Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File:                     h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier:          zha4i27zbmnMPkqtTxiBrm4FD8vyr9f4r5z0sqcGDQ4=
Subject key identifier:   44:FC:AC:9A:FD:2B:E7:C5:60:3C:1E:59:73:A1:0A:FE:DA:6D:ED:4A
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer:       /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial:       144A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number:          143B
Signing time:             Thu 02 May 2024 17:35:40 +0000
Manifest this update:     Thu 02 May 2024 17:35:39 +0000
Manifest next update:     Thu 09 May 2024 17:35:39 +0000
Files and hashes:         1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: H7Wm28vMCNhfUTPzzWO+6gsVr5lapER/jeYRJNZqWlA=)
                          2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: tzptSWrCu7leujBpAxl0r7s1OXoHlY5rMMlXgr5Raxw=)
                          3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: CYK+uI2bxtOr291BnZawHgoP/6miR+B6epnu6Vsoz0Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
                          rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
        Validity
            Not Before: May  2 17:35:39 2024 GMT
            Not After : May  9 17:35:39 2024 GMT
        Subject: CN=6633ceeb-51f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:18:29:ee:03:40:e8:c2:15:bc:3a:15:05:
                    1c:cd:18:61:15:cd:bc:40:08:09:bd:54:9b:97:a4:
                    5b:61:ed:2e:f9:85:d5:45:d7:d9:8c:9b:e4:f8:c4:
                    0f:c2:71:b2:6a:a5:ae:e4:2e:1c:ad:fc:c8:4e:91:
                    c0:af:54:16:00:0e:76:32:e8:dd:67:93:f8:3d:f6:
                    ce:1e:af:25:04:15:f5:49:cf:53:14:19:67:56:a8:
                    99:43:6c:80:f0:44:b5:ea:d7:4a:9d:4e:2d:9a:3b:
                    f9:82:cb:c1:bf:01:86:30:f2:6e:f7:c5:11:69:55:
                    6a:de:b9:ca:40:dd:57:83:d2:98:06:62:48:57:2c:
                    7b:d9:e1:0a:e1:45:91:17:c1:b7:8c:63:66:61:aa:
                    e9:07:13:76:f2:84:68:3d:6b:91:71:f7:4d:e1:71:
                    58:29:e9:57:a9:1b:12:74:25:96:9d:cf:f3:f9:da:
                    90:06:49:5e:ab:66:1a:5e:1c:81:f5:ac:62:da:de:
                    d9:e1:4d:dc:bc:61:10:95:6d:65:de:5a:6e:d2:55:
                    db:ee:2b:aa:5a:e1:52:0c:41:c8:c1:be:32:57:2d:
                    77:e8:df:44:78:88:56:15:d5:38:24:e5:43:d4:eb:
                    f8:e6:89:11:d5:cd:61:4a:da:81:d7:dd:bb:01:d6:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:AC:9A:FD:2B:E7:C5:60:3C:1E:59:73:A1:0A:FE:DA:6D:ED:4A
            X509v3 Authority Key Identifier:
                keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:e0:ad:1e:0e:f2:ba:7c:07:97:9b:5c:15:76:7e:bc:63:
         d7:e0:a0:91:49:f9:6c:72:a7:f1:74:71:b8:2e:dd:2a:e4:1d:
         b4:1b:e1:88:0a:52:f3:44:62:85:8c:87:2b:0d:f2:71:40:58:
         29:d5:5d:9f:78:83:77:c0:0e:38:b5:ce:4e:54:20:be:cf:9b:
         67:e7:9a:bf:0f:2d:4c:4f:4a:86:cc:df:49:52:60:6a:ff:c3:
         5c:93:31:df:d4:14:bb:8a:5c:e9:05:94:e4:fd:6b:6f:17:e7:
         59:47:16:12:48:68:06:67:f3:67:4d:f0:75:56:10:ff:0c:c6:
         c8:7f:de:9f:15:ab:99:5f:87:18:36:33:90:8e:73:7b:58:a1:
         fd:31:9f:30:06:be:78:80:45:47:b9:4a:7c:32:84:dd:24:37:
         84:e9:70:66:ee:07:d4:e2:67:62:33:04:0a:41:fe:1a:97:9d:
         69:2a:07:c8:27:19:27:93:68:43:ff:aa:f3:ca:b9:87:fe:bb:
         1e:bb:36:f5:20:ee:c0:3e:4f:9c:f3:1c:6d:c7:33:64:d4:64:
         19:76:2f:c5:e6:e9:fc:0b:12:ee:cc:6b:8d:44:fe:02:9d:27:
         89:a5:0b:b6:f2:a0:a1:4c:cb:c6:9a:a1:77:73:92:03:f1:2b:
         5e:fe:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:39 2024 by rpki-client on console-fra.rpki-client.org