Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          1Ua8I+26D56shLe5YCUo87jfzMcNhQNEhK2X2ffQ2JY=
Subject key identifier:   EC:8C:FD:FA:2D:BA:D3:25:C8:55:8E:3F:1E:97:99:F5:5F:4B:FA:CE
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          05E7
Signing time:             Sun 19 May 2024 00:01:33 +0000
Manifest this update:     Sun 19 May 2024 00:01:32 +0000
Manifest next update:     Sun 26 May 2024 00:01:32 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: q/V50uohDrJsZusgVy2EBJNwbGAqiTv5Lem8zLxzDxk=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: 72PHQnUdU3WjCUKRcL9eGIw/UtPp4nnpnkONz19Mzug=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: May 19 00:01:32 2024 GMT
            Not After : May 26 00:01:32 2024 GMT
        Subject: CN=6649415c-39f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:83:8b:5b:2a:0d:4d:99:04:60:a3:9a:47:
                    fc:f1:64:90:d1:17:4b:7d:14:4b:90:3a:98:c3:df:
                    4d:c1:d4:e3:97:07:95:43:52:29:71:28:72:fc:3a:
                    1d:f0:81:d9:3c:82:25:1c:65:4e:2b:f3:19:2b:fc:
                    0b:d6:13:a3:4e:4c:a6:23:e1:8f:79:e9:8a:35:40:
                    e8:25:f9:96:85:0c:7d:fe:f8:38:7a:86:af:da:c1:
                    a9:17:6c:63:60:85:ac:86:bb:93:2d:94:57:44:ed:
                    ae:ac:d5:66:9f:ca:f7:27:df:1f:0b:10:e2:02:0c:
                    5d:24:4e:2e:0a:d5:38:53:d1:e8:69:0a:2e:11:05:
                    46:24:a9:88:1c:87:71:a3:25:c2:dd:8a:b2:5c:d4:
                    39:50:cc:bc:ac:1a:d2:ff:df:e3:a3:ca:e6:2d:8b:
                    52:45:17:61:15:36:bc:82:7b:59:c2:35:6b:8b:61:
                    ad:f0:62:9f:54:e2:ce:0c:db:12:06:e8:0a:69:8c:
                    a1:66:3e:a5:94:51:84:ab:e9:91:0d:a2:ce:57:bb:
                    55:94:b5:fb:41:78:af:5b:95:96:8d:a0:99:b6:83:
                    87:06:67:80:f7:ca:1a:1d:a0:0a:35:5e:93:02:12:
                    92:0c:e2:7c:48:2d:b1:d0:d5:8e:5a:a7:66:a2:bd:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8C:FD:FA:2D:BA:D3:25:C8:55:8E:3F:1E:97:99:F5:5F:4B:FA:CE
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:26:50:0a:8e:86:04:e2:19:1f:ba:df:17:96:a8:c5:9c:
         d1:7e:3b:55:37:30:2a:c3:e9:39:6f:9e:b1:6b:0f:78:b5:f8:
         01:a8:aa:6c:29:ea:34:4e:71:3f:fe:ee:58:3a:0b:30:e0:6b:
         4b:b3:77:e6:5e:81:02:9f:6d:22:23:3c:2e:f5:22:66:7a:24:
         f9:da:af:3b:03:30:3e:88:ad:bc:e1:1e:20:aa:cc:b7:1c:d2:
         33:c6:71:3d:97:65:8d:df:40:3f:b0:b9:2e:b4:0a:74:e4:f9:
         0d:a2:52:5d:17:b2:8c:3f:18:12:48:35:96:9f:d4:c9:fb:91:
         da:f0:c5:a3:33:45:13:62:8a:1c:29:4e:c7:bc:e4:19:80:eb:
         de:78:96:a9:4b:ab:b8:cf:bc:1e:8b:70:61:2a:9e:47:a1:8f:
         2a:81:18:5b:61:6c:bb:fe:95:39:2c:85:c9:b0:c0:ce:98:46:
         74:09:57:b3:41:64:72:82:f7:fa:cf:cd:b4:e8:f8:89:41:0f:
         18:f9:00:02:56:5c:d8:e2:f7:3a:ad:d9:19:53:23:27:e7:30:
         41:c8:ac:e6:1e:07:cd:8a:eb:c3:a4:3b:fc:8e:f5:dc:9e:ba:
         eb:27:54:4f:56:a9:ac:50:46:e3:6e:68:65:34:e7:be:be:f9:
         fd:25:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org