Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          sBX3Dk5YVrwVyx0LjXzpYysdPTgnMh/SqA8sHYW6XUU=
Subject key identifier:   56:E0:29:94:9E:FA:31:38:37:98:CA:0A:81:DE:60:F7:40:FB:BA:24
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          02E2
Signing time:             Wed 01 May 2024 03:39:01 +0000
Manifest this update:     Wed 01 May 2024 03:39:01 +0000
Manifest next update:     Wed 08 May 2024 03:39:01 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: TbAnQTs6Fsr5t5twNk85HuE3QIHz6ZJ2nMsQG7vgNUE=)
                          2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: rH3iNkyKCP1WOHmdWJs473P5oOLqXKXAcstIBMnJV2I=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: 6kVn7C0ZSDBwhN9FcsUW2PhQHtoF2EngOIoKIk6pXWU=)
                          4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: OkDK+Nxlt9Q2bp2OYRTVJO3DvEPzh1fiNTgAKWgasFI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: May  1 03:39:01 2024 GMT
            Not After : May  8 03:39:01 2024 GMT
        Subject: CN=6631b955-967f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:82:d1:c1:1d:3e:b3:47:a0:0a:74:bf:a7:
                    64:b8:58:a7:d8:87:b7:d9:06:16:75:e1:c2:32:83:
                    af:3e:76:0f:b8:cc:8b:3a:c9:07:18:d9:90:12:78:
                    f7:46:06:f8:e2:1d:43:0f:34:74:ca:c7:4a:57:31:
                    00:02:e6:62:4f:e2:e5:6c:83:13:3b:6b:d3:fc:b3:
                    6b:81:61:53:cd:d0:0d:56:8f:1d:22:81:73:ce:ed:
                    7e:88:51:19:53:ef:ce:a5:20:e3:f8:1d:1f:f1:61:
                    21:ae:e9:bd:d3:2a:d1:f2:07:59:9e:d2:82:24:d4:
                    9c:d2:e5:48:5c:b6:da:59:ae:2b:33:ca:7f:d9:e4:
                    21:49:75:a0:5d:78:2e:c7:20:c4:f8:ac:d9:8c:00:
                    4d:37:6f:ce:1d:d9:37:b6:15:42:f5:eb:69:98:65:
                    15:eb:58:3e:3e:88:26:20:b0:0a:d6:36:2a:2d:38:
                    19:8c:fc:60:67:7c:38:c8:86:d3:f4:31:cf:9f:49:
                    48:47:78:fe:c3:c1:44:3c:a6:99:60:e9:98:e2:7c:
                    f2:ea:99:b3:d2:bb:36:10:5a:9c:14:33:0a:b8:47:
                    37:70:e2:b7:f1:b5:a6:e3:a2:0c:67:59:7e:8e:a0:
                    9f:be:30:c5:03:24:17:55:74:d7:e6:53:9f:69:c3:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:29:94:9E:FA:31:38:37:98:CA:0A:81:DE:60:F7:40:FB:BA:24
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:a4:de:f2:cc:7e:78:27:98:e7:3f:7d:a0:54:60:6c:80:
         bc:94:02:76:1b:4e:83:4d:7b:08:49:e6:de:4c:01:d3:32:43:
         f8:8b:59:3b:37:4d:05:7f:b4:51:40:e7:20:d9:2b:43:ac:0e:
         43:41:f7:3d:80:49:8c:e0:81:b4:2f:8d:f4:27:ed:4e:f0:ec:
         ae:f3:8c:c3:df:10:00:4b:2e:63:9f:6b:73:be:af:b7:d5:55:
         43:98:e4:27:5b:e6:25:ec:66:a8:d1:56:99:57:e7:ae:59:99:
         78:f9:e8:f3:33:f6:10:f4:3e:30:90:a9:a1:f7:d5:9c:b5:22:
         56:1b:7b:49:7a:c4:eb:a4:e4:b9:6e:01:d4:f6:9d:ec:60:b1:
         52:53:88:8c:39:d3:42:3d:6c:9a:84:76:8f:22:fa:66:6a:de:
         de:5d:82:56:41:f8:f2:0c:9e:be:2d:3d:9c:8c:95:d0:e8:64:
         17:52:51:e4:6e:05:32:11:b6:43:d5:5d:ac:39:ba:34:98:d7:
         19:ef:3c:95:e3:d1:58:d4:44:b4:a1:c6:6c:fa:bb:45:23:db:
         12:cc:fd:53:1b:ec:5c:b5:fe:90:15:f7:c6:83:da:e7:f3:4f:
         1f:25:1e:cd:66:c0:aa:8c:39:77:bd:51:fc:ca:e8:24:f9:40:
         d8:d3:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:59:13 2024 by rpki-client on console-fra.rpki-client.org