Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File:                     5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier:          eEQhX92DVeO89uDhGyU7mBLdZDnRD/6wa26WIbfERi4=
Subject key identifier:   51:61:E4:FB:9D:5B:DC:82:44:27:1D:A0:44:77:D5:94:A1:E5:CA:20
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number:          05AE
Signing time:             Sun 19 May 2024 00:15:43 +0000
Manifest this update:     Sun 19 May 2024 00:15:43 +0000
Manifest next update:     Sun 26 May 2024 00:15:43 +0000
Files and hashes:         1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: G1hQyk2RUGMowmhDKKkWANltE03feAVuozdT99cs3Pg=)
                          2: 3F7FBFC421E711EEB0E0DE3DC4F9AE02.roa (hash: mWAcXggam87UKmbA78ylLeLwaGYiQ0rRlm2rlIbMXmg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: May 19 00:15:43 2024 GMT
            Not After : May 26 00:15:43 2024 GMT
        Subject: CN=664944af-84a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:88:b9:55:ca:2e:69:25:a0:26:4b:19:e3:f1:
                    af:21:52:a4:2a:d4:d9:8f:6f:71:45:63:7f:db:df:
                    b6:7d:5c:3d:96:dd:ed:8c:81:66:3e:29:0b:49:07:
                    2d:a5:f1:22:1f:82:f1:e7:a3:62:b0:72:51:cc:71:
                    ad:a2:f2:15:3b:eb:90:37:d2:8a:d8:14:51:3b:58:
                    b3:4c:bf:c8:fd:f1:61:46:69:dd:14:41:c4:3c:a8:
                    55:23:6d:cf:cf:0b:6d:38:1c:f8:62:a1:48:e7:84:
                    7d:dd:3c:12:f0:09:fa:37:60:11:ff:16:05:c4:de:
                    4b:68:64:46:9e:1e:48:68:fa:df:da:15:b8:e7:f3:
                    75:43:d4:d1:3a:e5:01:78:0c:f3:22:42:ef:17:b2:
                    4d:01:6d:f6:6f:bf:4a:cb:50:5d:47:ce:9c:5b:5f:
                    95:4a:82:18:71:51:49:a9:38:2a:7e:5b:af:d2:2c:
                    67:5e:df:f2:71:56:9a:a3:64:91:4e:e9:39:58:66:
                    93:60:65:7e:e0:4b:ae:17:eb:d0:d7:57:83:f0:6f:
                    90:f3:4f:d8:98:4f:c6:27:6e:1a:4f:d0:c9:bf:02:
                    5a:f9:b1:30:d3:74:af:a4:cc:56:43:51:4f:d7:ce:
                    16:40:36:70:f8:46:7d:ef:dd:51:42:67:a9:d2:20:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:E4:FB:9D:5B:DC:82:44:27:1D:A0:44:77:D5:94:A1:E5:CA:20
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:37:a1:29:1b:86:03:60:8d:e4:c1:02:71:ff:54:e5:6c:43:
         6a:a0:f5:9d:d3:be:ff:c7:ab:70:50:02:4a:b8:48:c8:b8:84:
         68:31:36:ed:ff:92:d6:62:74:40:ed:10:56:5b:44:0f:2b:a7:
         00:df:1a:9d:b1:58:87:df:42:d5:e9:bf:74:78:28:81:d2:6e:
         05:8c:99:d6:69:8a:b7:d6:ef:19:24:78:49:7c:58:97:f2:79:
         83:6a:6f:02:11:87:92:b0:da:ed:df:da:35:69:6a:34:b7:ee:
         35:96:75:60:d8:9b:32:80:b8:8a:63:55:a5:75:4a:27:a7:25:
         25:09:a0:27:9a:d1:f2:6a:9b:23:f9:65:3b:ff:31:f8:55:4c:
         af:7d:d2:69:9f:1d:8e:0a:15:d3:45:2c:52:c6:cb:10:8b:55:
         07:7d:04:cb:ff:b2:4d:42:4c:49:a2:80:3b:4f:a0:cd:6a:31:
         88:dd:45:70:a3:98:a8:a0:cc:58:15:aa:6b:3c:b8:57:2d:91:
         d4:7d:98:f5:a7:89:39:3a:2b:76:14:83:79:65:db:03:83:b2:
         92:11:cb:56:65:9b:a6:ad:5e:1e:0c:89:bb:5f:27:84:33:8b:
         8a:74:10:63:11:ad:4b:e0:20:af:18:fc:c8:12:68:7d:1a:af:
         66:fd:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org