Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          +cHoogmwckkdH3JHyf6E8unWtFAZfS92D0Ik7YTPIKM=
Subject key identifier:   32:E5:34:27:CB:09:0F:96:6F:CC:36:32:60:EF:3D:D4:D7:3D:17:D8
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          0257
Signing time:             Wed 01 May 2024 04:13:39 +0000
Manifest this update:     Wed 01 May 2024 04:13:38 +0000
Manifest next update:     Wed 08 May 2024 04:13:38 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: dWQOrrAm1Qf5jqZykhl+UqhZAB3p1xu3Drj87iP9GR4=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: DLCDb39Hu0SATBAuZHrW7S+IKgDrM89Hzg8XBQ/XrQE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: May  1 04:13:38 2024 GMT
            Not After : May  8 04:13:38 2024 GMT
        Subject: CN=6631c172-7117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:66:e0:29:06:9c:87:8f:70:28:5f:21:c7:
                    44:a4:5f:50:02:b8:75:fb:66:43:f6:32:a7:c4:de:
                    b3:57:82:47:3b:87:86:dc:c9:c2:89:32:7c:77:1a:
                    3c:68:79:c4:da:2f:67:1d:dd:f5:d3:ab:5d:0c:6f:
                    02:2e:69:17:84:ab:29:82:1e:2b:dd:ef:0a:2a:a9:
                    61:79:37:53:3c:33:24:0e:88:f5:5e:07:ce:a7:e9:
                    76:0e:7f:2e:5b:ba:bd:cd:df:01:6b:24:0f:5d:6d:
                    00:75:f6:ff:e7:f8:bc:69:4e:68:1d:43:57:3b:ec:
                    01:a8:13:e7:29:c1:b5:23:7d:06:da:aa:37:e1:11:
                    93:85:db:13:bb:b5:03:cf:a1:bc:b7:13:fb:d8:f0:
                    da:5a:35:5b:a4:4c:22:98:93:ad:04:c1:6b:ea:e1:
                    e7:94:44:2a:1c:8c:c3:60:08:9a:18:33:a1:c0:cf:
                    31:2d:b6:1d:d9:c5:fe:e8:48:ab:0b:c0:79:6e:31:
                    4e:e2:a4:7d:46:56:dd:cf:c8:78:fe:2a:aa:a1:20:
                    54:1f:be:5c:61:1b:97:3a:e1:2a:14:61:17:1d:e1:
                    f2:d1:9a:14:58:65:9c:85:17:37:e6:0e:f5:c2:fc:
                    ae:f8:39:89:a3:38:87:19:18:56:91:87:3e:76:f9:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:34:27:CB:09:0F:96:6F:CC:36:32:60:EF:3D:D4:D7:3D:17:D8
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:e9:33:72:c8:50:d1:e4:61:fe:c3:3b:36:85:13:26:83:
         a1:7e:f8:24:cf:a5:27:76:61:5f:24:4e:92:5e:2b:a8:d9:a8:
         ca:95:ab:53:37:70:b1:ea:48:2a:fe:db:6e:50:45:2e:ae:07:
         40:3f:5f:3f:52:e0:6f:a0:a7:d3:31:b9:37:f4:e6:9f:fa:4f:
         b3:0a:16:ac:5b:e9:9f:8d:79:66:13:d7:f7:27:e5:18:25:6c:
         96:cf:31:87:57:de:b5:b9:1d:03:55:86:74:96:fe:4a:1e:5a:
         ed:64:d8:98:ed:41:0d:a1:b8:46:43:8d:f9:ac:77:ce:d7:34:
         39:0a:f9:2f:e2:cf:0b:34:e5:51:e9:8f:63:3b:61:ed:ba:7f:
         f1:55:20:fd:1d:5d:fd:50:23:f4:1e:c5:ff:02:b5:94:b3:f8:
         fa:7a:ec:2f:a4:91:a4:8d:a5:2f:a0:90:51:f3:1c:d4:3f:2d:
         bf:eb:43:1a:40:c1:d9:43:7e:54:58:5b:92:67:66:f9:60:c8:
         b6:b7:b2:1b:35:aa:1b:b9:83:18:a8:67:53:77:46:d1:39:d0:
         1a:53:6e:b1:55:79:32:3e:0f:19:70:45:a6:6b:3c:f9:a3:c4:
         5e:ea:d5:6e:22:2e:59:be:6f:6f:ef:d1:82:d7:b1:26:7b:3b:
         33:36:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:49:28 2024 by rpki-client on console-ams.rpki-client.org