Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          4O4ytVn/qvzwiDav7TRK7amt/pu8ymSnXMzYFjMACcU=
Subject key identifier:   D0:4B:CA:73:0D:DF:4E:7B:BD:F1:5E:2F:38:A5:5C:FB:79:B4:64:CF
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       07FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest Number:          07F9
Signing time:             Wed 22 Mar 2023 22:03:27 +0000
Manifest this update:     Wed 22 Mar 2023 22:03:27 +0000
Manifest next update:     Wed 29 Mar 2023 22:03:27 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: aYZyyERDV+/W2ccJNSKUW/TiAiJg9x5FpEz3F6yWFeY=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: mt4WbS+aMKt8hL7uqTtgSgonTuN2JlqnqxPeSCtlNXA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Mar 2023 20:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Mar 22 22:03:27 2023 GMT
            Not After : Mar 29 22:03:27 2023 GMT
        Subject: CN=641b7b2f-9b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:ea:6a:74:cb:d3:b6:91:93:a9:83:ca:a0:
                    a4:03:44:51:8d:d3:94:61:e4:2b:75:33:ad:68:0b:
                    20:34:ab:22:07:90:ac:ee:ec:94:18:a7:7f:c2:1f:
                    00:0e:50:ad:71:1a:8b:0b:ff:6c:47:c7:d3:3c:ba:
                    a9:0a:69:1b:4b:06:74:51:75:73:ea:cb:7c:c8:87:
                    52:24:e5:a5:90:a9:19:15:b2:27:12:8b:46:5c:40:
                    28:27:08:ba:ae:31:3d:96:5e:ac:b6:81:44:e8:13:
                    fa:3e:4d:35:bd:02:1b:6d:97:03:43:ce:d7:b4:db:
                    11:0a:9f:0b:c3:9b:80:8e:27:09:f0:c6:26:7b:1a:
                    87:79:f2:1d:93:cc:3c:eb:75:4f:46:ed:08:11:00:
                    e4:58:00:a2:97:fe:bc:2c:1e:ef:a6:d5:af:26:d3:
                    98:b9:bb:0f:74:8c:e6:46:f2:46:d2:91:6f:a1:c1:
                    83:e7:f6:12:6d:0b:1d:02:ac:bc:fc:0c:0d:b8:fb:
                    37:bd:02:9f:7c:65:b6:3a:60:ff:b6:e2:73:15:50:
                    34:32:5a:b2:f4:5b:67:b7:07:a8:0e:db:cf:c6:86:
                    0d:ef:9b:61:07:43:f4:20:b8:02:0d:53:01:72:ce:
                    99:30:a0:96:08:c9:83:fe:f3:94:a1:77:40:62:e4:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D0:4B:CA:73:0D:DF:4E:7B:BD:F1:5E:2F:38:A5:5C:FB:79:B4:64:CF
            X509v3 Authority Key Identifier: 
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:96:1e:bb:8f:d0:48:d0:41:f7:27:96:d0:b0:12:49:e2:4d:
         27:ec:4c:29:c6:dd:72:72:8e:0e:a1:ac:c6:3c:fc:d1:02:72:
         8c:e9:60:05:a8:bb:1f:47:65:1c:a9:83:08:e2:48:c2:87:9d:
         76:88:c9:80:44:70:d8:40:74:ea:50:92:91:b4:f7:3d:5b:a8:
         75:2a:81:86:e9:34:f2:51:0c:d2:ea:9f:42:e9:44:d7:5d:0e:
         cc:a7:4f:0c:a1:11:38:51:9e:9d:49:eb:12:32:71:10:5f:4c:
         e1:d1:d3:d8:4c:f1:c3:2e:ae:52:43:83:41:d4:16:bf:f8:9e:
         99:4b:b7:f7:a1:1c:14:0e:76:e1:11:40:89:16:8e:c9:bb:9b:
         24:47:b5:5f:7d:53:77:8c:6e:92:68:61:b6:03:d3:78:2a:29:
         4f:24:b3:2f:65:3a:86:ca:19:ec:27:8a:35:ed:d1:c8:54:bd:
         c6:24:d5:87:c4:28:1e:66:3f:fc:42:61:83:c7:df:ea:b4:f9:
         45:43:98:b6:9a:e4:10:e4:d7:15:20:19:6f:7c:c0:d0:49:95:
         68:2a:4d:88:c8:ee:1b:4d:8e:be:35:ee:52:9b:a3:1e:55:7d:
         6d:db:49:d6:1d:84:f8:88:12:a6:6a:f8:29:ac:34:c0:ab:fe:
         b8:4e:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 22 22:39:08 2023 by rpki-client on console-fra.rpki-client.org