Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
File:                     eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json)
Hash identifier:          1V/Z/W6Zq9MsVE8aFNAL/lcmIk/+QYoKng7odWiaXz4=
Subject key identifier:   E0:32:0D:FB:1A:D5:85:C2:B3:79:AB:D2:23:59:11:1C:9F:0D:67:C7
Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79
Certificate issuer:       /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
Certificate serial:       33DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
Manifest number:          33D1
Signing time:             Sat 18 May 2024 15:17:48 +0000
Manifest this update:     Sat 18 May 2024 15:17:47 +0000
Manifest next update:     Sat 25 May 2024 15:17:47 +0000
Files and hashes:         1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: PGHgD3TPFBvW/FTvQaexGN8oAeaLdM2ejaxut4d4Oq8=)
                          2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: qiqIFs0LgN2orxDBl6FaGNOcLtoVVwNR5vbd6zeu1cw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl
                          rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13277 (0x33dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
        Validity
            Not Before: May 18 15:17:47 2024 GMT
            Not After : May 25 15:17:47 2024 GMT
        Subject: CN=6648c69c-8ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:f4:81:c2:8c:b7:71:49:1d:33:e9:f3:21:
                    84:71:9d:21:7a:64:ce:de:a7:28:23:fc:ec:44:e7:
                    ba:2f:9c:68:1b:62:dc:ba:88:5c:56:42:3c:08:60:
                    5f:bc:a3:ee:b1:07:86:db:ce:ff:98:53:52:f8:ae:
                    88:06:57:eb:27:c9:53:74:91:4d:4e:d8:4c:42:bf:
                    f0:10:34:fa:eb:20:76:84:47:bc:fc:27:4b:ad:8b:
                    72:2c:e8:c9:68:c2:4d:57:45:b2:39:6c:6b:4b:fe:
                    ec:5d:db:13:43:06:c5:05:4c:09:4f:4c:b3:47:53:
                    30:c9:11:6d:45:cd:8b:68:d0:f8:89:52:36:ed:68:
                    01:3b:41:40:24:5d:9b:7f:6c:14:8c:04:a7:c0:2b:
                    eb:f2:ba:b5:d7:89:2d:47:ad:41:59:7f:16:bb:e6:
                    ae:71:57:56:50:4e:f5:e5:25:f0:c8:c9:21:96:b8:
                    c0:1c:75:a7:da:70:40:4c:27:2b:26:26:7f:d3:06:
                    24:ab:9e:38:1a:33:72:6f:60:40:d1:0e:43:1f:6f:
                    17:d6:08:ca:9f:39:7e:d6:b2:e8:d5:4e:82:0b:5f:
                    01:9a:9d:89:c6:b4:93:8f:67:fc:42:3b:68:09:b0:
                    69:b2:f8:59:14:6e:01:4e:9e:1a:48:1c:58:08:50:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:32:0D:FB:1A:D5:85:C2:B3:79:AB:D2:23:59:11:1C:9F:0D:67:C7
            X509v3 Authority Key Identifier:
                keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:67:34:69:ef:4a:d5:8e:2b:cd:cc:b1:cb:93:6b:bf:ee:c9:
         99:a5:8c:b1:92:e4:f3:d4:fa:63:d6:24:36:1e:3a:77:49:d2:
         23:9d:7f:b4:c5:ed:10:3a:d1:a4:2e:1a:21:eb:cb:9a:4f:01:
         60:2b:ce:6c:0b:72:f3:f2:1d:22:14:9e:bb:65:e7:a9:fd:6f:
         0e:a5:21:05:5e:5a:38:82:15:5d:e4:ea:43:8d:4b:77:c8:e3:
         71:6f:ae:73:53:6c:bf:aa:02:3d:31:ee:08:d5:67:18:91:24:
         37:cd:f1:02:97:37:0d:07:07:5d:23:42:04:dd:04:1f:4d:b5:
         2d:2c:a2:91:38:6c:b8:a6:ad:0f:ec:a3:7c:84:6f:33:e9:a0:
         38:63:79:4c:db:30:37:54:f2:88:cd:bc:28:41:4b:d8:d6:07:
         b0:36:f8:7a:aa:19:2c:02:10:da:f1:7a:4b:37:17:ec:17:f8:
         10:d3:cc:b1:6f:3e:fd:3f:a6:b2:21:3c:db:fb:5c:19:65:99:
         f4:56:e8:1d:4b:2c:d4:2d:04:7a:93:d1:3f:17:a2:aa:46:89:
         75:ad:b0:ae:5d:b0:38:00:2c:07:e8:54:9b:95:cc:96:0f:d7:
         2b:9e:4b:10:ac:23:c6:f0:dc:df:d7:f6:72:ce:e3:b6:ee:f9:
         89:eb:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org