Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          5duk0WvzIHjVV7ZSa66SMKTwZez/1g1Y73M2B0h+xhQ=
Subject key identifier:   1C:CA:BE:C0:58:59:A1:22:C0:60:E8:1D:E0:7B:43:27:64:85:15:6F
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          095C
Signing time:             Sat 04 May 2024 21:13:54 +0000
Manifest this update:     Sat 04 May 2024 21:13:54 +0000
Manifest next update:     Sat 11 May 2024 21:13:54 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: +rR35MP/eKumi40fhKqLbCYpXhV9S9a/B7Ot86tIXAg=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: TtnkqXyCfsOgWEJOnfCpcQpq9xJlNo2GEpRLhLgdwcg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: May  4 21:13:54 2024 GMT
            Not After : May 11 21:13:54 2024 GMT
        Subject: CN=6636a512-e9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:46:f5:fc:95:b9:f3:d0:97:60:7d:96:3f:
                    40:be:8a:af:6a:a6:21:f4:c1:49:89:6d:64:3e:10:
                    4f:7d:e8:57:aa:8c:70:85:2c:d0:c3:71:34:ae:a8:
                    6d:d9:ee:a3:6d:29:7d:b9:39:d5:bb:ac:37:24:0a:
                    31:55:33:09:51:01:f7:a0:ce:ba:59:c4:1e:be:6c:
                    c9:f4:2b:fa:9c:fa:c3:90:08:77:2d:9c:44:3c:f9:
                    6d:48:44:b2:2e:75:82:9d:40:9e:ae:93:d8:3d:22:
                    69:9a:7e:70:1a:0d:ac:1b:b5:f7:b9:e1:f3:d4:80:
                    64:5f:60:a7:aa:a7:6d:33:6d:8d:38:66:c8:f1:c7:
                    23:64:3f:47:e3:c7:f2:2a:18:da:95:12:74:bb:65:
                    5f:08:84:4b:c8:87:a1:c8:08:9d:9c:10:22:68:eb:
                    e0:53:a9:87:16:8a:92:e2:b7:e9:8a:eb:0d:fa:34:
                    2a:a2:ad:33:f1:a0:29:d7:38:66:d8:fe:66:6d:1a:
                    43:9e:e3:1b:cf:08:bb:90:db:80:5e:28:aa:41:a3:
                    7e:07:0d:49:f0:22:e8:9d:5c:e7:2e:37:7c:25:b8:
                    27:46:f3:bd:1b:29:72:c4:11:b1:82:4c:58:27:81:
                    80:f8:b4:55:44:b8:0c:0a:02:57:dc:bf:ba:92:c3:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CA:BE:C0:58:59:A1:22:C0:60:E8:1D:E0:7B:43:27:64:85:15:6F
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:6c:9e:90:67:3f:6c:29:c7:fd:fe:f1:e8:e7:f9:2c:ab:
         a5:53:e7:bd:7d:7f:01:0f:b8:1a:50:ea:b6:0b:2a:d3:45:b3:
         c1:4c:e1:5e:5a:7f:6f:61:0a:e8:06:4d:e1:ce:3f:be:81:6f:
         cf:42:c1:13:24:9f:f5:c1:ef:fa:ef:7f:0e:36:6f:72:72:5a:
         0a:7e:4d:01:04:5e:98:03:da:68:b0:25:57:f2:ac:5c:74:40:
         35:b8:39:5a:4c:95:b3:a8:ff:97:89:03:5e:b3:da:09:60:c8:
         63:68:33:3e:9b:a6:aa:75:b7:95:a7:59:77:df:42:90:a5:57:
         33:18:70:ac:3a:4d:b7:87:14:8f:b6:36:37:6b:40:6c:b0:45:
         22:37:66:18:6f:1a:6e:5b:b4:aa:db:3b:83:96:50:ee:fe:41:
         29:a9:5d:64:52:11:83:ca:09:4c:da:52:98:26:e3:70:3d:8e:
         93:7e:8d:a8:0e:6f:b3:c1:ac:32:99:05:ea:3d:5d:ca:45:29:
         0a:b5:68:47:50:8d:b2:81:4b:0b:15:d7:ff:ae:21:96:92:9c:
         ff:e0:63:7a:76:8b:3d:22:2c:10:ec:d1:df:ea:f3:f1:15:e1:
         b0:4c:f8:97:39:ca:aa:dd:ab:f8:f4:07:cb:83:8f:97:ac:9a:
         4c:a1:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org