Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
File:                     V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft (raw, json)
Hash identifier:          OGlPS3Yi2WJTRzJR9UJc/X6NLhuBZIX6awHmaMiCIpQ=
Subject key identifier:   4F:96:36:B0:A1:BA:35:07:18:BB:72:8F:54:DA:B7:62:BB:5A:19:F0
Authority key identifier: 57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC
Certificate issuer:       /CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
Manifest number:          01BB
Signing time:             Mon 29 Apr 2024 04:24:23 +0000
Manifest this update:     Mon 29 Apr 2024 04:24:22 +0000
Manifest next update:     Mon 06 May 2024 04:24:22 +0000
Files and hashes:         1: V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl (hash: 4Yj5Ju345AEClMMwRWPvUYfuAnnsu3ThG11kSxaagGk=)
                          2: D18B56F408DD11ED830BEB5CC4F9AE02.roa (hash: 65QKn1iwWtzaEt6FfyQQXaoXVramIQmLx5AtEX20zao=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl
                          rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
        Validity
            Not Before: Apr 29 04:24:22 2024 GMT
            Not After : May  6 04:24:22 2024 GMT
        Subject: CN=662f20f6-b1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:cb:06:28:f8:c2:6a:22:7f:bc:52:26:a1:
                    18:91:c6:df:12:ea:f0:5f:20:de:27:9b:f1:fa:0a:
                    6d:05:d4:77:54:b7:cd:79:1b:cd:84:d5:4e:b0:7c:
                    11:b2:d6:d2:e2:f4:06:50:6c:46:df:f5:f6:9b:4c:
                    55:1c:f8:e6:ef:02:ff:6b:84:31:9a:e0:d1:f9:bf:
                    62:94:50:5b:75:3a:8b:ce:58:9a:ca:89:e1:b9:b4:
                    71:14:8d:97:37:07:a2:a8:cc:12:79:0d:76:07:96:
                    26:52:e3:d6:4b:45:38:94:d5:d0:7b:0d:a1:51:73:
                    a7:a6:01:39:a6:1e:0d:7d:9e:8d:8d:9b:27:3d:ed:
                    63:31:d4:7f:8c:19:52:a4:9c:13:23:03:8e:29:e1:
                    ef:d4:f1:35:3a:f0:7b:c8:90:31:7e:45:c5:70:6d:
                    fb:c7:34:6a:37:36:02:21:05:87:c5:cb:93:00:50:
                    f3:f8:22:0e:87:c4:89:03:84:f3:bc:bd:d5:bb:04:
                    72:bb:65:3f:d2:45:eb:cf:a9:84:1a:05:49:22:42:
                    0c:3a:60:09:c1:d4:8b:3e:24:f0:5d:21:6c:f4:d3:
                    7b:fa:be:83:f0:d0:47:2d:f7:a8:e7:34:4b:49:15:
                    ce:65:01:78:10:84:c8:30:34:ec:3d:c5:1a:9f:b0:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:96:36:B0:A1:BA:35:07:18:BB:72:8F:54:DA:B7:62:BB:5A:19:F0
            X509v3 Authority Key Identifier:
                keyid:57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:ba:56:18:83:3f:73:a9:6b:b2:51:ad:06:70:9a:90:0b:
         d5:60:4c:51:f0:c4:4e:80:7d:ff:af:01:fd:79:eb:30:1f:a1:
         3c:3d:09:0b:71:17:4e:a3:f1:c9:b8:c9:de:e2:2c:f2:2f:05:
         ce:a0:5c:ad:6f:5d:e9:a7:6c:ed:3c:f8:cb:94:13:0b:c2:d0:
         af:2b:ea:07:14:17:c9:ca:00:1c:07:67:5a:25:27:26:76:99:
         29:a5:3a:2a:38:d2:cf:cf:ad:58:fc:3c:3c:0e:80:4b:5c:ae:
         ba:f1:7e:bc:8b:e4:8f:43:c1:44:81:19:1c:28:ea:ce:b9:d1:
         15:fb:1c:57:53:8f:5c:62:d0:a2:e0:b2:d2:82:9b:95:77:37:
         80:a8:ee:4a:58:9c:52:b8:68:29:c6:c0:e3:06:7e:84:70:f9:
         58:46:14:98:f3:98:40:77:c7:0f:d4:1c:a5:8d:01:65:3e:f0:
         b5:e8:80:71:fc:26:08:b5:de:51:82:f5:43:d5:8c:fd:50:06:
         3f:23:6f:5a:51:5b:4d:ec:c1:0e:df:91:f7:1c:e0:4c:45:53:
         30:05:e9:bf:bd:77:4e:9a:17:a2:70:ec:ba:94:8f:c8:0c:52:
         90:21:ba:a3:3a:78:65:9b:57:d9:e8:97:d3:e0:8e:06:bc:25:
         e4:52:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:55:54 2024 by rpki-client on console-fra.rpki-client.org