Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier:          VM/YTOoovym5iWUI3pGX9cAfymT9vgmw5P81bydoV1Q=
Subject key identifier:   E9:01:AD:D7:87:7C:E6:24:DC:E1:E0:C5:73:16:80:E2:9C:11:4F:6B
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer:       /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number:          AC
Signing time:             Fri 31 May 2024 07:34:49 +0000
Manifest this update:     Fri 31 May 2024 07:34:49 +0000
Manifest next update:     Fri 07 Jun 2024 07:34:49 +0000
Files and hashes:         1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: J3GTq5j5vxN1lHbUB+rwd82Cn6T4dMbPYSSntJIz4Qk=)
                          2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: qvG7CVRIN4QQT7ed1ylRnbGGdW7H1vxJ8GI3CosjFKU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
                          rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Validity
            Not Before: May 31 07:34:49 2024 GMT
            Not After : Jun  7 07:34:49 2024 GMT
        Subject: CN=66597d99-b9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:83:77:7d:51:61:41:41:5d:61:5f:9b:57:
                    c1:00:d4:51:a3:bb:ae:0d:d4:81:94:66:6e:52:92:
                    fd:c5:35:54:12:3c:95:30:24:37:66:95:51:c5:32:
                    05:07:bc:8b:83:1d:20:2a:2d:cd:1a:3d:58:a1:ac:
                    4d:5e:76:1a:18:5d:a7:6d:ef:bc:53:be:8e:47:1d:
                    5d:71:dc:01:1a:71:be:9c:f7:0e:bd:8c:48:e3:19:
                    cb:4e:f8:27:51:57:7e:74:da:2d:d2:16:cc:7b:4f:
                    83:f6:8a:82:26:82:cb:25:7f:88:75:83:54:3b:11:
                    4f:a0:ff:8e:9e:a0:2a:29:86:1b:5b:e1:04:f8:d8:
                    73:fa:24:a7:b8:0f:5a:20:25:48:d6:4a:2e:fe:09:
                    1d:20:97:24:22:56:7d:52:e0:23:50:a8:13:38:a3:
                    84:8a:8c:be:67:d3:7a:1d:bb:e6:4f:00:eb:99:f0:
                    54:ba:9e:33:9f:c1:93:4a:4c:79:a4:21:1d:a4:b0:
                    b4:09:0f:91:a2:fc:e8:bf:39:4a:7f:7e:df:ec:a1:
                    39:6a:46:0d:84:d8:bc:83:60:24:ce:a8:45:23:5b:
                    36:d0:07:b7:13:34:e4:e5:a2:fc:ef:55:be:e8:41:
                    74:8c:96:19:d7:a9:32:5e:73:2f:bb:d8:86:81:1f:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:AD:D7:87:7C:E6:24:DC:E1:E0:C5:73:16:80:E2:9C:11:4F:6B
            X509v3 Authority Key Identifier:
                keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:b3:50:06:e5:6d:15:40:19:79:e8:e1:f0:4c:7a:14:82:
         2b:0c:43:5b:e7:8a:43:b6:95:ab:17:36:32:55:ca:fa:e9:38:
         0b:0a:f8:2e:17:bf:ba:d8:d2:6a:5a:bf:e8:27:2d:27:b6:0b:
         61:55:33:09:96:67:6a:7f:ae:92:3b:e6:7f:e3:ac:fa:0f:8c:
         ec:52:0a:1e:86:6b:3a:cb:9f:b0:74:96:d1:83:bf:66:d7:40:
         86:3d:93:ed:2b:b1:3a:3a:64:84:37:93:61:fd:e3:e0:4f:a8:
         c3:71:6a:20:b9:23:46:a4:c9:53:e6:c5:58:1a:f1:9f:dd:6d:
         90:97:4d:66:6b:e2:1f:3a:a8:6d:99:11:2d:07:83:bc:8f:33:
         7c:5b:eb:4c:75:60:24:19:67:e6:4f:6e:1b:24:76:03:20:95:
         f6:39:0d:13:83:5e:0e:25:d7:4f:ed:67:f5:8e:1d:87:d1:77:
         9a:e2:dd:b0:4a:8c:58:c4:4f:40:12:92:73:ba:df:f5:10:1d:
         98:6c:79:8f:32:d7:dc:47:c3:48:ca:8f:3c:3e:f5:8a:3d:1b:
         00:e6:4b:f2:8d:1a:75:67:3b:c9:4d:a1:13:58:62:7d:84:3d:
         3a:30:8c:28:f3:44:db:0a:53:6f:ab:e2:90:76:51:59:9a:1c:
         15:d4:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 08:38:28 2024 by rpki-client on console-fra.rpki-client.org