Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          pDX809hh1tYbNdnVczvQVc0u7+r/C8hS7fm6p9gA2ZI=
Subject key identifier:   C4:BE:81:1B:9B:71:90:26:25:71:DA:0D:92:36:7C:63:69:5E:57:E8
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       0FAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          0FA4
Signing time:             Sat 18 May 2024 18:06:58 +0000
Manifest this update:     Sat 18 May 2024 18:06:57 +0000
Manifest next update:     Sat 25 May 2024 18:06:57 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: WNrGsW8azmJQp/SEyc8IVmdZtzVzFhRINGbsmGCQHhc=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: 2kaim3mD8HYohLBDvSxKsXOWx/usR2inmWeqHFa4To4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4013 (0xfad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: May 18 18:06:57 2024 GMT
            Not After : May 25 18:06:57 2024 GMT
        Subject: CN=6648ee42-a071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:c2:50:3c:02:47:69:ef:4c:f2:6f:de:53:
                    b3:4e:28:74:7c:3c:30:4c:71:3b:cd:b7:2f:d7:e6:
                    fd:9b:a1:66:98:53:76:d0:21:a7:5a:d9:39:72:d7:
                    64:37:31:7e:c1:2a:7c:de:f2:82:f2:55:3b:ea:88:
                    a6:7a:61:2b:48:00:71:9d:26:3c:ff:f0:3f:6b:c1:
                    b8:dd:8d:b8:a1:38:45:68:48:06:de:c0:e3:bf:ca:
                    5e:73:b0:bc:19:5f:c7:bc:ab:ac:7d:24:35:84:0f:
                    7f:2c:09:99:d3:97:10:1f:3d:a1:21:e0:6c:10:a9:
                    c4:81:d2:e5:34:33:76:97:5c:fa:9a:d5:31:42:e5:
                    fb:9f:0d:f1:12:b9:48:ff:54:2a:a2:ac:b2:2a:d2:
                    c0:d7:01:6a:57:59:12:8c:e9:6c:f5:36:6f:42:d9:
                    3f:61:16:cc:78:31:ca:42:07:ac:fb:c6:3e:51:f1:
                    ae:1d:eb:aa:17:33:74:6c:3f:79:47:21:d3:85:49:
                    e2:cc:01:4b:56:2a:d4:a0:aa:42:cc:1a:da:24:91:
                    dc:4d:41:e1:e1:9d:2a:e3:dd:e0:16:c5:84:a3:34:
                    7e:26:9f:36:96:e7:8d:4f:9b:fd:77:49:63:0c:c3:
                    3e:b2:d9:76:7d:18:77:7c:cc:0b:c6:78:61:19:d3:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:81:1B:9B:71:90:26:25:71:DA:0D:92:36:7C:63:69:5E:57:E8
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:39:d1:3a:65:8c:33:c6:db:fb:26:e6:af:69:b6:25:8c:
         ea:ca:6f:74:10:82:2d:08:b6:a0:79:45:3d:d5:59:19:59:60:
         51:29:52:ed:b5:05:29:9a:bd:3f:43:c9:35:bd:af:0b:ae:2d:
         3d:14:94:d6:6a:1f:ae:bd:cd:c9:01:14:09:a0:80:88:98:00:
         83:98:7a:b9:d5:ce:6d:15:33:e1:64:94:52:4a:83:37:1d:e8:
         45:9b:3a:79:e0:35:ac:a5:a7:61:09:24:a1:90:c6:b3:2c:92:
         6c:31:4e:70:ae:ce:f0:16:14:9e:7f:17:d2:c6:4b:03:be:e2:
         f3:78:6f:4c:b0:b6:1e:f5:32:2f:e5:7d:9a:a0:77:ba:72:56:
         00:73:d8:88:0f:24:29:b0:ee:94:5b:fa:30:08:e3:59:e3:f6:
         71:6e:0f:52:9a:c9:81:90:f6:66:ba:f6:e4:11:1c:20:64:5e:
         07:9c:df:a1:59:ba:90:d4:bf:43:32:00:24:31:99:dc:fb:fb:
         7d:80:18:66:8b:0c:83:73:5c:91:07:50:35:49:d7:11:eb:23:
         e7:d2:35:4a:72:36:97:76:ed:71:7b:ec:4d:e6:c6:26:de:5b:
         30:02:8d:f5:14:f4:5f:09:28:2f:4d:6d:80:d6:36:89:ee:1d:
         3c:32:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org