Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          IAYhtT52D9em6nLtA7gg6Ccbm4FRpjTlTGdsG8XR8b0=
Subject key identifier:   4F:64:86:6F:43:7A:12:B9:6C:3D:A8:34:D8:46:CB:F5:92:D9:F9:27
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          0596
Signing time:             Sun 19 May 2024 00:25:30 +0000
Manifest this update:     Sun 19 May 2024 00:25:29 +0000
Manifest next update:     Sun 26 May 2024 00:25:29 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: /yJKgLXnlGG+Az9sDSYoUaoTlXxQ5BcSkzBrGs5hu6w=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: ygu/teShuRAARLfnHY0MVr7IThbUwZUoVSpw0+Yx1As=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
                          rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: May 19 00:25:29 2024 GMT
            Not After : May 26 00:25:29 2024 GMT
        Subject: CN=664946f9-57c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:34:94:ca:3a:b5:30:55:46:df:08:36:0b:
                    8a:f7:c7:ee:d2:e9:5d:a7:ec:f8:e9:0d:d5:bb:a8:
                    96:59:92:98:65:22:0c:bd:3b:af:79:32:95:49:90:
                    8c:e5:2a:9d:09:e7:70:2c:23:52:61:dc:a6:cf:c5:
                    03:07:ed:69:68:3a:0f:53:bd:50:51:9c:b3:e3:43:
                    03:6e:6b:59:70:c5:8a:21:5b:cb:99:a2:10:a7:5b:
                    85:90:2a:ea:b2:e5:43:b5:1a:9e:cd:34:cc:45:5d:
                    e8:1d:87:af:56:c6:db:e0:45:c1:b8:1c:07:f5:78:
                    cb:eb:9f:d2:73:5f:fe:88:a2:45:67:0d:2e:ef:1b:
                    f0:58:3e:98:63:89:a1:ec:8e:c5:8c:10:90:99:e0:
                    87:a0:ae:7b:f5:1a:0d:1c:2c:48:da:3e:44:2c:2d:
                    61:26:3d:de:38:26:30:28:9d:71:df:c0:7b:8a:7a:
                    07:29:c8:a0:a2:ff:07:93:29:b5:f7:0e:f3:67:00:
                    d1:f8:fc:06:25:d7:da:23:0f:46:64:0e:c5:e6:84:
                    fb:ed:5d:68:90:3a:42:7e:77:59:48:29:38:e6:a5:
                    7d:3f:f3:1d:80:28:a5:88:ed:53:25:13:93:1a:a2:
                    16:e8:26:1d:65:12:b0:d9:f6:97:57:d2:ed:15:2f:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:86:6F:43:7A:12:B9:6C:3D:A8:34:D8:46:CB:F5:92:D9:F9:27
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:33:6b:a7:47:bf:d0:31:6c:f7:49:0b:30:80:9c:06:cd:7d:
         77:a5:0c:4b:8f:b5:84:79:13:cc:5a:5e:ec:e4:ac:de:53:40:
         da:76:0a:ed:8d:fb:78:68:09:95:37:bb:d2:aa:11:ad:88:4d:
         24:85:86:85:42:9f:e5:ca:94:fd:82:6a:a4:c1:e0:01:15:ef:
         83:a5:a3:d3:81:5a:df:d4:01:8e:56:21:8d:0e:96:c4:14:46:
         aa:b3:06:52:53:8a:5a:22:ac:29:b5:a2:1c:d5:b9:c3:d4:af:
         d5:b8:df:84:29:1a:b6:06:5c:af:a4:7d:17:af:d3:96:b1:f4:
         d1:9d:0c:0f:98:b2:16:a2:c7:0e:0c:69:87:d7:3b:67:14:fa:
         86:aa:b8:bf:1f:9f:d2:88:35:e1:76:35:3f:4f:a8:83:d2:92:
         53:76:96:1f:bb:ca:3e:47:ba:d3:3f:2d:b2:36:4b:bc:13:2c:
         7b:5b:cf:da:ee:f8:78:a1:13:6b:e7:d5:9e:d1:4b:ab:03:13:
         9b:d4:28:ad:c2:84:41:35:2f:92:14:43:88:67:6e:fe:5e:f5:
         89:29:cc:c7:8e:f7:10:3c:be:a0:03:78:ee:aa:23:49:0b:87:
         60:b5:38:92:85:a6:d9:ea:25:8b:8e:af:3b:fb:23:7b:e3:0c:
         a7:5f:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org