Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          s1xQqC+CQdZtWErcBZ4XiAzmkhhh/LcJ9N4YMKSv+x4=
Subject key identifier:   D7:28:77:C1:E7:E9:FA:83:84:8C:C0:A5:5E:8E:FD:1C:18:AA:FC:7F
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          06E4
Signing time:             Sat 18 May 2024 22:54:13 +0000
Manifest this update:     Sat 18 May 2024 22:54:12 +0000
Manifest next update:     Sat 25 May 2024 22:54:12 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: dLETNCiHj8VTJBU145DhI9whoEfqrSBRpQGrKU7NiOM=)
                          2: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: +lsdC+fwtnTzlTCV6YDXnmGfIk3Fb7T0/raMV7Fe0O0=)
                          3: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: 4Kla+OsLWauv1b8TBycczWn4UT7GbTEtE4YJDOcXQT0=)
                          4: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: ZWA44M8Tj2x/t3b9xE0x35yUjDn62E8Zvz6V6CnkLTQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: May 18 22:54:12 2024 GMT
            Not After : May 25 22:54:12 2024 GMT
        Subject: CN=66493194-5e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:36:a8:a3:65:2e:60:28:82:7f:6e:ba:b7:
                    6f:c2:38:a0:c1:36:61:e5:b2:4b:18:85:fb:fd:cf:
                    7c:e8:39:ec:79:81:2e:a7:fe:ac:0c:1d:27:28:8f:
                    df:67:ae:03:cd:51:43:2f:ae:9c:9a:5a:71:63:ea:
                    df:bd:36:38:62:3e:63:75:e0:5b:8e:88:d1:4a:a2:
                    ac:df:10:74:c6:fb:e9:e2:02:a0:13:6d:82:18:d2:
                    4b:9f:7a:d4:74:95:bd:86:4a:68:1d:90:58:c7:c4:
                    e9:d4:9d:8f:8c:e2:29:53:6b:a7:a6:22:86:d0:9d:
                    de:6a:79:a9:09:fd:25:97:70:7e:a9:37:cb:b1:85:
                    ee:92:56:e0:9e:33:13:8e:ee:a2:7b:61:37:97:55:
                    10:b7:4d:69:e3:b2:12:53:37:3a:b4:2f:84:73:b1:
                    35:04:00:36:a8:43:73:0a:08:4b:4e:fd:c6:b5:b8:
                    34:ff:04:ff:2a:b5:b0:f7:90:94:92:86:2d:af:82:
                    fa:04:6e:d8:9a:78:de:d9:e5:b9:c1:36:3d:c3:df:
                    3c:5f:ff:f9:51:35:e6:0e:3a:15:e6:e2:03:57:5f:
                    2b:d1:8c:16:d4:4d:84:15:bc:78:a8:4f:b4:5a:6b:
                    2f:a0:51:01:16:cb:60:0a:7c:5f:34:a5:3e:ea:97:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:28:77:C1:E7:E9:FA:83:84:8C:C0:A5:5E:8E:FD:1C:18:AA:FC:7F
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1a:35:64:db:05:5b:f4:c1:78:ec:78:49:f7:26:2b:25:ed:
         7f:e7:8e:0b:79:39:c6:db:6d:c6:4d:49:52:84:ce:f3:e9:24:
         3a:08:49:ef:06:b7:08:3a:0b:88:ea:fb:7a:6d:52:38:b1:0d:
         e2:85:51:35:ed:8d:a4:7b:85:c1:fb:18:13:28:85:6d:17:0f:
         be:81:2b:9d:0e:de:53:68:10:36:6d:61:e7:61:ac:8f:ec:ab:
         33:2c:84:23:78:92:4c:bd:69:60:c3:c9:11:09:cf:d8:20:43:
         c9:22:e1:ed:22:a1:2f:a5:57:88:19:ab:5d:b9:ae:a2:38:a1:
         0d:2c:2e:bf:04:9c:9b:19:f3:cb:a0:2a:99:da:61:b0:a7:90:
         a7:54:ee:27:a1:eb:3d:44:06:23:ec:e8:d5:b4:5e:dd:0e:c3:
         22:e8:c5:eb:a2:f0:76:0d:13:c6:23:f3:9b:3f:33:48:f8:bb:
         f6:06:f0:ef:28:0b:45:66:8f:9a:e9:5c:92:15:67:10:82:94:
         f0:06:ff:cb:f6:43:de:53:35:25:29:91:f4:a5:44:74:ac:db:
         8f:1b:c4:06:11:c9:95:3e:c6:4a:4d:96:90:6a:8b:e8:62:ce:
         c7:d8:d2:4e:77:39:b4:06:b7:e5:11:a2:7a:46:0d:28:fc:94:
         16:0e:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org