Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          09igEIu9Y7+efPEM8+nOmDdPF+InnxNGmylFzwtlMTI=
Subject key identifier:   E1:25:DA:27:21:85:8E:CF:F3:AD:62:32:6C:90:0C:AF:6B:E2:D2:FD
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          06E5
Signing time:             Sat 18 May 2024 14:52:50 +0000
Manifest this update:     Sat 18 May 2024 14:52:49 +0000
Manifest next update:     Sat 25 May 2024 14:52:49 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: 0sWMSruzDNVafgsguSniMpbBRpZq/EVbd9b9o+LQ/Hs=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: 3JundaeqkrUuUIwrwsj2jLAIfWhGOPJZ9MZEsqUgQoY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
        Validity
            Not Before: May 18 14:52:49 2024 GMT
            Not After : May 25 14:52:49 2024 GMT
        Subject: CN=6648c0c1-74ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:30:63:8f:c8:c8:fd:20:94:a5:79:8c:04:
                    aa:cc:16:92:d5:20:50:31:e3:e5:81:07:a9:f7:52:
                    3e:86:e0:63:3e:43:b1:46:12:29:a2:56:bb:a5:d8:
                    72:77:4b:79:6f:35:80:89:55:fd:a4:b7:a2:13:00:
                    ff:67:01:1f:0f:d9:6f:a8:70:a3:ba:d0:5e:30:6f:
                    90:83:ac:b2:92:68:51:9a:b7:c6:5b:47:2d:c7:19:
                    99:27:9b:86:bf:b6:a8:83:0e:fb:52:59:fd:eb:b3:
                    fa:69:62:6f:41:4a:0e:a7:96:4f:a0:ed:2d:27:6b:
                    b5:3c:a8:f8:8d:0a:d8:94:44:a8:0d:62:69:37:6a:
                    8a:99:8c:2a:fb:e3:54:39:de:7c:7d:a8:44:f5:b4:
                    5d:14:a2:e3:a6:0e:c5:91:f8:ef:67:40:aa:73:5d:
                    d5:8d:49:40:94:cb:9f:81:46:bf:5d:46:91:a3:40:
                    1d:b1:ba:a9:75:87:68:0f:ce:cb:47:5a:95:24:e0:
                    61:ef:14:8c:fe:85:7b:2a:a3:f3:51:04:e1:ae:1b:
                    23:66:20:05:05:ff:22:6f:b5:07:16:26:4f:b9:fc:
                    6e:f1:b5:4c:a2:96:1d:ad:46:74:f0:e5:a8:dc:22:
                    96:ad:3b:6a:83:ae:39:0a:e5:94:cf:e2:8c:5c:9a:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:DA:27:21:85:8E:CF:F3:AD:62:32:6C:90:0C:AF:6B:E2:D2:FD
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ed:d3:77:1f:6d:a6:4f:70:dc:69:31:78:97:56:55:6b:66:
         ee:27:70:e0:81:28:09:9c:11:62:09:12:4b:17:53:8d:89:cf:
         5f:6f:82:a3:34:2a:42:0f:59:eb:6c:50:ef:11:35:f9:a7:ae:
         ba:30:fc:64:ff:86:df:86:4d:77:87:e9:72:79:46:62:d4:2e:
         95:bb:36:89:18:14:23:94:7e:b0:93:29:cb:05:cc:af:11:fb:
         2a:6e:4d:29:18:f4:0a:9e:d1:a1:f1:c7:d0:e1:d5:95:58:e5:
         35:a8:e4:23:f6:14:e3:1e:a1:d7:e5:67:54:a3:73:29:a0:35:
         2e:0f:6d:13:50:92:fd:f2:0d:b2:28:64:26:99:da:38:13:6d:
         86:0c:36:09:c2:fe:fb:0a:d4:c0:cd:9f:a3:82:9f:46:eb:30:
         52:06:35:8c:bf:69:fa:b9:44:af:96:67:b1:a0:86:56:9f:de:
         4d:80:b3:1a:f3:ef:34:2d:e4:76:58:07:01:21:33:2a:b8:02:
         cc:37:64:32:f0:7e:d5:46:8c:03:0e:aa:e0:99:4e:85:12:c9:
         18:f0:1a:39:11:97:a8:98:dc:5d:22:56:a8:e9:58:0e:7d:7f:
         86:97:f6:9f:ab:da:ad:91:28:e4:1a:c8:6a:f6:1f:aa:ac:b0:
         48:19:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org