Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          yNy4sDRBBMw/k2vm8vj3RxFSzUxMhHFMN5opv0jufMk=
Subject key identifier:   83:37:0D:4C:78:7C:88:21:5D:67:B9:26:6D:9D:CC:7D:B3:6F:43:6F
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          DC
Signing time:             Sun 19 May 2024 06:03:50 +0000
Manifest this update:     Sun 19 May 2024 06:03:50 +0000
Manifest next update:     Sun 26 May 2024 06:03:49 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: GEJCWG4Sbqfh31DaqJm5bKUwO7ziT1PteWu68/0H5GY=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: 40grfM9Blc8mWrQHxfsLKS/1IkrQAzi1kEJy1AiE/G4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: May 19 06:03:50 2024 GMT
            Not After : May 26 06:03:49 2024 GMT
        Subject: CN=66499646-d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:9d:9c:89:87:48:b1:d6:ad:43:20:a1:7c:
                    d2:11:3c:6d:f5:be:9a:5c:88:f3:72:77:e5:ae:92:
                    33:79:d6:f6:96:60:d8:45:64:2b:13:72:87:94:14:
                    42:4e:ba:a7:1c:39:23:c5:02:b9:d1:88:9a:0d:7c:
                    14:8e:ac:c0:b6:04:d1:16:75:5b:8d:f4:2e:71:44:
                    80:2a:48:26:89:97:ae:16:bd:25:8f:7a:b6:b8:0d:
                    69:1e:1b:29:b6:b7:2d:62:d6:20:fa:67:11:72:33:
                    4b:53:55:d8:48:b6:97:52:64:bf:a9:59:6b:1c:38:
                    bb:50:13:0f:80:dc:98:52:1c:4a:ea:88:87:bc:6b:
                    8b:d1:b5:40:90:0c:32:17:cf:fc:17:b7:d5:29:af:
                    26:3d:79:2e:fa:4f:17:78:8c:77:6e:dd:e0:54:f4:
                    44:9d:ed:7b:7d:ed:a0:50:f9:fa:83:12:24:bb:57:
                    ed:29:84:ac:c8:4d:db:48:6b:2e:6b:3b:82:19:d0:
                    3b:62:8a:82:07:d7:9e:fe:fc:31:67:b9:f5:02:1d:
                    f5:77:99:47:da:1a:a9:1f:c4:99:07:7e:48:1d:40:
                    d4:c4:11:29:69:b0:ab:19:0b:22:c5:ca:c2:8c:8d:
                    1e:7d:fc:8f:09:9e:a2:9e:83:35:74:16:85:66:2d:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:0D:4C:78:7C:88:21:5D:67:B9:26:6D:9D:CC:7D:B3:6F:43:6F
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:df:cd:55:d5:75:74:15:0b:dd:e0:0e:bb:64:51:db:36:
         3b:28:c6:ba:3c:e5:5a:de:bf:e0:b1:37:64:66:56:ea:f4:12:
         32:d2:2b:21:e9:a1:18:fb:4c:54:0c:d7:58:60:0a:b3:d0:8a:
         50:6f:c9:2b:f2:0e:23:1a:8a:49:fb:22:4d:cc:fc:23:91:66:
         84:bf:e0:72:53:fa:11:51:ec:5e:3d:18:84:63:a1:87:ac:0f:
         a7:66:40:48:22:6a:f5:cf:9a:01:8a:86:d4:24:bc:1d:d1:44:
         72:0f:aa:54:bf:a6:66:9b:78:ac:40:1e:33:be:79:2e:f9:37:
         fb:d9:52:8e:ca:a0:4e:cb:89:48:99:27:8e:38:72:e5:61:93:
         c2:a1:e5:73:f9:17:61:e1:3c:52:b1:03:c4:bb:87:5a:e2:37:
         ce:6c:87:7c:8a:cc:7e:fa:19:b3:b3:77:f2:fa:9e:ff:c5:85:
         54:4e:8d:3d:9c:41:e5:19:60:66:2b:c3:a1:61:29:e4:f9:58:
         7d:cd:f9:88:0d:03:cc:29:13:1b:64:eb:1b:46:46:3f:de:84:
         7d:95:46:d8:95:c6:7e:0f:a1:3c:2d:16:58:69:8a:e3:82:ff:
         6c:99:5e:6f:63:ca:f6:eb:16:a1:4e:11:e8:f1:93:bb:3c:57:
         0d:dd:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org