Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File:                     aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier:          4dfUnSuKZ0DVBZZG2DshRn8FFm5tlnF0uiUghBI1SBs=
Subject key identifier:   D0:4D:84:26:74:DB:C6:B3:9E:6D:2E:9D:19:57:2A:A3:1B:C6:BB:0A
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer:       /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number:          058F
Signing time:             Wed 01 May 2024 00:49:28 +0000
Manifest this update:     Wed 01 May 2024 00:49:27 +0000
Manifest next update:     Wed 08 May 2024 00:49:27 +0000
Files and hashes:         1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: olivaVJ8H3tlwqAaG31Q8yOJrzRgJR6BDyyiVnnj4pQ=)
                          2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: uirqfM+RGPPZteJ1j7tgrnzrbjuEEz8zx/KNvhvRAFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
                          rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 00:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
        Validity
            Not Before: May  1 00:49:27 2024 GMT
            Not After : May  8 00:49:27 2024 GMT
        Subject: CN=66319197-ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:a1:23:93:39:82:6f:3a:01:ef:9a:16:08:
                    8d:10:f2:ff:b2:d0:02:5b:d8:5c:8f:6d:10:46:80:
                    c7:2b:2c:d6:af:67:64:75:d0:b9:da:80:d6:16:0c:
                    ee:37:a8:97:2b:72:67:f2:76:22:ae:ed:b6:88:13:
                    49:83:d5:c2:82:71:76:b0:e9:34:c7:a7:c9:82:e3:
                    64:93:ea:3b:d9:30:6c:a8:1d:c6:11:fb:b0:44:2b:
                    7c:0f:71:9e:e7:ab:73:98:a0:6e:a2:2e:17:67:e9:
                    71:93:ea:14:4f:bd:22:ed:be:8f:49:22:8a:4f:3e:
                    9d:4d:84:1d:30:ac:86:e8:ce:a7:92:0a:3b:df:a5:
                    4b:89:c6:18:90:b5:7e:13:20:20:a7:97:42:e7:50:
                    7b:9d:9c:9b:8f:cd:73:ba:4d:1e:c4:e2:1c:5d:5b:
                    4d:e8:86:74:40:e6:8e:34:e3:4c:3f:e6:f8:69:f5:
                    84:b1:a7:22:ba:ed:f1:b8:ab:7e:81:0e:03:73:1b:
                    19:8b:ee:4f:fd:f4:3b:b9:f5:01:d7:eb:e5:04:ae:
                    ed:51:b9:b4:de:da:f7:f9:d8:00:ca:af:d6:60:97:
                    5d:9c:37:c7:d9:4a:54:75:58:af:8a:8f:3f:1d:bb:
                    5f:02:44:ef:01:e1:64:c9:2d:60:69:e4:a7:36:3c:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4D:84:26:74:DB:C6:B3:9E:6D:2E:9D:19:57:2A:A3:1B:C6:BB:0A
            X509v3 Authority Key Identifier:
                keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:61:23:37:cb:91:a6:d0:dc:b1:88:4c:26:2c:76:a0:df:
         bf:53:d4:9e:8b:55:37:1a:72:e4:ca:4e:fb:04:1a:4e:a2:db:
         92:c4:d9:14:79:53:62:1d:94:95:c2:12:66:08:ac:c0:85:08:
         3e:67:be:19:9c:f9:d5:82:ac:ab:57:cc:e9:57:f7:cb:14:fc:
         f8:f3:e4:cf:b2:99:a2:c4:70:21:aa:7c:6c:84:2a:70:9e:dd:
         ba:0a:23:66:8d:37:e8:12:fc:99:bb:be:4d:ac:45:1b:8e:a6:
         0c:59:a6:9a:0a:a7:54:97:41:94:53:a7:a6:01:64:36:f5:3b:
         56:97:fa:65:da:56:4c:72:4f:f1:79:28:20:99:28:51:1d:ce:
         60:f2:7b:85:6f:d7:5b:b9:dd:c9:46:39:25:98:a0:4c:9f:47:
         e4:3e:f3:a7:c0:39:c8:88:1c:35:e8:e0:67:64:09:8d:80:31:
         68:f6:66:c5:d3:b9:cf:af:bb:28:b7:e0:24:36:de:03:c8:2e:
         d2:3c:54:04:93:a1:ee:9d:ff:d8:51:14:76:8c:27:60:36:5d:
         fd:96:d9:30:b7:72:c6:bb:6d:2b:c2:3e:12:81:db:73:2b:6a:
         d7:b0:32:7d:d0:b0:89:87:ad:d0:5f:0a:2a:f7:a8:01:80:21:
         92:1e:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:38:32 2024 by rpki-client on console-ams.rpki-client.org