Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          4z3lcfKQ0LPzZLzoNrxsKzEXOr6KlbaxwSVjiI3MeoM=
Subject key identifier:   72:22:DB:EA:0F:20:BB:60:FE:C4:92:61:08:4C:8E:D8:C4:8C:BE:A0
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       33F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          33DF
Signing time:             Sun 02 Jun 2024 15:00:30 +0000
Manifest this update:     Sun 02 Jun 2024 15:00:29 +0000
Manifest next update:     Sun 09 Jun 2024 15:00:29 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: Nx/mjEywlXyQv+EpDIqVkyytBRif23xlFX6dPidJRSY=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: d144T7oMH95RvKY4e89HKTmo5Jmqni2w+fwMwfkyYxg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13296 (0x33f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
        Validity
            Not Before: Jun  2 15:00:29 2024 GMT
            Not After : Jun  9 15:00:29 2024 GMT
        Subject: CN=665c890d-41e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:38:d0:89:bf:89:03:f0:59:ae:16:13:85:
                    8f:ba:9f:c1:11:0a:af:d0:a7:b9:ae:6b:23:b9:6c:
                    53:6a:36:fa:91:7f:5a:9e:83:13:1d:e7:63:1a:64:
                    8d:e8:80:c0:1f:ff:a9:80:4b:e7:f6:c0:3d:96:b0:
                    c2:0f:16:31:a8:ad:18:c6:24:78:f9:95:03:8b:5b:
                    a6:03:84:8e:4d:8f:96:c5:79:ff:a6:cf:a4:07:6a:
                    d8:c1:f5:bf:ab:e2:04:c6:eb:5c:9d:4f:91:92:d0:
                    bf:40:be:39:30:75:d8:b2:2c:64:48:05:73:d7:37:
                    4b:73:bf:7b:2e:ef:d1:5f:c9:7e:78:13:4e:23:2a:
                    9d:6f:e1:4d:66:0d:76:c6:13:95:d6:67:83:50:ee:
                    2d:6c:93:86:42:ee:1b:99:3d:16:c0:5f:da:e8:42:
                    18:5b:e2:ca:38:00:25:d7:cb:18:6a:1c:2b:d7:56:
                    d9:e2:0e:c6:87:47:25:c1:1b:f4:4f:1b:f3:5e:fd:
                    c2:63:92:47:2b:26:94:bf:f5:b8:50:8a:36:86:6a:
                    b1:3a:39:f1:f0:81:ba:54:26:b6:31:c8:1a:de:6a:
                    1a:dd:5c:89:98:99:02:e5:60:65:b4:d9:41:68:97:
                    8f:b2:76:b1:28:56:09:d9:b1:65:f5:9d:30:6b:44:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:22:DB:EA:0F:20:BB:60:FE:C4:92:61:08:4C:8E:D8:C4:8C:BE:A0
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:13:54:00:df:58:ab:81:4e:f6:6c:6e:e6:1d:fe:f8:b5:
         7a:8a:1b:31:a8:6c:c1:de:f2:7d:32:ed:63:45:cf:d5:f0:6e:
         c1:09:3e:58:99:46:93:01:0e:9f:22:83:ad:6f:67:f0:c9:94:
         72:77:a9:1c:fe:66:6c:35:71:83:b3:43:9f:e8:be:01:04:5e:
         17:15:09:2a:56:80:e7:fe:63:36:33:21:9f:06:8a:49:cc:56:
         eb:c4:82:99:4b:6c:4a:e0:49:0b:db:99:a0:84:0b:22:0d:6b:
         3f:46:a1:ec:0d:5d:28:b6:ef:ed:94:f7:4d:51:09:21:2f:2a:
         5f:56:c1:5c:74:ed:02:6f:4f:3f:3d:a8:77:77:2c:5e:d3:75:
         8f:92:5e:3b:23:b6:e9:8c:5e:a2:cd:77:e6:52:58:ba:28:45:
         74:60:9b:5a:4a:e4:8d:de:9d:aa:92:36:e1:3c:14:de:d2:a2:
         fd:3c:d4:ea:0f:84:50:e7:3c:23:89:80:0c:71:47:8e:55:1e:
         fa:0b:ba:00:37:eb:a9:59:8d:13:a8:29:2d:1e:8c:84:e1:c9:
         92:5d:91:36:fa:98:cb:97:e0:81:af:18:02:2d:7c:9c:20:2a:
         e7:53:60:7d:23:75:9f:d6:fa:c6:eb:5c:ce:c4:ee:ee:e1:65:
         38:16:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:47:19 2024 by rpki-client on console-ams.rpki-client.org