Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
File:                     8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json)
Hash identifier:          wbmBkJfsT2q0dfYLtDG25JJ1wdtNV8pPasEru2ZtZqQ=
Subject key identifier:   30:B8:4B:02:3C:29:78:C9:4D:79:73:AC:81:58:58:1F:4E:08:23:3C
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Certificate issuer:       /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial:       05D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
Manifest number:          05D1
Signing time:             Fri 03 May 2024 00:13:30 +0000
Manifest this update:     Fri 03 May 2024 00:13:29 +0000
Manifest next update:     Fri 10 May 2024 00:13:29 +0000
Files and hashes:         1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: LBYkgxWEpnP7vhgI+rqCnfZ7mzOGKfgMAPjV1eHNYuI=)
                          2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: r+na1JdGgmwfIGGSKBAZgCKOWOoPknRelPQT0zlmH6o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
        Validity
            Not Before: May  3 00:13:29 2024 GMT
            Not After : May 10 00:13:29 2024 GMT
        Subject: CN=66342c29-8c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:18:2a:58:82:3f:18:ef:35:17:ef:f9:e3:
                    c1:e9:8c:7c:2a:3e:6b:30:60:a4:07:c2:42:43:99:
                    63:62:31:9f:94:24:48:d0:0b:11:bb:88:97:79:f5:
                    ba:3b:30:46:28:83:de:65:4b:06:4f:31:4f:63:6a:
                    e0:cb:dc:93:c4:79:aa:9f:c3:c6:8a:8f:bd:11:80:
                    2b:8a:83:f8:cf:cc:3b:93:60:c1:24:e3:8b:b6:f2:
                    0a:c2:52:c2:15:99:66:ef:3f:70:67:ba:b9:b0:4d:
                    ab:36:c6:b6:50:4a:ba:67:28:45:7d:e5:c0:ac:bf:
                    28:31:23:eb:f1:74:7e:2a:bf:5f:c5:46:bc:ab:87:
                    cf:b1:c1:bd:79:79:27:c8:9c:65:10:81:77:06:f7:
                    5f:6a:7d:cb:68:d6:84:8f:17:38:ad:6e:21:4f:d1:
                    2a:96:63:1d:34:a7:6d:d5:4d:ea:94:e1:c0:68:c7:
                    b3:60:2f:ee:1d:3e:e6:73:b4:b0:55:15:bb:db:e5:
                    5b:19:66:f2:97:ff:78:47:ed:33:5e:3b:06:a2:74:
                    f5:ae:41:d7:d5:21:26:29:7d:5f:ff:4e:54:8e:99:
                    86:d5:8e:a0:a2:e1:86:33:8f:39:e5:02:0f:91:3a:
                    28:36:56:49:5e:62:d3:2f:62:9a:0f:09:b4:4d:22:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:4B:02:3C:29:78:C9:4D:79:73:AC:81:58:58:1F:4E:08:23:3C
            X509v3 Authority Key Identifier:
                keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:92:6f:28:7a:e3:ce:d9:06:2b:06:6b:c1:da:c0:fc:04:
         ec:94:cf:73:50:3e:a1:1d:22:14:b7:8e:15:7b:bc:7a:04:8b:
         52:96:80:15:af:6a:1a:ba:52:0d:c4:1d:cb:9e:b1:07:6e:73:
         2e:54:81:ac:db:d8:72:85:5d:be:b2:61:c0:52:57:d7:26:5b:
         1b:d9:83:a0:89:8c:95:94:dc:f7:e4:67:54:ed:9a:98:b6:53:
         18:83:81:30:89:93:4b:28:71:3f:ab:a7:fd:21:02:f6:ed:92:
         ed:af:a5:a6:17:3a:3b:44:33:c9:ed:3e:57:b3:e1:71:df:90:
         32:32:29:a3:e8:64:76:40:c5:2d:cf:45:da:a7:e1:af:00:ce:
         96:f4:10:3c:76:0b:bc:b2:48:6e:2d:b4:33:e5:e7:47:7f:e3:
         b3:45:9f:36:00:46:b0:1d:47:78:9d:df:21:5b:1d:51:dd:65:
         17:d7:9a:56:ec:49:70:7e:4d:1f:c8:49:cd:88:e7:be:3f:82:
         4f:f3:c0:a6:3e:f4:cb:10:64:ed:33:90:51:2d:20:90:e5:c5:
         be:46:43:1c:ac:01:37:e5:c9:68:bb:5a:ee:a3:ab:dd:0c:57:
         d6:80:5f:22:20:49:62:5d:cd:b3:9b:9d:44:4b:c1:7b:5c:48:
         22:f4:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:29 2024 by rpki-client on console-fra.rpki-client.org