Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File:                     ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier:          PGa0DFiods3HpEci9Dw0J9wuxfANqRdWbzizUwVhq+0=
Subject key identifier:   CE:74:26:A4:DB:BE:F5:C2:F9:72:28:8C:23:8B:AC:DF:03:12:94:85
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       0336
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number:          0330
Signing time:             Fri 03 May 2024 03:06:54 +0000
Manifest this update:     Fri 03 May 2024 03:06:53 +0000
Manifest next update:     Fri 10 May 2024 03:06:53 +0000
Files and hashes:         1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: /KfVnYZ21ncq4UkgWum6x/HCBx6W3YqJhALTf2C4uuk=)
                          2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: MrNZ6F/Tz/6S7L1UD5UnXWJFM1u5sMiA1hmNIcsx/UM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: May  3 03:06:53 2024 GMT
            Not After : May 10 03:06:53 2024 GMT
        Subject: CN=663454ce-63c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:9b:86:80:12:0b:e0:9f:b0:b4:1c:f1:f4:
                    59:8d:9e:e6:5b:12:1b:47:ed:44:7a:af:71:fc:f5:
                    f3:4b:1b:5e:9b:f1:81:3b:f0:2f:90:3d:86:3d:04:
                    1f:76:80:dd:6f:67:ad:c0:ca:ab:91:3f:30:31:65:
                    97:a1:75:5d:33:52:92:0f:e7:90:b8:fe:f3:08:b2:
                    4f:37:05:96:73:a8:d9:89:95:eb:fb:98:17:dc:7d:
                    c2:d5:1f:16:f8:3e:49:1d:9a:71:66:0f:3f:13:67:
                    e7:ea:23:ef:58:ce:e9:89:e1:c5:56:e1:57:4d:fd:
                    d1:02:d9:98:5c:9a:4e:e8:d9:ce:d2:1b:ff:8b:65:
                    73:23:55:ce:7e:34:aa:33:57:f1:6b:88:2b:e1:ed:
                    a0:32:ec:45:7c:4b:f8:76:12:9c:70:29:85:30:39:
                    ed:c3:66:c3:bb:46:c0:da:32:55:95:08:0a:34:84:
                    4f:86:17:01:c5:35:d2:d8:8d:a4:48:84:6f:59:b8:
                    75:2e:08:20:ac:91:f4:c1:aa:26:f6:fd:9b:09:16:
                    ea:59:07:55:5a:ad:36:7d:c1:8f:82:89:e1:95:c7:
                    a4:ce:e5:d2:c1:b1:40:48:9c:d6:a1:54:c7:b7:b4:
                    66:be:06:e8:59:35:d7:cd:2b:17:ff:5a:89:6a:a5:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:26:A4:DB:BE:F5:C2:F9:72:28:8C:23:8B:AC:DF:03:12:94:85
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:29:93:4f:51:f4:44:6f:c2:e2:7e:5e:1f:09:50:7b:07:9c:
         d2:ea:cb:73:16:a3:af:ec:ef:b6:6c:8e:6b:a8:bd:19:19:72:
         ee:3c:22:48:bb:4e:52:08:31:23:9b:db:ee:87:75:1d:1f:1e:
         ba:61:76:0e:23:ae:d2:14:34:ad:3d:3f:6e:68:c6:0d:e1:a9:
         4d:17:e2:1f:2b:0c:30:32:fe:49:e5:b2:cc:59:dd:22:f7:94:
         e8:06:09:02:07:fb:bd:45:20:71:9e:a7:c1:dd:cc:80:14:19:
         c6:62:88:dc:ae:4b:5e:a1:fb:b0:66:8e:92:54:ee:26:fb:d5:
         a8:83:84:7a:e7:b7:78:92:85:a4:ed:f7:aa:01:48:70:b5:58:
         c9:ab:41:ba:35:94:75:66:fb:b0:8e:0a:d0:63:3a:1d:01:2c:
         af:1c:0b:59:8c:88:61:79:f6:cf:38:b8:14:25:e6:1b:93:d7:
         92:22:03:94:d6:99:04:f3:ab:20:7f:1a:c9:1e:dd:a3:83:b4:
         6d:8e:d4:41:1d:b1:6d:f8:c8:5b:5d:94:52:35:6e:b8:4b:24:
         4b:96:7d:03:5d:2d:01:dd:79:56:b7:70:2d:ec:71:b3:b9:b3:
         68:05:53:8c:bd:57:79:10:5a:5c:f3:b2:ee:16:c5:b8:0e:b1:
         87:16:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org