Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          d6u7DdYQuZ5aIJUswxcjk01kAYL4f/25rnFNxxUq5mM=
Subject key identifier:   11:C6:DD:A6:3E:84:E1:B4:0E:34:20:05:EA:43:84:90:BC:4A:E6:75
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          0807
Signing time:             Tue 30 Apr 2024 22:12:17 +0000
Manifest this update:     Tue 30 Apr 2024 22:12:16 +0000
Manifest next update:     Tue 07 May 2024 22:12:16 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: nw1TAGqJGPWPrCgGaJgcE0RIwlXgPziipaXpHryjbyY=)
                          2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: jroL0ZvUDyTize3CkMVvGz2K6eDlEEl11xRsB3XJVSM=)
                          3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: V9elMt4mtakfJ0YTHY94DFYKDGmWTd90QDlgS5t/Q2o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Apr 30 22:12:16 2024 GMT
            Not After : May  7 22:12:16 2024 GMT
        Subject: CN=66316cc0-927f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:3e:29:98:59:f6:d6:24:d1:26:f3:42:d8:
                    e6:2c:16:e0:39:8c:84:a5:65:4d:52:6c:07:0e:a2:
                    b2:cd:61:7a:bc:00:14:e7:39:52:d4:e7:57:64:c0:
                    cd:7a:91:34:8c:63:26:7c:bf:6f:b4:36:f5:f9:48:
                    63:8c:ea:e5:5d:2d:b0:0d:87:e8:e9:88:36:04:c7:
                    08:c5:5e:7d:07:df:7c:68:a0:66:84:a8:6a:1e:3a:
                    14:55:34:f9:ee:e3:08:21:3a:16:8b:89:fa:90:06:
                    c3:0e:23:3b:9d:fa:69:99:8f:c6:51:00:2a:20:d3:
                    16:6c:dc:ff:70:22:37:36:9e:3e:cf:c1:ed:ba:a9:
                    1a:b7:84:83:08:b4:c9:b2:c7:69:1d:dd:6a:41:8b:
                    36:48:fc:7e:80:85:4d:76:6b:6c:4a:cb:aa:04:35:
                    53:27:10:43:c2:1a:9a:32:4e:b9:a0:6e:23:33:d3:
                    a2:c4:52:e0:ba:ca:19:67:f0:ef:40:d1:f3:d9:68:
                    eb:23:13:fd:98:ec:f3:37:9c:f4:11:16:6c:1b:df:
                    37:9a:48:4b:38:71:33:5b:6e:a2:69:02:d1:ed:6f:
                    5c:0a:38:40:11:7e:9d:c2:cb:cb:cf:38:c6:79:e2:
                    0a:aa:72:d4:44:6c:15:94:39:f4:9d:0b:90:a7:f5:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:DD:A6:3E:84:E1:B4:0E:34:20:05:EA:43:84:90:BC:4A:E6:75
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:fd:91:ff:63:bf:0d:01:75:66:83:47:78:33:28:8c:a9:
         d1:f8:ba:97:ba:e9:5c:68:9e:48:3b:b8:83:9c:71:7b:c4:e7:
         78:89:5c:1e:d0:f0:39:6f:6b:f6:5a:5b:03:62:1a:f5:ee:bb:
         1a:7c:3d:af:19:41:39:15:d8:35:28:26:8a:00:78:8c:35:04:
         e1:fb:3b:f0:ef:3e:52:aa:ab:26:fb:70:4f:b3:b8:7f:b6:1a:
         84:42:53:17:27:6e:a9:7e:46:fa:98:02:04:fb:63:6e:98:0e:
         b5:65:9e:76:14:e4:94:f9:6d:84:a2:d4:3c:7c:ba:45:80:c7:
         b9:41:a0:27:eb:0d:25:ec:ed:c3:cc:7b:d5:7b:3f:b0:ca:c5:
         2b:83:f7:4d:a4:eb:91:2d:9f:03:49:89:e1:65:e7:87:04:29:
         f0:da:4f:ef:76:92:28:b9:56:16:94:f0:2c:81:d7:75:91:f2:
         96:6d:c3:5a:2a:9a:84:65:68:55:b2:e3:20:d2:8d:1b:ab:a9:
         b5:65:b5:c4:eb:70:da:1b:e3:ce:fe:a9:2b:ec:d1:7f:48:93:
         f6:5f:f6:ce:86:03:ca:87:77:b8:16:94:96:a3:ee:2f:ce:4d:
         1f:0b:92:77:39:c4:06:26:fa:4d:22:d8:d0:ee:4b:df:ef:36:
         9c:e9:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org