Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File:                     19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier:          Nana4KGDkoYl5BLBOsN3xp9zMcDUojrHAlrRvilPvwA=
Subject key identifier:   A7:7D:D1:F6:E6:62:3A:52:6D:53:F2:07:FC:77:D0:D4:53:C7:34:AA
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number:          03EB
Signing time:             Sun 19 May 2024 02:14:46 +0000
Manifest this update:     Sun 19 May 2024 02:14:45 +0000
Manifest next update:     Sun 26 May 2024 02:14:45 +0000
Files and hashes:         1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: IJKc80UicWROFEwEXS38zj76UZjd+4HiV4wS850jJBY=)
                          2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: DjIcsEcGW+RQJxR7flsVKV54qge0kODAwN30jcsuees=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
        Validity
            Not Before: May 19 02:14:45 2024 GMT
            Not After : May 26 02:14:45 2024 GMT
        Subject: CN=66496095-d850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:ad:9a:6c:d8:2b:44:17:0b:61:a1:38:7a:
                    54:d4:bd:61:8c:ea:17:66:ec:a6:0e:84:7d:57:10:
                    cb:25:72:33:42:32:2f:d4:fd:91:97:83:5b:09:a5:
                    9f:73:38:ab:73:92:e3:a4:1f:92:a4:68:59:3c:3a:
                    7e:71:c8:0f:68:7e:d0:48:52:5c:82:03:ed:c2:5c:
                    f4:99:5f:5c:14:14:f8:61:97:9e:33:92:b6:81:9c:
                    7e:b3:09:b8:5d:cd:bf:5e:70:47:e5:c8:98:12:99:
                    d3:d4:d8:51:70:2d:fc:98:bd:90:54:f3:15:4f:f7:
                    a6:c3:0e:d1:05:06:ef:70:92:99:15:00:65:88:97:
                    75:c3:03:04:ec:6b:b1:e6:2d:75:48:41:6b:41:ec:
                    92:35:6d:51:65:62:b8:c0:0f:7b:1e:4a:46:0c:96:
                    75:f7:d6:31:4a:f0:ed:17:01:1b:aa:25:66:49:96:
                    fc:b6:fa:81:ec:4b:ff:fe:52:52:03:35:4e:9e:86:
                    a0:ff:54:7d:88:01:be:0c:8d:5d:71:f7:b9:0c:f5:
                    54:c2:04:73:5a:6b:98:71:55:01:e7:85:86:3d:7a:
                    b1:67:ef:77:b2:78:e8:e3:aa:c7:36:f8:b1:ed:a5:
                    10:e2:55:04:5c:b9:88:15:87:1e:d0:8d:7a:0c:13:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:D1:F6:E6:62:3A:52:6D:53:F2:07:FC:77:D0:D4:53:C7:34:AA
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:36:04:4b:d6:4a:6a:0c:4c:4a:f0:1e:d7:8b:ea:fe:19:
         da:12:7a:9c:77:97:32:bd:f3:62:1d:4f:6f:45:3f:f1:5d:3a:
         9f:7f:89:9d:18:0a:14:e7:ff:20:36:84:44:46:1e:bb:85:fc:
         2b:71:aa:ae:65:d1:d4:58:9f:1b:ea:32:c9:97:81:38:03:d3:
         f9:13:b1:65:67:64:d8:dc:a8:52:ca:38:bc:0f:cc:26:10:c1:
         c7:03:c9:2e:da:0e:a0:ee:33:98:58:44:fb:a0:0e:d7:99:51:
         9e:35:c3:3e:1b:d3:4c:ae:a6:24:f8:22:68:51:15:69:b1:81:
         30:a3:12:8e:0d:01:bc:ac:45:1c:42:d1:e9:0c:fd:e0:61:36:
         64:1a:1c:d9:7b:bd:86:0e:40:d3:ea:17:d6:38:0a:69:4c:68:
         96:a9:38:54:d7:bf:49:5d:b7:21:12:f3:f4:19:b1:6e:e2:2e:
         7d:c1:60:94:05:2e:b0:71:60:2f:36:f1:b6:e8:d1:83:cb:01:
         0f:2f:b1:01:53:04:6f:1d:33:28:88:37:ca:ee:6e:77:18:d0:
         85:a4:6d:ea:07:15:44:ef:27:9a:e4:2f:7d:26:a1:ea:30:ec:
         40:ac:c3:00:d6:4b:cc:6d:43:b4:0d:68:12:59:dc:06:c3:b8:
         f1:0b:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org