Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
File:                     ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json)
Hash identifier:          8GkFjWQxFXkgQanFZAeRyUCm/VihiN2tx7MyqMQntIw=
Subject key identifier:   D9:BC:4E:30:93:BF:2C:0E:DA:70:94:66:86:C9:E8:AF:02:93:32:64
Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
Certificate issuer:       /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Certificate serial:       0564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
Manifest number:          055F
Signing time:             Sun 19 May 2024 00:47:18 +0000
Manifest this update:     Sun 19 May 2024 00:47:17 +0000
Manifest next update:     Sun 26 May 2024 00:47:17 +0000
Files and hashes:         1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: GtKGp33+hE53IUu2MATBUhm2i5zK9gtsbsjn03dPOOk=)
                          2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: t+vdICjvfIX0ogKOxFMJpRydx4u/UrFHHIef2bdd6q0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
                          rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
        Validity
            Not Before: May 19 00:47:17 2024 GMT
            Not After : May 26 00:47:17 2024 GMT
        Subject: CN=66494c15-759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:e4:2f:bd:69:8d:bb:7b:45:ee:c9:b1:b5:
                    6b:3c:38:67:bc:89:b1:62:f1:50:b9:bf:22:69:69:
                    ba:40:f2:fa:4e:bd:a6:97:83:61:6b:59:92:dd:aa:
                    90:0a:75:c8:18:18:61:a4:c7:49:bd:54:1d:ee:b8:
                    5e:d6:9b:ca:08:06:49:4c:cb:25:f1:93:cc:24:2f:
                    ab:5d:38:0f:b6:48:47:73:a8:8b:a3:2e:b7:54:cc:
                    3b:af:d2:3a:47:06:29:8a:20:9f:ec:07:2f:13:af:
                    bc:e6:63:25:d3:89:ed:1f:35:79:56:a3:df:32:9f:
                    a6:6f:51:ac:a2:af:d3:ad:a0:3e:9d:20:36:4b:57:
                    b6:de:b8:f4:73:eb:29:72:9d:44:b9:f0:74:ab:9a:
                    14:11:d4:56:6f:6e:9b:f5:07:f3:e2:88:cc:14:57:
                    b3:83:66:71:b5:da:fc:44:d7:ee:f1:9b:c5:17:03:
                    e2:73:89:34:18:e5:ca:d9:3b:f2:2c:cc:07:e9:16:
                    98:13:ca:49:74:33:23:f5:c4:f6:43:a6:80:7d:9d:
                    36:8a:2f:46:d9:8f:f9:2d:86:44:88:3f:7e:10:93:
                    8f:55:2b:ce:ee:4f:dd:09:36:4d:16:e5:13:db:b8:
                    fb:cf:b0:5b:af:40:d0:0e:c3:60:71:03:ba:d9:72:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:4E:30:93:BF:2C:0E:DA:70:94:66:86:C9:E8:AF:02:93:32:64
            X509v3 Authority Key Identifier:
                keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:80:0d:4a:8b:cc:a7:b4:f7:81:c3:e7:e5:c7:bb:d1:14:
         ab:e0:e5:bc:e0:0b:31:62:75:5a:05:bd:9c:b6:fc:be:06:2b:
         8e:ae:33:f1:82:bd:2f:77:54:ce:7f:a6:3a:49:47:12:2e:60:
         a3:8e:24:dc:c4:58:4e:10:f6:a1:06:a3:0f:38:ca:4a:89:bf:
         9e:2a:03:d0:45:50:6b:2d:f2:b3:2e:41:6c:30:33:91:02:a8:
         64:3e:34:35:67:32:17:b6:88:d8:71:e9:f1:59:c1:29:e5:b7:
         38:62:55:36:f5:1b:90:42:d4:d9:8e:fa:77:49:d0:2a:4d:26:
         16:d2:21:4e:85:f7:19:dd:ed:68:8f:e0:67:71:96:53:95:82:
         bf:2e:52:6f:64:78:e6:19:60:93:d0:c9:b6:2a:e5:4a:4b:d6:
         dc:49:b5:58:45:13:85:87:4c:3f:47:8c:ec:7f:52:b4:76:e0:
         ff:c0:d8:fb:d3:dd:89:fb:0b:21:28:93:01:0c:7b:79:19:ed:
         6a:84:11:f7:f5:b2:ab:02:f8:23:ca:c4:11:57:70:9c:10:69:
         38:8f:50:48:e7:4c:a2:91:69:87:56:ab:a9:22:2e:fe:e1:53:
         ed:b1:7a:e2:0f:47:83:91:19:ce:ad:c8:9a:2b:2d:76:75:ea:
         dd:a5:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org