Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft
File:                     AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft (raw, json)
Hash identifier:          T/28AYF02PlpJhLLfXbYDbLsUIXh2HRhhv+QfvJGv70=
Subject key identifier:   D1:6C:88:4C:42:AC:E2:41:4B:14:2A:6A:38:C5:8F:61:ED:75:5C:6D
Authority key identifier: 01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C
Certificate issuer:       /CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C
Certificate serial:       13E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft
Manifest number:          13E0
Signing time:             Sat 18 May 2024 17:27:54 +0000
Manifest this update:     Sat 18 May 2024 17:27:54 +0000
Manifest next update:     Sat 25 May 2024 17:27:54 +0000
Files and hashes:         1: AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl (hash: rwU5GUhnHEaq2j7sFdbWDdVk2DuPIqiSpolmfNHE1lY=)
                          2: 49CB8044609511E8BF4FB410C4F9AE02.roa (hash: l3UfwENOL7ee8Yc6k4lA7+v8EPlvnjmfOhmD+k8SMQc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl
                          rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5097 (0x13e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAA31/serialNumber=01402253F31BCACFFB73D685D700C9B6B741043C
        Validity
            Not Before: May 18 17:27:54 2024 GMT
            Not After : May 25 17:27:54 2024 GMT
        Subject: CN=6648e51a-9419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:6f:c8:da:84:a1:1f:d6:c3:aa:25:b6:7e:
                    8a:4a:34:47:5f:15:47:80:39:15:74:42:d9:80:6f:
                    80:fb:7d:ea:87:4c:48:6a:22:c4:40:5a:3f:76:fe:
                    2e:79:4b:9b:88:b5:13:68:19:68:4a:e6:b0:71:0a:
                    57:c8:a1:b9:5b:c9:02:dd:06:1b:29:a8:dc:eb:91:
                    32:68:2e:08:f4:41:46:43:01:f7:5b:b6:32:bd:48:
                    8b:51:75:f1:09:27:48:58:11:de:8d:23:e7:cd:bc:
                    1f:fc:33:13:de:b2:dc:d5:19:70:98:41:7f:1f:1e:
                    91:ee:77:45:d3:7a:34:e9:7b:82:48:da:ca:70:d0:
                    fd:50:9a:0e:c6:00:11:62:58:0f:be:61:fe:c5:1c:
                    ca:30:69:83:9a:1a:d3:33:3a:98:c0:95:b9:3a:7b:
                    e5:a4:dd:1b:6f:b9:e7:ca:d9:24:79:6b:e1:d7:17:
                    13:eb:21:08:9d:17:8a:1a:0d:ef:2c:a6:e1:4f:63:
                    c4:b5:0f:92:15:49:7d:93:f7:1f:fa:a9:99:0a:94:
                    79:eb:30:ba:04:c2:9b:eb:e1:5b:69:ab:b8:11:25:
                    a0:0d:69:d6:2a:7f:5d:ed:64:b0:bc:90:a5:23:37:
                    03:36:de:c0:df:f7:0b:92:4c:40:ba:b2:77:dd:42:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:88:4C:42:AC:E2:41:4B:14:2A:6A:38:C5:8F:61:ED:75:5C:6D
            X509v3 Authority Key Identifier:
                keyid:01:40:22:53:F3:1B:CA:CF:FB:73:D6:85:D7:00:C9:B6:B7:41:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AUAiU_Mbys_7c9aF1wDJtrdBBDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA31/DD644878609411E8B56C1810C4F9AE02/AUAiU_Mbys_7c9aF1wDJtrdBBDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:01:e5:ae:92:90:29:98:7f:a0:ad:42:e4:7e:8f:9c:74:2b:
         32:c3:5d:bc:0e:9b:52:3e:0f:91:01:bc:43:a3:75:38:7d:27:
         24:4f:ca:99:00:54:3b:ae:1a:82:82:e6:24:aa:55:85:45:9b:
         1a:a5:69:ea:30:64:7b:ac:4c:f8:c3:ac:53:c5:76:aa:15:c1:
         ee:a9:68:33:ce:b6:27:6e:9e:ce:97:52:e0:3b:dc:1d:85:5d:
         95:7d:10:21:f2:7c:06:7f:a6:56:56:06:e9:b7:90:07:5d:2d:
         16:af:c8:d3:13:82:57:52:8f:c8:ef:2c:5b:86:88:7b:ab:48:
         8e:78:bb:7d:d3:ca:d3:2c:91:68:2f:8f:3e:83:2f:ec:12:10:
         bc:ed:fd:38:4a:fb:f0:11:27:8a:b4:fb:c0:77:43:5d:cb:09:
         3e:16:94:d0:d6:a8:af:63:4f:1d:2c:d6:a9:4a:58:50:b7:2d:
         e7:16:40:16:a2:60:ce:b6:22:76:e1:15:c4:66:54:da:8f:b0:
         0e:99:2e:b4:63:34:12:68:fc:d5:17:98:e0:d5:b6:69:02:e5:
         39:f7:dd:bd:e8:98:4e:5d:d1:34:ea:ee:9b:d3:e7:f8:ad:7a:
         6e:cc:a0:3e:95:27:11:9d:15:36:0d:3f:74:bc:3f:eb:26:2c:
         cf:cc:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:40 2024 by rpki-client on console-ams.rpki-client.org