Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File:                     rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier:          9XD4SAmEPbk/AR5p+Wc+PgMBXwQEGAJGMV4kR7vnMbQ=
Subject key identifier:   64:0F:C7:C3:C9:7F:C3:E4:06:DE:FF:56:F1:FF:8F:F4:90:2D:CE:B6
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer:       /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number:          068C
Signing time:             Mon 06 May 2024 23:25:55 +0000
Manifest this update:     Mon 06 May 2024 23:25:54 +0000
Manifest next update:     Mon 13 May 2024 23:25:54 +0000
Files and hashes:         1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: haYaRD/v0eVO9lZuGW6gnS4uHorGAFDVaKqyMlOOyO4=)
                          2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: n1vxOfeH6P3j2kI6oTZnPuNcdgy+8cc1bFtbEdKCass=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
                          rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
        Validity
            Not Before: May  6 23:25:54 2024 GMT
            Not After : May 13 23:25:54 2024 GMT
        Subject: CN=66396703-6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:17:9c:00:93:96:9e:72:13:2d:ee:c1:12:
                    b9:16:8b:47:6a:f6:c9:cb:1e:4b:be:25:31:67:de:
                    f7:c4:34:a0:ae:9a:96:cf:f9:81:6a:98:8a:60:82:
                    72:e3:3c:5f:33:c2:6e:c5:6a:69:4d:ee:fb:51:9c:
                    39:f2:2f:4d:c5:55:94:f8:ad:f5:16:9f:55:60:b1:
                    3e:1f:f1:cb:c9:57:14:1b:4f:e7:6f:da:8f:31:7f:
                    ce:1a:45:11:68:e4:9f:1d:80:e9:d9:8f:e0:c3:93:
                    e6:bb:e2:bc:74:9f:33:5c:f6:2a:c3:bb:10:ad:e9:
                    55:b7:18:c9:d9:82:d3:c5:0e:b7:f4:c9:3b:e6:6c:
                    7b:15:01:59:79:bf:4b:9d:85:db:0f:dd:3b:77:a4:
                    23:5b:8d:55:51:4b:82:99:8f:a3:e8:e4:61:24:79:
                    1f:3e:1e:23:99:40:66:a2:95:5b:be:f8:a2:f5:d6:
                    48:58:98:4f:6f:f1:78:f5:9f:c9:91:c2:7c:88:c9:
                    28:d2:76:9b:be:f1:99:26:1c:c1:96:4f:24:fb:91:
                    98:79:7a:eb:8c:9f:e7:c5:fc:0f:a1:b6:21:0c:76:
                    35:89:6b:49:62:fb:a8:ec:fe:7d:05:41:9c:1e:ca:
                    46:22:60:3f:34:60:27:1c:77:92:23:14:cf:a0:ea:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:C7:C3:C9:7F:C3:E4:06:DE:FF:56:F1:FF:8F:F4:90:2D:CE:B6
            X509v3 Authority Key Identifier:
                keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:7c:08:25:9b:6a:a7:f3:01:d1:47:b6:6b:bf:66:12:fd:
         14:09:42:b9:f5:ad:90:ed:19:54:8e:9a:dc:11:f9:fb:44:e7:
         24:d8:a6:30:c5:f9:f7:53:c5:c8:72:d9:5f:4a:6f:13:d2:dd:
         4b:ba:68:69:67:5c:7d:2f:52:4f:fe:0e:34:4e:16:46:82:4a:
         d3:4a:bd:ee:52:1e:90:51:64:58:7f:a8:b2:46:05:58:85:1c:
         58:eb:24:95:8c:49:b5:73:85:fd:ee:22:2d:95:35:4d:cb:cd:
         61:1a:ad:9d:3b:a3:46:d4:c1:70:cf:09:4d:f5:39:3b:89:ff:
         af:36:8a:40:c6:56:96:13:65:44:ac:21:ab:17:67:8d:6b:35:
         9c:1f:90:9d:ad:ee:e1:a5:2f:0c:3d:e0:5f:be:54:7e:29:6d:
         74:03:72:d8:3c:07:d2:61:aa:b3:aa:11:10:f3:b4:26:83:1c:
         7d:48:cb:03:b5:e5:13:ca:c9:11:6c:f2:79:8b:84:9b:5a:22:
         3f:0f:be:3a:74:3c:1e:6c:8a:32:63:85:9f:7a:2d:8e:cb:81:
         5b:42:a5:17:72:80:37:6d:53:e5:f6:94:f6:94:f2:15:22:7b:
         68:0e:de:dd:71:53:18:86:a7:e1:33:00:58:66:a3:45:35:d1:
         4e:03:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:24 2024 by rpki-client on console-ams.rpki-client.org