Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          sVKR3C89z9Y8G8SlQ1efWuNLTCG3FILmFFkbZ2veWR0=
Subject key identifier:   EB:1D:66:68:D9:98:71:6F:F8:16:03:95:5A:2E:28:0F:9B:9E:51:A8
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          5A
Signing time:             Wed 15 May 2024 07:49:59 +0000
Manifest this update:     Wed 15 May 2024 07:49:58 +0000
Manifest next update:     Wed 22 May 2024 07:49:58 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: T2fIJvO67FKPZzFmcBJ3x7rFOJBLMIt/RdFa39d+DLs=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: Zs2Z+hAq1MAHKiuGtG/bZ3NLLDe/abdCjv4LPoTmR14=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: May 15 07:49:58 2024 GMT
            Not After : May 22 07:49:58 2024 GMT
        Subject: CN=66446926-fa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:51:fb:ef:da:3c:a4:68:2c:85:f1:1d:52:
                    29:90:1a:62:d4:98:25:f7:43:d5:44:00:b7:a7:37:
                    3c:70:e5:70:a2:9c:a5:2d:76:17:70:e1:e7:4a:13:
                    de:83:9c:40:ab:51:e3:fe:a7:a9:bc:8e:ae:d6:d3:
                    c6:a4:45:87:fc:2e:d3:91:14:1f:41:3f:0a:6c:c1:
                    13:56:50:1c:9c:de:77:2f:d7:a5:52:1a:18:8e:1b:
                    97:1b:91:26:0b:71:e3:80:32:f7:c0:d8:3a:f1:ba:
                    fd:ca:5f:90:a5:65:18:6a:e8:02:2b:98:ea:42:3a:
                    a1:0d:45:72:f3:e8:e5:4d:91:4f:56:78:30:47:fc:
                    33:23:0a:46:a7:df:1b:53:3c:59:e5:13:7a:57:70:
                    01:3b:11:24:ad:3d:fc:f5:af:36:7a:d3:bc:11:09:
                    a1:8e:25:d0:b7:91:bb:24:fc:fc:bd:0d:98:fb:ba:
                    42:a9:98:fc:2b:37:9a:ef:30:8d:a5:d7:36:b4:33:
                    7b:b8:cd:fd:ce:91:41:6c:a0:a8:8f:ed:f1:1e:a6:
                    24:bd:e1:9e:91:fa:9e:59:f5:19:32:dc:df:aa:16:
                    24:a4:93:73:3b:1d:b9:db:aa:0e:fd:53:95:e5:79:
                    5c:69:ad:42:1c:d1:c6:3e:dc:25:56:a9:bc:3a:e7:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1D:66:68:D9:98:71:6F:F8:16:03:95:5A:2E:28:0F:9B:9E:51:A8
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:e3:a9:b2:b8:17:35:ac:60:c3:e9:ca:fb:1d:f0:fd:d6:
         15:37:89:60:76:64:6f:20:81:71:4c:2a:11:61:31:1f:8b:51:
         ae:0f:aa:4e:5d:98:88:4a:ed:83:e7:03:4f:3b:d0:f1:6d:db:
         a3:96:6e:d8:29:96:7b:dd:af:14:bc:7f:57:e1:cd:e3:ca:78:
         df:e5:8c:a2:06:9c:e2:d0:11:62:ac:b7:24:f7:9f:90:42:59:
         b0:f2:6c:70:07:f7:30:43:4d:45:34:c7:01:8f:8f:0e:44:bb:
         ac:2e:23:4b:26:97:40:f4:99:f9:8e:d7:b3:d3:07:e6:c7:26:
         c1:46:e6:6f:f6:36:9a:2d:df:78:00:0b:d9:64:85:8b:31:2c:
         b3:e6:a3:de:3e:33:ec:11:7f:b6:5e:72:aa:db:f4:c3:b0:54:
         e5:87:72:b4:33:a3:30:65:b0:84:d1:0c:06:56:9d:bb:e4:91:
         54:f5:c5:63:e1:58:30:39:f7:39:2d:d0:3f:6a:3c:c8:32:e0:
         2a:6a:5f:f6:72:a7:7c:77:f8:db:31:ea:42:3e:be:9a:07:7a:
         90:1b:a8:3b:ed:fb:e8:47:36:53:07:2c:e4:5d:cd:b2:1b:e4:
         43:fa:07:5c:75:56:cf:c7:50:0c:3d:a9:60:a7:db:f7:37:fe:
         19:d9:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:27:27 2024 by rpki-client on console-fra.rpki-client.org