Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
File:                     Efnbq5DK44NpHfn-wpeCo2cVXyc.mft (raw, json)
Hash identifier:          yVg8296Nf6VY1dqHSc604Aoc8x8l7gZHJJDv5oCYtw0=
Subject key identifier:   5C:56:81:2D:87:25:0F:09:25:72:10:27:6A:79:3E:D8:43:0D:C8:71
Authority key identifier: 11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27
Certificate issuer:       /CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
Manifest number:          038D
Signing time:             Fri 31 May 2024 03:15:27 +0000
Manifest this update:     Fri 31 May 2024 03:15:26 +0000
Manifest next update:     Fri 07 Jun 2024 03:15:26 +0000
Files and hashes:         1: Efnbq5DK44NpHfn-wpeCo2cVXyc.crl (hash: g0t7pwNq/gadmXj5CLKz840z1NXJ2ZudES0nss9fpLQ=)
                          2: 010C8118570A11ECB999F138C4F9AE02.roa (hash: waLHNR/b6f0hwEbPgraLtfs3S9dJvhG3CM5lZSWlk/4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.crl
                          rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 03:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27
        Validity
            Not Before: May 31 03:15:26 2024 GMT
            Not After : Jun  7 03:15:26 2024 GMT
        Subject: CN=665940cf-6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:f0:43:60:b5:25:da:16:10:a2:2d:08:a7:
                    18:7b:e7:9d:e3:ec:72:3d:09:33:6f:2d:fb:0c:45:
                    82:15:71:7c:0e:83:c6:c4:44:cd:3f:f1:d8:e4:a6:
                    40:5b:01:78:e4:58:a9:19:3d:01:52:4c:b3:04:cc:
                    0e:b7:de:a8:75:f6:3a:64:b8:90:10:5c:1a:1b:dd:
                    6a:83:01:f6:87:91:62:92:8f:d2:a6:d3:80:b7:15:
                    bf:f2:5b:e7:08:bb:ce:3b:3f:45:6a:f8:14:a3:71:
                    51:77:79:d3:3c:33:08:fe:cf:44:a4:f8:43:81:78:
                    d5:06:ad:5b:f2:50:4b:43:30:f1:99:7a:b6:71:7e:
                    c2:03:45:d6:36:20:a0:a5:b3:39:05:e0:37:e7:16:
                    36:2f:6a:4e:d4:13:49:e3:e2:e4:bd:ed:e8:ef:36:
                    63:90:6d:f1:10:0b:6b:d3:da:b5:cf:7d:dd:fe:18:
                    0f:8d:f9:3d:64:9a:b1:3d:cc:d8:8c:d6:97:98:b7:
                    c7:65:c1:d4:3d:ef:1f:4b:21:76:78:88:21:b1:4e:
                    e1:5a:35:36:60:9d:5b:2e:82:75:e7:17:54:3c:3f:
                    f8:d8:87:28:94:0b:6d:3e:e9:75:67:8e:6c:55:60:
                    89:c3:4b:89:bd:0c:02:66:33:9a:69:40:ff:c2:3f:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:81:2D:87:25:0F:09:25:72:10:27:6A:79:3E:D8:43:0D:C8:71
            X509v3 Authority Key Identifier:
                keyid:11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:f9:d0:be:0f:46:a9:82:31:4a:28:72:77:78:f8:e0:35:
         82:5c:6d:9d:87:b1:04:2f:e0:17:7a:ed:b8:4f:39:e4:73:84:
         45:47:06:99:dc:74:4a:87:86:79:90:12:2c:8a:ea:11:bc:8a:
         c8:96:7b:b0:2d:54:d6:af:de:a1:41:2b:bc:33:42:db:62:4d:
         1a:83:b8:fc:d4:67:45:81:92:4b:79:50:ae:7c:3f:d4:e0:01:
         ef:ca:39:62:78:77:72:8e:81:49:cf:8a:1c:41:bc:ea:d1:a9:
         40:80:14:63:9a:08:8e:3b:e4:2d:6e:79:6d:fd:28:dc:9c:ff:
         30:15:21:7b:c0:8c:73:2d:98:eb:54:1d:fb:a5:e7:60:fd:34:
         75:47:3c:26:fb:ac:6d:38:6f:f7:f5:7e:df:99:0d:1a:f0:7e:
         40:39:77:98:ec:11:90:67:13:05:17:80:9e:06:b2:ab:dc:31:
         b0:8d:59:8d:03:9d:7d:dc:4a:ed:61:fe:78:b1:de:48:c9:aa:
         ce:c4:8d:f8:c6:04:d9:38:0e:8f:bb:30:b7:e0:98:2f:84:5d:
         59:08:aa:ea:32:84:01:92:21:65:fe:a1:dc:3f:29:92:62:3b:
         af:12:37:07:28:5b:94:25:60:1b:0a:63:ac:5c:e0:52:2b:b5:
         af:51:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:17 2024 by rpki-client on console-ams.rpki-client.org