Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
File:                     vq_Hury3142eGQgg9ussfyi7XYg.mft (raw, json)
Hash identifier:          3Zeei7iZJCe2jfDJ2GnJLdGoX+VgQETsb4isyLLl7K8=
Subject key identifier:   2D:D3:96:94:68:72:9C:DC:AC:66:54:28:C6:0A:BA:CD:61:74:13:64
Authority key identifier: BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88
Certificate issuer:       /CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
Manifest number:          056E
Signing time:             Wed 01 May 2024 01:00:47 +0000
Manifest this update:     Wed 01 May 2024 01:00:46 +0000
Manifest next update:     Wed 08 May 2024 01:00:46 +0000
Files and hashes:         1: vq_Hury3142eGQgg9ussfyi7XYg.crl (hash: 4WCqlct1FLtaRB0e1nl1387qhg/B2N8Lmh/aQYA/ZYM=)
                          2: 63D1B4C0929E11EBABC48F60C4F9AE02.roa (hash: 38nRb/WDemBM+JKiOEO1URF8mFtgMeqWktX6x2EKHbE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl
                          rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 00:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
        Validity
            Not Before: May  1 01:00:46 2024 GMT
            Not After : May  8 01:00:46 2024 GMT
        Subject: CN=6631943e-93e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:18:f5:06:dd:c0:b9:39:34:4e:90:cb:91:
                    d0:4a:07:64:0d:87:03:9b:d8:80:ed:cc:91:b7:e3:
                    ea:8a:96:4e:be:41:71:93:ec:a1:f4:3e:87:83:fd:
                    4e:24:d5:74:5c:a2:cc:a5:59:8d:04:69:69:83:62:
                    2a:37:f0:de:92:6e:dc:b4:cf:82:8d:22:95:97:64:
                    03:4e:1e:53:15:cb:f4:d4:60:c7:19:57:81:b0:51:
                    f2:14:84:3c:d5:af:55:21:9a:a9:9d:47:0d:85:a5:
                    33:5d:69:4f:ca:83:26:4f:4f:4f:49:69:24:ec:fe:
                    b3:55:32:13:20:7b:63:30:e6:c0:c6:78:98:20:9a:
                    48:80:1f:6a:b4:ab:04:0a:ba:31:76:c0:26:c2:25:
                    be:22:13:4b:15:ec:b1:0c:70:6e:24:0a:39:c5:a0:
                    75:b1:31:5f:c2:5e:30:70:f8:01:b8:2a:51:1c:b4:
                    f3:08:2d:c0:9b:31:37:83:a7:a8:cd:66:cc:23:f9:
                    c3:3a:6d:45:be:e6:85:45:8a:a1:bd:a1:92:31:65:
                    e8:66:53:13:e0:5f:ea:dc:16:f8:51:1b:cb:b6:f1:
                    33:48:57:38:89:5d:25:36:69:83:50:d1:fc:5a:ec:
                    60:1e:e4:d5:dd:df:af:56:df:6a:ed:57:7c:37:6b:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:96:94:68:72:9C:DC:AC:66:54:28:C6:0A:BA:CD:61:74:13:64
            X509v3 Authority Key Identifier:
                keyid:BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:68:8e:06:f7:4b:05:67:e4:46:7d:3f:1d:78:90:05:15:
         8a:40:d8:50:ec:1b:50:8a:7d:c5:9f:0d:fa:86:18:22:50:b0:
         de:ae:07:f3:8b:f9:d2:a4:42:27:14:90:ec:13:c6:7e:bd:26:
         6d:77:57:46:71:6a:73:27:88:6a:11:7a:be:8d:17:46:bc:50:
         2c:f6:4e:89:76:9e:e7:ee:dc:fc:fe:fd:b9:3e:6f:dd:43:d3:
         05:93:00:1f:9f:0b:0d:a4:21:88:76:b6:53:fc:33:d3:cb:ce:
         9d:0a:92:09:85:94:03:b0:8d:c2:b7:06:b3:1c:20:6c:6f:3d:
         51:99:d6:5f:4f:3a:9a:5d:71:52:d8:18:68:30:31:ea:e1:b9:
         ae:3a:af:a1:15:e5:f0:85:fd:97:aa:ec:ba:61:b8:30:7a:66:
         e7:f3:44:02:89:18:db:66:6b:32:5b:b5:c5:0c:8a:ca:be:3a:
         69:ba:1a:93:ed:54:52:c6:87:c4:49:55:a5:68:ed:c6:3b:d5:
         22:7d:e3:22:90:3a:f0:e4:18:ec:93:7d:9e:f8:f3:c9:ad:64:
         f3:c1:bb:22:06:fd:70:d2:d6:cb:f8:5a:c5:de:ec:d0:05:7c:
         d1:51:bb:f0:16:db:bb:c7:b3:8c:9f:1e:11:c8:e3:3a:92:a9:
         c9:b4:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:38:31 2024 by rpki-client on console-ams.rpki-client.org