Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          UiSeYN1IDvWzMtnBPEMv5rKqXQWwVePYrLn0hGVJSpI=
Subject key identifier:   47:D6:DD:F0:88:12:D1:0D:00:28:39:14:77:D4:D1:F8:41:B8:11:D4
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       080D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          07F8
Signing time:             Mon 06 May 2024 22:01:47 +0000
Manifest this update:     Mon 06 May 2024 22:01:47 +0000
Manifest next update:     Mon 13 May 2024 22:01:47 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: DlzBu6u7w+kU5NMmiEwBPbNI7r8uWnl1eq1ErVlmFXg=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: 5F8rR17nEDED9cxz4pheVEVA2NLUbqwCGvDagVFVtBM=)
                          3: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: vWd1Ef03nlFvEkscyzj36Ft3LHGo97iEmSXDLzhC4uo=)
                          4: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: u/bpOsj/SEMCkKp/Pl9juUFeBveejAYmEF5FeIu8ePU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: May  6 22:01:47 2024 GMT
            Not After : May 13 22:01:47 2024 GMT
        Subject: CN=6639534b-5a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:a7:a3:6e:06:bb:36:9d:75:1a:29:f5:2d:
                    e1:2b:b2:a7:41:34:a7:a7:4d:5d:eb:c6:2c:16:0b:
                    2b:5d:a1:34:55:a1:0a:4b:d0:b0:54:14:a7:16:33:
                    a9:cc:2f:9a:95:5b:17:20:3b:c7:22:44:56:1f:39:
                    b2:09:08:18:5a:ac:48:df:fb:53:f7:0d:84:4f:27:
                    a1:94:b6:ea:be:23:2f:f2:2f:27:ab:87:4f:80:19:
                    69:7f:3c:c2:0f:20:29:d6:06:bd:b0:bb:ee:91:e5:
                    f2:e6:b9:e6:dc:9c:44:7d:4d:e1:62:64:e2:15:88:
                    5d:54:05:d6:23:e8:9d:38:05:79:ca:b6:76:5a:37:
                    5a:f1:1b:88:f8:7e:71:62:ea:d4:23:d2:71:c9:5d:
                    1e:87:eb:53:cb:1d:10:40:be:6a:3c:3d:aa:4e:c8:
                    22:13:45:eb:da:9d:3e:3d:c1:11:d6:cb:fa:73:98:
                    a0:0f:06:91:8a:c3:c4:9c:79:d7:30:9f:db:fc:3c:
                    4a:a2:e8:5c:db:ca:b3:d3:3e:2f:6e:aa:e6:82:69:
                    af:df:f8:c6:77:a0:3c:88:1e:27:9e:b2:44:d0:d0:
                    c3:25:28:19:a0:3d:59:9a:50:b3:b2:53:aa:65:e4:
                    f4:3f:08:ca:51:18:da:6f:e9:61:06:7b:4b:b2:77:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D6:DD:F0:88:12:D1:0D:00:28:39:14:77:D4:D1:F8:41:B8:11:D4
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:ca:9b:7c:da:36:4b:fa:d9:65:67:f7:bc:9f:a8:29:5b:
         2b:0a:f0:76:9b:1b:14:b2:a8:cb:c7:3b:1b:67:6f:d5:4c:2b:
         f1:d3:aa:93:93:b4:d7:ba:71:0d:62:83:73:53:87:11:b3:6f:
         c4:82:4a:99:1d:c1:75:57:45:c1:5b:22:9c:72:26:5e:96:15:
         15:78:11:b3:bc:26:f2:55:53:13:75:b0:1c:ec:69:ae:2b:38:
         9d:70:63:ce:02:2f:05:78:94:b4:bc:5e:a3:98:c7:e3:f5:bb:
         99:53:bb:b3:f5:ce:88:6d:5d:0d:8d:ec:39:ee:92:f7:fc:48:
         8f:a5:f1:0b:4e:55:0d:d6:81:23:4d:22:52:4b:b4:85:90:34:
         14:46:8e:b7:20:82:dc:4f:b4:6a:63:64:97:24:bb:53:6d:f2:
         98:86:ff:57:9d:6b:c5:f5:70:64:63:e3:7d:b3:bb:d0:fe:e3:
         9c:25:ee:4e:af:d0:a6:28:d9:7f:36:43:72:d5:df:85:4d:92:
         6b:d6:76:3b:74:28:e3:3c:54:54:cb:85:fb:92:82:bc:6f:a2:
         99:c8:02:79:a8:43:b1:80:31:ac:44:00:39:aa:94:d1:7d:0f:
         34:5e:0f:19:ff:37:be:a8:43:cf:ef:53:4d:43:19:9e:da:a4:
         6b:62:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:41:04 2024 by rpki-client on console-ams.rpki-client.org