Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File:                     7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier:          30LvbWjFvNyad2rpVV8BJyPk3P/KDQERDuPRQEpF0BA=
Subject key identifier:   15:0E:7D:3A:40:F8:0A:8F:E8:EB:A6:35:1F:74:42:0F:D8:7D:9A:D8
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer:       /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number:          61
Signing time:             Sun 19 May 2024 07:39:16 +0000
Manifest this update:     Sun 19 May 2024 07:39:15 +0000
Manifest next update:     Sun 26 May 2024 07:39:15 +0000
Files and hashes:         1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: 3vRfsutJGi2YXBeu+PjKrV7HUdUCDx2AeP+P5nVHmP4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
                          rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
        Validity
            Not Before: May 19 07:39:15 2024 GMT
            Not After : May 26 07:39:15 2024 GMT
        Subject: CN=6649aca3-6930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:98:73:71:37:75:30:e7:23:d3:11:29:82:
                    76:87:fe:f6:25:3f:ab:f1:a1:d3:68:ab:6c:d4:b1:
                    d8:86:6a:b4:29:49:6e:47:81:9a:be:e7:0f:8e:46:
                    6a:fa:91:a1:8d:07:b6:69:ae:2d:a1:a9:81:99:ee:
                    9c:b0:e6:00:f2:22:02:3f:90:be:eb:dc:52:6c:29:
                    5b:0d:4c:86:74:18:92:16:93:cf:e0:2e:2d:0b:44:
                    52:6b:60:c1:98:96:15:8d:f9:1a:f4:9e:ad:67:c3:
                    4f:08:df:8d:bc:76:12:34:c4:9f:29:eb:c2:72:15:
                    80:fb:1b:7b:37:8c:27:44:89:5d:53:61:7a:7d:56:
                    cc:04:47:f9:51:28:54:43:73:53:ae:14:60:dc:88:
                    1f:4b:3e:2c:33:66:30:c3:d0:df:1e:0b:a6:85:7e:
                    d5:72:41:d8:67:d6:c4:ea:7d:64:28:e3:b4:96:e1:
                    d6:19:b6:ec:00:5c:de:62:f5:5b:93:33:42:1d:75:
                    c9:f6:2d:1f:a0:11:f9:55:33:0e:e7:84:d9:84:c5:
                    d6:5a:e1:a0:d9:23:21:5a:26:bd:d8:1e:3d:3f:3c:
                    f8:a9:af:d8:99:fd:42:66:e4:7e:79:3b:af:f3:ae:
                    35:4d:a4:f7:84:66:d5:15:e4:11:55:49:6c:94:15:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:7D:3A:40:F8:0A:8F:E8:EB:A6:35:1F:74:42:0F:D8:7D:9A:D8
            X509v3 Authority Key Identifier:
                keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7a:a0:5f:0c:b7:72:96:18:3e:59:ce:38:05:49:bb:11:84:
         51:fc:3a:e5:03:72:fb:08:69:ef:41:b2:60:32:e2:8c:e6:d2:
         35:6a:86:1d:3b:a7:58:cd:c9:3e:b9:1a:b5:5a:46:9a:c5:13:
         75:e2:a8:b2:e5:4b:b0:b0:d4:97:69:45:20:89:87:fe:c5:b3:
         fb:72:87:80:6f:04:ac:4b:46:63:b4:0c:ce:fa:9b:cb:30:60:
         d9:e7:7e:ca:c2:4d:4b:4e:ba:b1:5f:17:5a:a6:d3:42:56:52:
         0f:a4:48:ab:47:8e:42:0a:84:84:55:c9:ea:fe:99:f2:76:3e:
         22:48:17:c8:a6:e6:ca:d5:7a:27:d1:90:10:53:0a:3f:31:51:
         36:5f:e1:a7:92:4a:65:b4:ae:bf:0c:4a:8e:7b:5a:d7:d7:fb:
         47:88:bc:d5:65:2b:50:84:48:86:99:bf:95:44:83:83:94:c6:
         08:09:c1:60:c8:01:9c:40:71:e6:c5:37:8e:eb:ba:da:40:0c:
         62:1e:43:c3:6e:a4:4c:85:a8:67:d4:33:15:5a:67:75:69:36:
         c8:05:93:9b:2e:f8:4e:59:fe:0f:08:14:67:5f:c5:50:e2:a7:
         24:eb:07:57:a9:d0:dd:4a:cd:8c:85:40:89:79:4c:50:48:19:
         d3:55:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org