Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File:                     5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier:          2PxGNMhRHD5ETrPb6RNXZLRpkvN7VMaVWbJNEOLdm3E=
Subject key identifier:   23:DF:FD:8F:AA:1F:D9:96:87:2D:D8:F6:B0:66:63:E4:AA:F7:89:57
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer:       /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial:       0704
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number:          06F6
Signing time:             Sat 18 May 2024 22:46:46 +0000
Manifest this update:     Sat 18 May 2024 22:46:46 +0000
Manifest next update:     Sat 25 May 2024 22:46:46 +0000
Files and hashes:         1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: eVGVUByCzrfEOIsMBnkPkwBrCgYtGxU5orZSPhPw5pU=)
                          2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: 6iA/e/Lpe/xbEaV+8BTrwMc+RFOGfgzVubJG9eFsvZI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
                          rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
        Validity
            Not Before: May 18 22:46:46 2024 GMT
            Not After : May 25 22:46:46 2024 GMT
        Subject: CN=66492fd6-5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:35:84:6f:10:41:a9:14:1f:90:63:f9:d9:c7:
                    d3:8b:13:28:d7:e5:b7:b8:fe:b8:4b:58:0f:5c:29:
                    c4:59:56:6d:3d:e6:96:06:87:44:71:72:b8:e5:00:
                    d5:f4:91:ea:cd:e8:6b:a2:92:b8:0a:32:a0:eb:9f:
                    0e:0a:6d:e6:17:ab:8f:04:87:88:19:6d:22:15:da:
                    7a:66:49:6e:54:c4:45:db:93:d4:27:1c:3a:99:7a:
                    98:40:78:8d:83:ee:cc:63:5e:bf:00:07:7e:85:76:
                    d7:79:c1:a2:11:86:94:a1:6a:b5:96:b7:a3:67:50:
                    62:2e:3c:6b:e7:ad:20:6f:4a:ce:e6:e8:42:5e:71:
                    ae:49:cb:3e:79:89:91:b9:e6:ca:c6:2f:eb:91:08:
                    57:03:5d:cf:1a:47:0b:3d:c2:dc:32:90:5e:9a:1d:
                    5c:62:79:6b:4d:54:de:26:45:6d:a7:34:9d:ba:20:
                    22:b1:fa:59:a9:a3:49:dd:29:6a:be:9e:b8:51:40:
                    fb:3a:91:97:db:0e:70:cd:ce:2f:b0:98:f3:7d:d2:
                    34:71:cc:11:bc:8a:ac:d1:5c:e6:ec:1d:23:3a:a0:
                    6a:ff:bd:dd:e5:e1:05:f3:e7:65:d0:91:de:af:21:
                    06:f5:01:8f:68:2b:8c:62:bf:63:cc:34:36:85:e3:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DF:FD:8F:AA:1F:D9:96:87:2D:D8:F6:B0:66:63:E4:AA:F7:89:57
            X509v3 Authority Key Identifier:
                keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:08:34:97:f9:33:14:fc:3c:da:55:06:77:c5:cd:71:79:
         b3:60:e3:e8:07:e5:71:0e:b2:79:98:9d:8a:0a:f7:27:f0:90:
         ac:11:dd:e5:61:a6:02:23:87:19:11:ef:21:6c:81:c2:5d:43:
         b9:e5:05:d0:e7:6d:bf:20:7f:57:b9:ba:06:93:9b:1c:55:ad:
         7c:66:ee:cf:cf:60:6e:69:16:56:86:6d:ff:be:d6:23:d8:47:
         62:fd:5c:50:1f:32:66:34:83:e6:fe:fc:3c:76:cb:c9:79:46:
         14:0a:d9:52:63:72:b2:0c:00:82:0b:57:20:b8:e7:1c:ee:46:
         d7:81:1f:55:04:bf:b7:4b:a7:ca:2b:4d:b1:ac:3f:78:f2:04:
         61:e4:5c:08:3c:3a:24:50:99:bd:c4:e2:64:60:a7:1a:a6:81:
         d7:89:aa:38:2e:fd:89:72:1f:a7:cb:9c:63:7d:f5:b1:37:03:
         0e:bb:d5:35:43:41:dd:b4:dd:b7:03:f5:68:2c:18:04:5d:58:
         dd:23:73:aa:41:fe:f3:fc:a5:7f:ea:5f:c0:b3:92:91:43:49:
         0e:db:53:bf:5b:66:46:ac:9c:c0:36:d5:72:da:93:7c:3e:e9:
         bf:70:46:9d:c2:c4:76:9c:8f:fc:e0:f8:77:5b:74:ac:f7:e3:
         7f:66:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org