Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          GAmD6ayXkEHYxQMdwqnHBaRdSfynr5jF4r9ayPQvgXs=
Subject key identifier:   A2:89:9A:C6:FE:F2:97:E5:A0:CE:21:74:CD:BF:D4:B8:D2:99:87:77
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          E2
Signing time:             Sun 05 May 2024 06:01:20 +0000
Manifest this update:     Sun 05 May 2024 06:01:20 +0000
Manifest next update:     Sun 12 May 2024 06:01:20 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: TA4oxAMzqyoYmR3PZuhn0JiRT/px7TptqGoul5MFz4M=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: 4CjC+IpYnZHmTpVJklldnTib7MSkIcgAqTR1vBKcTa4=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: 0cueW7ojo3DEx4Ct8yK2jN5EFMSBqs9NSgqJpfr7JiU=)
                          4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: V9jWPnvI7fOBFI2KQePbEjNmv9YHdkUIjvmxVn4gKds=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: May  5 06:01:20 2024 GMT
            Not After : May 12 06:01:20 2024 GMT
        Subject: CN=663720b0-e6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:a9:12:8b:e1:12:b8:64:c1:62:f6:0d:ef:
                    59:73:de:16:7d:b3:33:42:14:15:1a:d9:01:84:9e:
                    17:5c:44:23:2c:1b:f3:ba:d2:ef:64:d2:d1:80:b4:
                    ee:8e:62:47:48:cb:95:8d:76:0f:70:7b:d9:51:56:
                    10:f0:db:94:95:e4:74:03:12:bf:34:28:67:c2:19:
                    fa:1e:0c:0c:b5:b4:82:f1:1a:d0:f8:a1:78:e3:80:
                    a9:83:92:55:2f:3d:43:95:3d:51:4d:e5:c5:47:ad:
                    bf:01:6b:aa:b3:82:7b:bb:ee:e6:21:61:2f:8d:07:
                    86:f4:74:60:eb:e3:12:1b:27:6a:d9:86:ce:ca:da:
                    00:c3:4d:fb:b1:ab:2f:56:2c:10:76:cb:e3:40:fc:
                    70:57:50:e3:26:4e:dd:e2:b7:96:b9:6e:e5:12:42:
                    5a:17:3b:51:5e:08:da:ad:84:70:aa:a5:53:0e:0f:
                    db:91:1b:ff:c7:12:6e:f4:2e:08:ac:0d:8c:84:c6:
                    22:69:19:53:eb:9a:93:27:21:95:b5:7f:06:ed:b1:
                    ea:97:36:8a:7d:c5:7b:9d:2d:6b:c3:1b:fb:cb:1e:
                    34:09:d7:df:de:10:61:dc:45:99:c7:9c:3c:e3:66:
                    eb:c6:63:93:e9:05:27:4c:7c:d4:38:ec:72:17:ea:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:9A:C6:FE:F2:97:E5:A0:CE:21:74:CD:BF:D4:B8:D2:99:87:77
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:02:50:7b:11:aa:c2:71:af:6c:8c:fb:cf:7c:20:5e:f4:28:
         d0:7f:c2:7b:e2:e4:94:db:aa:42:cd:c5:3e:71:a1:c8:85:d4:
         e7:bc:d2:e0:1d:d6:a1:7d:50:38:b0:46:fc:25:5c:b2:3b:15:
         0c:1b:f1:58:01:cd:2c:17:bf:0c:0b:9e:20:c1:6c:14:c1:d4:
         61:ec:73:52:3f:33:0f:86:7d:21:dd:d0:93:ba:1f:6e:ad:85:
         6a:fe:64:a7:72:7f:95:5b:6f:6f:ba:9b:c9:cf:01:11:30:35:
         f1:5a:ba:b8:e5:81:0a:f3:60:4a:31:5f:f2:85:ac:6d:a1:e3:
         f8:b6:4d:a0:ce:ac:98:bb:5c:f8:ae:af:38:d1:10:30:c5:41:
         1d:f9:01:55:20:01:d4:81:9b:5b:24:4f:af:00:98:f3:11:93:
         fc:0f:32:c7:e9:0b:b9:c2:25:46:cd:7b:1f:bc:ad:33:90:15:
         ee:e0:14:73:15:48:fe:7a:c5:98:ac:0d:a3:4b:04:ba:2a:b2:
         cd:6e:3d:4a:29:4e:6f:88:bd:9b:5a:c2:2c:d8:c6:09:a2:66:
         30:8b:10:3e:d8:6b:be:4a:4b:e2:42:97:d4:d1:7f:3e:1a:f4:
         83:42:a9:a6:d0:33:32:bf:23:29:29:f9:28:30:89:af:ef:78:
         eb:b3:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:21:13 2024 by rpki-client on console-ams.rpki-client.org