Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
File:                     D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json)
Hash identifier:          36srbpQiqhI25iczpqd+FHPDPqktnnm6VImuIRI4QOM=
Subject key identifier:   56:88:33:89:5E:25:0C:A5:F3:F3:34:E2:5A:D6:CE:80:44:1D:60:0C
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Certificate issuer:       /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
Manifest number:          B3
Signing time:             Fri 17 May 2024 06:32:29 +0000
Manifest this update:     Fri 17 May 2024 06:32:28 +0000
Manifest next update:     Fri 24 May 2024 06:32:28 +0000
Files and hashes:         1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: xBse5yJFYdD6WDHpm+vHKNYR1vdh3Ys7/Zzj5637JAc=)
                          2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: AZeJrvSFUeM8gF1O8F9ykRVrPQam2o3f9tdZxj7NXWg=)
                          3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: 1ULYMihctK0QTnF2gON3NC5zE/hLfPv7063bfyE4IkY=)
                          4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: 67JgC0/u9N2dm4xSBdGoMlHezM99N10cYVJ0urlojeA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
        Validity
            Not Before: May 17 06:32:28 2024 GMT
            Not After : May 24 06:32:28 2024 GMT
        Subject: CN=6646f9fd-0909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:aa:c6:7d:ed:78:01:01:55:6d:32:c3:c0:
                    52:f4:45:ba:73:0c:11:8f:70:d0:e2:07:51:06:c7:
                    10:72:b5:32:fd:b7:9c:f7:f5:12:5e:94:45:38:8b:
                    e7:df:2d:9f:e7:36:a7:f8:7f:67:10:40:e3:2e:ee:
                    12:37:bb:f7:ba:70:5c:f7:fc:0d:78:99:c4:71:bc:
                    95:54:a1:53:5a:2a:f3:a6:71:e2:7e:e6:e1:04:97:
                    d8:bd:ca:ba:05:d4:f1:83:8c:79:b4:48:75:2f:a6:
                    d8:2f:2c:c4:b2:c7:cc:48:ed:f9:9b:32:48:da:69:
                    69:a4:68:ed:d8:75:32:8a:6d:42:05:6a:f2:4e:52:
                    27:a2:a7:3c:46:c5:82:32:b2:c4:01:20:cb:a9:c4:
                    1d:37:2b:0c:d4:af:1a:87:99:6e:3a:60:98:7d:3d:
                    33:df:ed:b5:76:db:8c:06:b1:29:03:93:1b:53:75:
                    af:c2:7a:8f:ab:28:07:28:48:72:29:e9:d8:9a:2b:
                    f8:5d:e0:d1:2b:0f:f6:99:45:cb:ec:c8:c4:54:be:
                    e8:d6:ab:29:68:a0:ab:3b:cf:cd:53:2d:97:45:09:
                    89:e5:27:fd:61:2a:a4:90:80:ee:c8:be:ec:bf:81:
                    69:c4:e1:76:9f:c2:ad:13:70:93:20:b2:2e:54:ab:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:33:89:5E:25:0C:A5:F3:F3:34:E2:5A:D6:CE:80:44:1D:60:0C
            X509v3 Authority Key Identifier:
                keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2f:f8:04:c4:c7:1b:00:83:e2:45:5d:c2:89:89:7a:a1:3e:
         76:a6:30:a2:8c:2d:55:a5:d9:07:31:00:78:4a:7f:a9:4c:30:
         1c:ef:5c:e7:39:ea:4e:4f:0e:19:1e:72:8d:6d:3d:85:a1:c7:
         dd:72:6e:06:bf:ee:a9:b5:72:39:01:59:f1:cb:9b:c6:1c:ec:
         ff:5d:81:d3:4d:55:ad:9b:5d:00:48:5b:87:c3:7d:f2:92:99:
         74:d0:5d:c4:4b:3b:6e:bb:42:20:4f:70:10:9a:62:95:0e:52:
         02:d6:3a:3e:00:ec:49:28:84:5f:32:06:86:cd:53:37:1c:de:
         66:9e:71:8b:7c:6d:0a:1b:b1:cc:2a:20:25:96:eb:78:e7:71:
         a9:72:4e:0d:3f:0f:74:9c:3f:b6:b3:5f:8a:d2:e7:35:30:58:
         46:15:a7:4d:d6:0e:e5:e9:bd:23:ef:88:cc:1d:eb:90:7c:a0:
         2e:28:43:26:57:de:a7:61:d1:29:17:91:09:b6:f3:f3:1e:c7:
         a7:11:00:f9:a5:10:b0:ad:6d:9f:e2:02:5a:38:59:e6:5c:96:
         3f:45:4b:2a:25:cf:bc:60:2c:69:1b:9d:d7:48:61:90:3a:3e:
         fc:14:98:c8:d7:fe:4f:90:75:7b:0e:b5:fc:69:d0:e5:9e:3a:
         ba:8e:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org