Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File:                     ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier:          W7ycvJo5l5QaGIVKaa1EFmnG/AxAwQMgPNt5OF2MChI=
Subject key identifier:   C5:DF:C3:F7:D9:54:90:96:6F:B2:C2:4C:5E:2C:DE:B8:D2:35:46:22
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number:          0267
Signing time:             Wed 27 Mar 2024 03:26:21 +0000
Manifest this update:     Wed 27 Mar 2024 03:26:21 +0000
Manifest next update:     Wed 03 Apr 2024 03:26:21 +0000
Files and hashes:         1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 0canWS1Td3xJBvWS7/vZ4/Xz0Rf7B7TRcBeu4xY8XP8=)
                          2: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: o+InfXL4ukjFr34bbrRuhamkpyzK3H/+DY8jO61Lmc0=)
                          3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: vtKO3SjXmvH9dx82EC9zDXe8Vmhi92GTEywUdw7xySE=)
                          4: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: PESjMQOAZB7rvOiAhEgdB1/OLnkYT/S5AzMdHgU3c1g=)
                          5: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: YTVR1eRZmLQDmpmvp4FXUX1YjYSfdRBEsPsmW02Am8A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Apr 2024 03:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Mar 27 03:26:21 2024 GMT
            Not After : Apr  3 03:26:21 2024 GMT
        Subject: CN=660391dd-cd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:65:10:89:0c:68:a5:1b:cb:a8:62:bb:26:
                    e4:97:85:76:30:09:b2:09:43:59:30:54:2a:45:4d:
                    10:cc:be:69:c3:16:07:6c:de:76:a6:87:0c:c7:eb:
                    a1:9b:27:57:bb:bd:02:60:a8:9d:0a:7c:70:4c:2e:
                    57:26:c4:4a:8d:56:e3:10:51:61:ee:95:ac:21:05:
                    c4:fd:b2:9a:c9:75:a3:a5:ce:64:e3:fc:9d:4a:30:
                    e2:76:5c:10:88:cb:92:03:2c:eb:79:27:1f:55:71:
                    39:69:bf:d1:b1:5c:b2:00:2a:f1:a9:26:13:d7:09:
                    cb:75:73:94:50:1d:88:d8:d3:6f:59:e8:1e:db:b5:
                    c6:c4:bf:74:aa:46:67:b0:cc:f8:68:e7:51:a7:0c:
                    75:09:50:db:1a:60:10:86:76:30:5c:02:cc:f8:e4:
                    9f:a6:51:89:2c:0a:6f:26:69:58:98:e7:03:d4:a2:
                    db:14:a9:12:56:e2:21:0b:13:8b:c3:f5:4c:09:f2:
                    44:4d:8c:bd:45:c2:09:8b:83:71:a9:74:bf:12:90:
                    58:bf:84:3c:24:3b:ba:3d:89:a7:64:b2:9f:c2:9d:
                    ac:b5:bd:af:e0:76:60:33:b5:8e:91:d0:4a:d0:47:
                    73:9c:c6:7a:01:2e:40:8a:5f:62:5c:6b:fb:f6:c5:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DF:C3:F7:D9:54:90:96:6F:B2:C2:4C:5E:2C:DE:B8:D2:35:46:22
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:10:c0:5e:c9:3c:c0:05:6d:ae:f1:08:9b:e0:ea:fc:d9:21:
         d0:49:9f:99:36:10:a4:9f:3a:a6:fc:95:65:9b:60:8f:46:9e:
         e4:03:08:eb:8f:6f:44:73:61:c5:42:70:a3:12:87:98:dc:d7:
         b3:0d:c5:91:a2:0b:b0:86:26:c9:3f:7d:05:77:67:a1:82:08:
         4d:11:d7:2a:31:db:58:f3:bf:2d:24:4d:0f:95:aa:0a:d4:e0:
         d3:2a:89:4c:78:9c:db:bd:ca:19:c9:26:d6:cc:ab:8a:d5:17:
         f9:16:83:0e:59:8a:30:21:ce:53:15:f0:ae:3c:f9:c1:38:5c:
         24:04:02:78:74:ca:7f:51:73:9c:4c:5d:5d:92:54:ba:e7:6d:
         a3:ff:4a:01:19:70:16:2a:f6:91:43:7e:18:65:ad:b0:7c:c6:
         35:ad:f5:0b:be:25:71:38:ae:c7:bb:72:22:24:99:35:dd:5f:
         c0:8a:fd:42:17:ca:ff:a0:12:e6:61:60:32:07:31:25:a7:87:
         4d:36:e0:53:59:20:7c:ef:23:fe:44:26:f0:2c:16:b4:8d:ad:
         50:c2:79:e3:66:22:73:90:65:1d:7a:f1:5f:31:00:b4:52:e3:
         6e:d8:28:b2:1b:8b:27:55:32:df:2d:ce:3d:78:94:5b:18:2b:
         2e:01:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 04:41:37 2024 by rpki-client on console-ams.rpki-client.org