Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          YzyiNvq8+PeLq4QVxU4OLkkHzp4zXpo/3rSaITVi+50=
Subject key identifier:   6D:DA:72:EF:60:27:DF:EB:6B:4A:C8:30:CE:FA:0A:5F:9E:33:88:E6
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          06D1
Signing time:             Sat 18 May 2024 22:58:36 +0000
Manifest this update:     Sat 18 May 2024 22:58:35 +0000
Manifest next update:     Sat 25 May 2024 22:58:35 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: 58n+3Rvox7RpNMvyZBhWZQ+CWN4aY8aqJxcmvrWfBYo=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: +IWbZ/7PgA6d6vOIX20SVgEuJVAS5imzV4sSU3cCP90=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: May 18 22:58:35 2024 GMT
            Not After : May 25 22:58:35 2024 GMT
        Subject: CN=6649329b-c747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:48:af:f3:d7:f2:8b:c9:5b:b4:9a:ce:0a:
                    b5:83:42:55:8b:24:24:32:08:2c:1f:c3:1f:ba:1c:
                    88:2a:7a:eb:92:cd:21:bc:25:d9:88:1c:93:36:c5:
                    1e:b7:01:c7:c6:6e:e5:1c:0b:d8:36:00:10:85:40:
                    bc:14:44:73:f4:11:1e:2c:ee:81:c1:d2:b3:94:6f:
                    29:30:1d:7a:9d:6e:4a:76:6b:68:06:43:85:3a:28:
                    5b:fd:ef:53:f7:4d:c8:68:d4:0e:ca:33:07:40:02:
                    c3:a9:15:81:41:35:68:db:13:a9:3c:3b:eb:89:99:
                    3f:aa:d1:40:d6:87:12:52:14:f7:30:66:12:4e:98:
                    52:a0:60:63:b9:20:b3:f3:0a:1f:24:43:43:4e:38:
                    10:f5:3c:c9:ba:14:34:22:4d:52:b4:90:7d:2b:88:
                    f6:d9:32:92:5f:c6:9d:17:1a:1e:2e:b8:de:90:d4:
                    37:c8:fb:dd:13:7b:fc:c5:08:1f:f7:6d:5e:4f:f6:
                    d8:6e:cf:a7:a0:b6:35:a7:bf:fd:c1:2e:3d:74:fd:
                    73:6a:c0:26:e9:13:4c:19:fa:94:ee:bd:3a:cf:b9:
                    ba:ac:f6:15:ef:e6:c3:bf:34:d3:27:2d:04:8f:13:
                    28:53:3c:c7:92:c9:f9:57:a0:f7:37:75:78:0f:37:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DA:72:EF:60:27:DF:EB:6B:4A:C8:30:CE:FA:0A:5F:9E:33:88:E6
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b6:f7:2a:a9:f2:7a:36:f5:4d:a0:89:cd:02:32:cb:f9:a4:
         5f:0b:de:07:0f:af:bb:a3:4f:ed:02:f3:d2:4d:ab:71:fc:5d:
         92:1c:72:db:45:26:c0:7f:64:fa:b4:35:a8:92:bd:4a:3c:59:
         68:c4:95:9f:1a:19:2d:a4:e2:30:4a:8c:8c:8a:88:a8:cd:26:
         63:c7:bd:b1:24:81:6c:f8:e9:4a:f9:32:39:77:9f:f6:87:ad:
         c8:22:8b:ff:1a:a8:1f:76:02:87:ff:54:07:09:68:f1:b5:00:
         30:1f:4f:be:41:18:b2:ab:fd:d8:f7:0e:b6:81:01:34:22:c0:
         4c:36:1b:a2:85:58:ce:32:d3:bc:0e:f2:26:f4:7d:4d:ed:7e:
         97:af:85:fe:45:b4:68:8d:0b:fb:eb:c1:79:f0:76:f6:3e:3a:
         cf:f0:f5:b7:64:7c:6e:ee:16:1e:bf:a7:16:0c:ae:c6:b6:7f:
         3a:bc:be:91:61:6f:49:2c:63:e3:21:a5:c4:85:77:ff:9c:66:
         fd:83:32:30:0f:86:f9:4f:92:38:3b:98:db:81:5a:48:99:b8:
         7e:95:1b:f7:eb:f8:82:bf:06:a2:88:7b:96:31:fe:1f:af:29:
         7b:8a:2c:ca:64:76:c8:66:87:5c:22:6d:3b:04:1e:0e:41:db:
         58:b6:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org