Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
File:                     bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json)
Hash identifier:          JAeqcAxRUttJ76D8fOEcFSvIcKKbktNlLL3G9Nwi41o=
Subject key identifier:   94:09:25:3E:31:42:B6:18:20:92:94:57:AB:B2:B4:31:7C:59:62:FF
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
Manifest number:          39
Signing time:             Sun 15 Sep 2024 10:00:18 +0000
Manifest this update:     Sun 15 Sep 2024 10:00:18 +0000
Manifest next update:     Sun 22 Sep 2024 10:00:18 +0000
Files and hashes:         1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: qqDd2tWbSOXgvS7W/8RajUwcPlKW02wcfr8Lu5UnOU4=)
                          2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: 4pyuOexl0DTby5r2TtQcTtZa/GRLdsKvSRJMrccFZWc=)
                          3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: mtFmrnqGfLHWu2Z4dfURxPhT/tNHf1PqV40ULrrFAGk=)
                          4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: sqQN0/UW0uCQkGk8Z/Opr00dIdnWMw+4VliAO+ZDuvU=)
                          5: A074721624CA11EF93486579C4F9AE02.roa (hash: nXKONamo5/7dl+zwjVR7iORbBvzEbVNG55VrJso28jc=)
                          6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: uHBSb4Uiuo44AjfBHlJ3CH1SzIH4tzJ5cVtpzyKKnxY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Sep 15 10:00:18 2024 GMT
            Not After : Sep 22 10:00:18 2024 GMT
        Subject: CN=66e6b032-7a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:8c:36:75:7c:05:b3:83:f2:d5:28:2d:35:
                    cf:d3:dc:99:cd:c4:7d:16:06:3c:ef:ca:33:60:dd:
                    29:2f:0e:a9:4f:8d:0e:bf:5a:d1:e1:46:0a:d4:2c:
                    91:1e:1d:26:e9:57:5d:08:7e:4e:8d:16:52:df:5b:
                    a1:24:cb:cf:29:c2:d4:58:84:03:b9:7f:e2:8c:f1:
                    01:a8:56:c2:d9:71:78:ff:f1:0a:3d:5c:c0:4a:d3:
                    09:f2:2c:ee:a8:13:1e:c7:27:0b:a2:9c:f1:ee:8f:
                    06:6b:bc:72:9d:37:b9:a4:0b:06:aa:6e:5a:c4:99:
                    a9:8d:ae:5d:93:4f:24:ae:26:21:66:b4:2e:43:b2:
                    28:80:4f:e4:24:16:a6:44:d8:c4:09:e0:97:9a:60:
                    e1:26:6e:27:79:c5:81:2b:85:31:b9:ab:80:c6:88:
                    ab:48:09:f0:bf:32:90:bc:72:bc:34:a1:78:e5:33:
                    b4:25:ad:34:61:8d:d7:05:c9:78:09:c6:bc:e1:30:
                    ea:d3:06:c2:82:ae:b0:3f:03:31:c3:06:e2:89:df:
                    18:96:d4:23:c5:42:c7:fc:10:e8:b7:a9:69:e7:9d:
                    b4:ce:c1:86:d0:75:b6:6c:5c:4c:f4:1c:58:7a:d4:
                    5d:48:7b:74:ea:38:8c:28:3a:38:fa:af:ae:3d:01:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:09:25:3E:31:42:B6:18:20:92:94:57:AB:B2:B4:31:7C:59:62:FF
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:15:6f:0a:6b:54:5d:8e:23:4c:dc:cc:8b:ed:78:0d:7b:
         cd:41:22:cc:58:9a:4b:e4:df:61:4c:80:9b:22:4f:36:5e:4e:
         4d:c1:34:35:98:88:fe:d1:80:71:ee:70:67:ab:80:0a:53:fa:
         c9:ec:a3:a0:3f:cd:cf:d1:fc:d7:86:35:0d:81:51:97:65:f5:
         65:3c:ba:2b:96:0b:a6:06:46:a9:da:67:5c:5e:97:3d:e7:88:
         01:80:97:9b:24:27:16:6d:79:2e:df:d4:16:26:b5:b7:74:b3:
         80:bb:98:c1:7f:eb:da:95:0b:6a:63:23:a9:e7:c4:d6:d2:74:
         3e:4b:30:06:79:2a:e6:30:b7:dc:e6:79:50:89:6e:f8:d8:70:
         fe:f5:92:30:71:1f:bd:85:b6:08:1f:55:29:a8:39:08:17:77:
         29:57:91:87:7e:87:2d:ae:32:ce:56:83:d9:dc:3a:40:da:c2:
         38:e6:02:09:68:98:85:e1:89:32:7d:c5:21:89:59:44:64:38:
         3f:37:90:1b:a6:b1:27:59:4f:85:b3:94:2d:31:45:3a:12:7b:
         a5:11:c8:03:e9:1e:89:f3:2a:d6:32:7d:db:36:a6:4b:c9:25:
         51:2d:cc:af:c2:3f:fd:2a:ea:da:4a:7c:c5:c1:35:85:a4:fb:
         cd:d3:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org