May 2024 05:47:35 +0000
Manifest this update:     Fri 03 May 2024 05:47:35 +0000
Manifest next update:     Fri 10 May 2024 05:47:35 +0000
Files and hashes:         1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: /rtXXJ2XfNJ1aobGw2n1kF2b0cyJ5ehtiTGalHOpxBo=)
                          2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: IPajo4MBu5pAGkE/UrgihjlG1iHW4u6ZDgMioQGSOi0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
        Validity
            Not Before: May  3 05:47:35 2024 GMT
            Not After : May 10 05:47:35 2024 GMT
        Subject: CN=66347a77-41b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b2:1f:8e:8f:bc:bb:74:2c:c0:c8:27:73:33:
                    86:07:88:ff:71:4b:c8:68:aa:cb:db:1e:fb:07:05:
                    f7:95:60:50:fd:54:6f:eb:2f:ca:25:1c:de:66:ec:
                    81:d2:32:7c:2d:b9:07:5d:f9:ad:8f:14:54:18:48:
                    ab:cc:ec:20:ec:b5:71:8b:75:c8:7a:ad:10:2e:62:
                    5e:89:75:24:6e:56:da:75:39:b7:cb:82:60:3c:ee:
                    de:82:6b:ff:9a:c8:72:59:02:9c:38:09:40:4b:fb:
                    9f:95:c3:81:0c:24:94:1f:50:34:49:42:6f:f4:91:
                    48:11:7b:77:04:08:af:f0:26:8f:70:62:f2:f7:22:
                    d5:45:b4:08:46:30:00:d5:a4:06:04:da:b2:cb:30:
                    25:07:f7:9f:88:ac:6b:ed:dd:94:a3:3a:57:fe:b4:
                    5c:fe:ee:1c:3b:b3:bf:1e:af:5b:4f:8d:10:0f:a6:
                    d7:38:59:b1:9f:b8:09:e5:21:aa:09:cf:4d:14:f2:
                    d5:c6:8c:c3:c0:9b:b1:a5:55:35:57:a6:6f:1a:4f:
                    59:77:5e:90:cb:a2:50:0a:74:f1:b9:9f:88:c6:a2:
                    40:2c:c5:15:56:ff:38:54:ee:7d:b0:73:13:e1:2c:
                    1e:79:cd:1a:f7:fb:b4:b6:50:31:6b:ea:7a:b8:5b:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:54:B7:D4:8D:C7:71:07:E0:CD:0A:BD:DD:92:72:C4:C9:D6:66
            X509v3 Authority Key Identifier:
                keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:d3:35:8e:90:b9:b6:81:50:2d:61:80:a1:47:3d:eb:3e:
         fa:d3:5a:6f:dd:d9:ba:00:c6:89:6f:ec:b1:04:9a:2a:4e:30:
         63:7e:65:7d:d3:a4:8f:ae:8d:a5:8e:b3:87:df:85:24:6e:46:
         17:96:3e:81:05:68:03:71:28:55:bb:82:8f:f0:b9:2b:8d:72:
         cd:11:5b:89:9b:4b:12:b1:b3:8c:9f:79:f1:78:5a:87:d0:27:
         e1:d9:b2:36:a9:df:cd:4b:d7:81:de:9e:76:e9:5e:f3:17:7f:
         25:1a:e0:73:35:f4:fd:6d:7e:7a:58:45:e6:2f:8b:1e:41:e1:
         1f:f0:15:31:10:91:3a:97:28:60:38:9f:ea:dc:95:ca:58:f4:
         47:5f:33:65:39:d6:22:a2:04:ea:d2:68:d8:a0:29:ce:b6:f8:
         5e:fb:64:11:84:27:3e:90:ea:18:43:ef:bc:cd:e8:57:02:a7:
         2b:51:9a:76:ec:7d:ef:cb:62:3e:1b:48:26:e2:e6:a2:d9:e4:
         00:27:ba:a4:ca:ed:29:11:db:80:86:ee:89:6e:82:2c:00:de:
         23:77:c2:86:05:96:b8:25:c3:d9:bc:dd:f5:10:d2:fb:f3:76:
         cb:65:7f:a1:c4:25:c8:2f:17:ca:16:f6:4b:90:f1:bb:20:eb:
         61:2a:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org