Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File:                     p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier:          DWUMlw/uZnCyFGydtBuCuhf6lIDSJNGYIrGhAPe0vnY=
Subject key identifier:   00:5C:07:F1:88:EC:B2:4D:45:DD:7A:FF:4B:CD:88:66:86:06:0F:26
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer:       /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial:       0B66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number:          0B5E
Signing time:             Sat 18 May 2024 19:38:08 +0000
Manifest this update:     Sat 18 May 2024 19:38:08 +0000
Manifest next update:     Sat 25 May 2024 19:38:08 +0000
Files and hashes:         1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: XxMgiHcaC5TyGqXFQJh7c1pC+j/Tc5/SjFRXlZ6xbmk=)
                          2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: ANLmMk6O9eHYmoUSmiPr17fgz6KI2ZhhF4RXqYVEKY4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
                          rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
        Validity
            Not Before: May 18 19:38:08 2024 GMT
            Not After : May 25 19:38:08 2024 GMT
        Subject: CN=664903a0-449c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:69:33:a2:17:3a:8c:e0:9e:be:12:dc:dd:
                    c2:49:e6:d3:23:d9:60:0f:7d:ba:1e:98:77:fe:fb:
                    66:cb:b7:11:8d:3f:45:89:8c:fe:39:b4:5d:9f:65:
                    b2:64:4c:e1:72:88:58:24:ba:48:32:c4:95:ce:9a:
                    c3:b2:56:1c:16:45:69:c7:48:bf:3b:b8:b9:1b:0e:
                    b5:5f:68:21:01:33:65:6d:fd:e2:ee:a7:f9:53:b6:
                    b0:26:b6:fa:92:da:bf:f4:c9:b5:21:96:f4:00:c2:
                    f8:ca:e6:e0:a6:b8:70:70:09:84:fd:7a:b8:90:21:
                    e7:98:d9:72:04:b1:5c:e8:eb:0d:17:de:a7:16:68:
                    fb:ff:5f:5b:48:45:8c:b2:97:a6:f2:f4:30:b7:51:
                    c7:74:af:6b:48:65:9e:b7:fb:f1:85:72:48:36:0e:
                    fe:b0:8c:17:cc:d2:e3:7d:7a:46:6d:a0:b3:13:9f:
                    71:46:67:4a:b9:da:20:07:57:9e:5d:2d:5d:c6:18:
                    10:e6:e3:fd:05:5b:8f:fa:de:7f:aa:be:a8:d7:b8:
                    f2:93:72:6c:57:c6:5a:25:30:4f:ff:c1:bf:5f:28:
                    16:8d:66:e1:ac:68:8f:87:7d:30:9b:83:23:21:41:
                    da:1d:34:e5:bf:c3:b5:cb:d5:7e:af:5b:2c:0c:ca:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5C:07:F1:88:EC:B2:4D:45:DD:7A:FF:4B:CD:88:66:86:06:0F:26
            X509v3 Authority Key Identifier:
                keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:10:28:69:79:f5:1c:e5:6a:d4:0d:5c:54:e7:e8:d0:14:7f:
         36:1a:15:39:92:64:18:e9:ff:dd:57:a3:9c:b1:be:1a:34:d0:
         b0:74:fd:99:52:6b:ee:12:06:4d:29:d7:7f:d7:f5:d0:ba:a2:
         a5:2f:8f:4a:dc:6e:dd:fb:a8:02:5c:87:c3:bb:67:47:db:90:
         ef:3d:7c:b5:8e:2d:0f:9f:ca:86:64:fd:2a:30:0b:fb:79:85:
         cf:22:48:e5:a0:9e:7c:e0:b8:fa:85:ec:c1:77:11:33:f4:89:
         c0:9a:40:c3:87:4e:a1:61:b9:37:ef:ac:10:4f:89:1b:6f:9f:
         a6:7b:5e:68:7a:63:7a:f9:0e:6c:32:45:29:1b:90:ba:31:37:
         d7:3b:a7:f0:b0:f3:91:01:2d:12:46:98:18:61:9f:08:16:e6:
         9c:a4:f9:2c:43:76:09:e7:53:ef:47:60:c7:d5:47:c5:3d:95:
         f0:fb:02:55:e1:a4:e6:8e:85:00:3a:cf:e3:c9:a1:84:cb:79:
         94:ea:a8:cd:b2:45:fb:2a:db:8b:b2:bb:51:04:78:ee:62:50:
         3b:b7:24:1d:07:52:f1:6d:54:50:c7:ea:29:09:33:d4:f5:ee:
         85:33:5f:a8:ec:74:f6:ae:54:47:ea:62:ae:06:50:12:a7:0f:
         bb:12:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org