Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
File:                     jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json)
Hash identifier:          ws7rFxXXdBdaKB4VF2syg01/k+j1N4cA/ZKQsz2jW4I=
Subject key identifier:   5D:82:5C:71:0D:65:16:C5:E2:77:28:FA:D8:DC:85:A5:69:38:22:06
Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA
Certificate issuer:       /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
Certificate serial:       19A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
Manifest number:          199F
Signing time:             Fri 31 May 2024 17:01:32 +0000
Manifest this update:     Fri 31 May 2024 17:01:31 +0000
Manifest next update:     Fri 07 Jun 2024 17:01:31 +0000
Files and hashes:         1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: 8owu9P3fg6jauK5AnQYD5pf4UkXjWYh4YspKEcMEK20=)
                          2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: bh3z16gZ2VSFsHisnqXivod3jWj16xVb8JpTHoh3XV4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl
                          rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6568 (0x19a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA
        Validity
            Not Before: May 31 17:01:31 2024 GMT
            Not After : Jun  7 17:01:31 2024 GMT
        Subject: CN=665a026b-5c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:d6:f9:ec:d3:0a:88:d2:ef:22:90:ce:9c:
                    c0:4b:fd:8d:b8:40:45:85:b2:b8:ee:8a:54:0e:a6:
                    6f:e8:9f:e5:bf:f0:62:e8:bf:23:16:66:49:8f:f3:
                    b3:fd:25:14:51:b1:ea:35:ee:73:e4:63:8b:0c:71:
                    db:db:8a:fb:14:ad:9b:6d:91:08:55:fd:4c:cf:cd:
                    06:dc:c7:fe:a7:b2:74:47:1d:84:8e:ec:6b:1c:59:
                    08:d8:b3:e2:e8:84:9a:88:65:cd:26:fc:f7:13:b6:
                    81:3f:8d:a9:54:b9:16:44:b5:72:9b:07:36:4e:1b:
                    bf:9a:db:d9:a3:dc:f6:54:ae:8f:af:28:7f:3e:28:
                    ce:f8:c3:8f:5b:61:78:0c:bc:c9:2a:23:da:9e:65:
                    da:d0:89:ca:59:a6:65:3b:db:d4:89:47:a1:af:c3:
                    f4:9d:98:4d:12:b8:e7:9f:e4:f7:03:de:8b:c2:00:
                    a9:78:d6:fb:d9:99:d8:48:42:38:c0:f3:87:e0:92:
                    92:77:7a:6c:0e:c7:30:1b:be:90:85:59:3f:fd:a8:
                    22:9b:db:f3:49:9c:fa:55:04:ca:97:19:40:22:a4:
                    a3:3c:c9:28:bf:88:42:19:80:0e:ae:b5:20:01:31:
                    a4:12:2a:4f:e0:b3:2b:b0:47:06:9e:24:00:65:a4:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:5C:71:0D:65:16:C5:E2:77:28:FA:D8:DC:85:A5:69:38:22:06
            X509v3 Authority Key Identifier:
                keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:9c:e1:be:1e:da:e2:9a:35:9b:10:83:d4:69:b6:86:67:
         17:de:a9:37:8c:e7:5a:e1:11:46:17:fe:af:cd:10:f6:9f:9a:
         1c:53:a8:cf:4f:09:3e:ba:c7:d4:b0:10:e8:2b:16:90:57:a6:
         51:1a:9f:12:72:be:03:31:8d:7d:ed:10:3d:1d:6a:cd:8c:5c:
         8d:91:05:f7:63:d6:ae:9d:1e:7c:bf:aa:4b:99:b0:ff:48:6c:
         63:e3:b7:7b:db:05:92:42:a7:c0:5b:67:05:df:d4:15:a5:9c:
         ae:2a:86:3c:ae:ef:a4:cb:98:0a:03:66:81:85:4f:29:2c:65:
         d4:43:9a:9a:01:f2:a5:65:aa:33:54:15:f2:4b:8a:17:1e:36:
         50:da:6a:2f:d4:a6:d0:9a:05:54:13:7f:6e:7e:78:f6:6b:51:
         61:ef:bb:e2:e8:6e:31:d4:d0:79:ac:e1:b8:e4:4c:7c:49:45:
         87:95:36:c2:d2:dd:7e:98:d1:49:77:be:ce:ae:fa:7e:75:01:
         8f:b3:29:4b:54:1d:70:24:f6:5b:c8:8b:a6:5b:be:eb:86:6b:
         d7:40:19:a6:08:6e:a3:04:77:65:52:e3:a3:85:98:a6:ae:49:
         dd:5b:c0:1f:62:fc:9b:d3:1a:9e:2b:a6:89:dc:e7:50:99:e0:
         63:2f:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:44:50 2024 by rpki-client on console-fra.rpki-client.org