Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
File:                     5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json)
Hash identifier:          P5JBpWrQkdoNlBgfjQLro8pBAvRvhjuWf1FJSaqorM4=
Subject key identifier:   BE:E2:A8:C9:D4:AA:75:A4:4D:07:1D:FC:64:D9:BD:B7:65:B6:5B:61
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Certificate issuer:       /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
Manifest number:          A6
Signing time:             Sun 19 May 2024 06:47:52 +0000
Manifest this update:     Sun 19 May 2024 06:47:52 +0000
Manifest next update:     Sun 26 May 2024 06:47:52 +0000
Files and hashes:         1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: 6cBJQFxrSgbdcicgxqir9fysyMo28q8oSA+IaiuUuRw=)
                          2: B507E28636AE11EE9BDDAA12C4F9AE02.roa (hash: oI37If83NAUgjTbDjK+wmvX3KwqGuzvC8OGyTcK+SK8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
                          rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
        Validity
            Not Before: May 19 06:47:52 2024 GMT
            Not After : May 26 06:47:52 2024 GMT
        Subject: CN=6649a098-4cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:97:8f:14:f7:85:04:b4:7d:69:3d:18:62:
                    67:1a:d4:6f:38:5a:d1:48:84:31:6f:75:8c:8e:e1:
                    e3:0d:16:cf:72:0a:66:7d:0a:78:0b:74:75:9c:0a:
                    61:52:3b:f9:ac:80:92:58:1f:7e:b8:80:96:f9:74:
                    9f:b1:72:28:00:5a:70:67:97:4d:1a:28:76:e9:09:
                    94:80:ca:26:da:6f:ee:53:6d:40:69:5a:7c:d8:e4:
                    d9:a8:d8:74:1c:87:e6:b9:5f:ba:f0:1f:f4:64:e2:
                    50:0e:5c:d8:d6:94:c5:fa:07:69:65:4e:d1:95:bb:
                    27:d1:c6:3b:0e:eb:af:29:d8:52:f1:5a:da:40:2f:
                    78:4b:cf:e9:88:10:05:14:0d:70:a1:34:41:b7:15:
                    22:e9:c0:0b:36:8a:a3:4e:04:84:ac:d9:b2:f0:af:
                    7c:20:87:30:71:c7:c2:89:b9:87:29:c3:a3:45:ca:
                    5d:bc:d0:9f:34:b5:49:b8:d4:d1:a4:b9:65:5a:bb:
                    3f:cd:fe:0e:69:36:33:f9:11:11:19:24:12:10:06:
                    00:87:72:e1:9e:a2:c2:84:d0:fe:40:44:a1:84:71:
                    e8:a0:8c:1e:ac:29:be:86:b5:63:04:f6:9b:9a:20:
                    09:cb:e1:f2:dc:d4:a9:ad:58:a1:86:ea:4f:d2:03:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:A8:C9:D4:AA:75:A4:4D:07:1D:FC:64:D9:BD:B7:65:B6:5B:61
            X509v3 Authority Key Identifier:
                keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:86:7c:65:77:e9:07:d6:1b:7a:09:ff:3c:28:c0:82:0d:
         57:0e:65:04:1f:19:26:b6:d8:a6:08:79:a4:ba:79:48:db:3e:
         4e:3b:0e:cd:93:b6:53:60:b7:d9:13:95:4d:e2:0d:2d:74:d1:
         6b:5a:02:bd:48:a0:a7:3e:dc:a8:95:5b:ed:f2:98:ca:ac:0f:
         9f:c2:00:4a:d9:63:e0:b1:11:7b:53:6c:41:0b:25:1b:ce:98:
         38:f4:49:ef:63:c0:dc:13:db:e1:0e:57:61:7e:34:2a:15:8a:
         23:7e:e8:7b:b2:f0:9e:27:38:36:66:69:72:b9:62:8a:cb:ba:
         4e:2d:41:6b:9c:78:65:de:57:6e:ca:e6:80:a1:8c:9e:c2:9b:
         40:b2:11:80:09:0d:0f:a1:45:aa:e8:3a:42:90:00:74:2e:d5:
         82:2b:e3:d8:98:2c:03:4a:9d:8a:33:a5:72:34:89:64:51:dc:
         b4:f7:5b:36:05:4e:f8:0c:e1:67:7e:87:a2:39:fa:c9:6e:70:
         7f:06:3c:d9:bf:27:b8:1e:8e:5f:58:57:54:c4:67:9f:0b:92:
         13:4a:51:8b:22:dd:e7:78:72:47:6c:f1:14:21:8d:65:fa:7c:
         51:54:84:f3:07:57:31:8d:b1:5c:90:c5:bb:bb:6c:45:e8:38:
         45:57:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org