Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          vbH3SF/0fBWtSQ4/9JVaeoNhfYiaN0iK8oU11NyFkPg=
Subject key identifier:   EA:FB:CF:69:E4:94:CF:1D:91:FA:FF:7F:71:E5:48:E8:B8:49:DD:02
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0B74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0B59
Signing time:             Sat 18 May 2024 19:43:43 +0000
Manifest this update:     Sat 18 May 2024 19:43:43 +0000
Manifest next update:     Sat 25 May 2024 19:43:43 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: XgBAX/XufrZVOl3aUkgAS/6iVeipn9xaoWvU9ZVz/MM=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: +1WLQRV04Ed2oW4QFm7/7ippf8dDjkisALZjf/MJ6Po=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: May 18 19:43:43 2024 GMT
            Not After : May 25 19:43:43 2024 GMT
        Subject: CN=664904ef-9d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:0c:49:36:d6:9e:bf:4d:ad:36:e0:85:c0:
                    f9:38:e0:43:ae:be:d1:b6:56:11:81:24:47:5a:01:
                    41:e4:40:8d:f1:a1:41:f9:d9:96:06:0d:2a:8d:4d:
                    82:5a:3c:d5:f4:a0:60:b7:e5:cd:e2:a7:d3:ba:3e:
                    35:82:e7:fe:4d:0b:bf:a3:54:45:f9:bb:c4:f8:d1:
                    e7:5b:ed:28:12:28:27:59:06:50:86:c9:70:58:7e:
                    e1:cc:ba:14:33:8a:a1:c2:6c:65:cd:76:14:92:d2:
                    36:bf:aa:0b:fa:95:e7:5f:2b:d7:5f:b7:13:b8:32:
                    08:fa:15:cc:6a:06:f7:bc:48:ee:67:fb:50:d8:f8:
                    3d:92:7e:8a:80:cb:f3:91:af:66:56:27:40:dc:03:
                    31:39:d2:6f:87:c4:01:e7:32:d1:da:0b:dc:73:73:
                    9d:4e:d7:43:2c:b9:4e:bd:67:b9:f2:6d:56:cd:1c:
                    79:17:d0:f3:c8:64:4f:d8:92:08:8e:97:47:42:b8:
                    13:b6:84:dd:f1:36:e2:7b:4c:74:f7:d5:12:fe:74:
                    82:8d:f0:d8:89:b2:9a:5f:a4:f8:1c:03:96:38:57:
                    5e:fd:4a:52:1a:16:11:56:90:45:4f:7f:78:8c:db:
                    b1:8f:ea:53:c2:96:97:51:6d:2c:7a:ab:35:cc:09:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:CF:69:E4:94:CF:1D:91:FA:FF:7F:71:E5:48:E8:B8:49:DD:02
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:a2:c4:c9:66:40:2e:de:e9:6c:f4:ae:2b:15:53:94:de:
         f9:60:de:7e:66:82:a4:09:b3:54:e0:82:2d:fe:63:5f:dd:b0:
         dc:1b:1a:55:22:2c:a4:3d:bd:e9:d7:b6:62:db:47:03:ee:84:
         2b:59:66:5a:0d:88:35:71:94:98:c7:a5:63:14:08:e3:66:7d:
         37:b0:e9:3e:e5:f1:5c:68:51:fa:f5:fe:a5:4f:cb:d9:84:39:
         1f:50:76:93:29:87:14:27:ed:7c:a7:0a:59:7c:5c:d7:bb:09:
         3a:0b:67:a9:e7:9a:3f:18:a5:e6:43:e6:53:82:7d:b0:26:e6:
         4c:54:26:7c:f4:f2:99:51:b5:a7:65:b3:08:ef:76:42:9a:18:
         15:ec:b2:15:dc:54:d2:a4:e8:52:4c:dc:80:0e:45:8a:6f:61:
         96:e6:7c:d1:11:c9:37:2f:b8:19:06:b4:9c:e8:85:ef:23:0a:
         8d:ae:19:7c:c3:97:24:d8:6f:05:76:b0:ac:62:1e:2d:ad:bb:
         a0:78:dc:69:c4:1e:d4:6f:02:8d:d3:21:50:41:45:49:2a:4b:
         f9:46:d3:ff:83:f5:72:83:1f:c9:ce:ac:d1:95:a9:b4:46:48:
         10:f8:3f:1b:b9:c2:8d:46:5b:3c:a6:06:8f:c4:ce:33:03:23:
         29:67:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org