Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
File:                     DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json)
Hash identifier:          JF6iUW1n7Cm70LUfdKmtAy7i6PVWkevB1tmZlx1ZXDk=
Subject key identifier:   5B:E7:23:34:3C:22:CD:5B:A3:E0:A2:3A:BA:14:B8:85:9A:33:0E:B2
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
Manifest number:          01E7
Signing time:             Fri 03 May 2024 04:22:27 +0000
Manifest this update:     Fri 03 May 2024 04:22:27 +0000
Manifest next update:     Fri 10 May 2024 04:22:27 +0000
Files and hashes:         1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: 2WvICPQ4sMLrWN6tFRol1zuHUFl2jNn/Vyxr/qh6dbM=)
                          2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: YUQZgRKxogNzUs849ku1xQo4epAKXn/O/pa7Kgb5Ll4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: May  3 04:22:27 2024 GMT
            Not After : May 10 04:22:27 2024 GMT
        Subject: CN=66346683-f5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:c9:37:ea:72:a7:e3:eb:14:c4:ff:9f:68:
                    c5:9f:8a:da:ca:8f:30:cb:c5:d1:a8:b5:fa:30:a2:
                    e6:96:1d:4b:6a:03:a5:14:96:39:26:3a:a4:f4:2c:
                    99:a5:0c:bf:05:b2:3b:3d:f1:53:f0:83:86:04:2c:
                    e4:05:21:c4:67:70:5e:99:5a:5d:3c:27:bd:54:e0:
                    75:23:31:b1:8a:14:df:8b:40:ca:e7:e6:40:21:4f:
                    59:74:d1:d1:cf:ae:0f:f6:a9:a9:62:1c:6a:a4:a5:
                    d5:72:37:51:72:2e:5c:a2:95:97:9c:62:d3:d3:cb:
                    9a:43:d4:b0:2f:c5:37:88:e7:b2:29:fa:a5:1b:58:
                    73:d4:b8:0f:dd:f4:eb:1f:27:2c:22:e7:b7:34:d6:
                    a3:b3:69:ee:e3:f7:ba:cf:85:f8:aa:3f:53:d4:51:
                    0b:8d:2c:71:62:eb:37:51:d3:d0:a8:ad:2c:c1:c9:
                    0f:39:80:af:d2:60:33:f8:a2:68:45:81:f9:e5:90:
                    82:46:89:a7:c2:0c:e3:9a:06:81:ca:11:70:3b:22:
                    84:8f:0f:a0:0c:fa:01:dd:ba:ab:01:a5:04:23:45:
                    66:93:8d:85:74:75:04:4c:e1:88:55:61:4d:a2:52:
                    0e:2b:f9:3d:cf:09:89:75:ab:27:10:95:67:dc:2e:
                    df:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E7:23:34:3C:22:CD:5B:A3:E0:A2:3A:BA:14:B8:85:9A:33:0E:B2
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:86:1b:66:aa:73:b0:e7:91:1f:6d:16:f8:1e:3d:75:6e:
         79:8a:dd:64:e6:5d:15:2d:c0:83:8d:41:9b:00:d1:80:9b:a1:
         4d:ce:2b:a2:e2:3e:c7:67:1b:2d:d3:c1:c2:e8:91:ef:40:65:
         a6:29:61:57:2e:3f:3d:c5:a5:30:fb:14:5c:0f:06:da:52:99:
         9c:67:d6:90:98:e2:d3:2e:b6:4b:04:b7:1c:06:df:6e:1c:b7:
         64:35:3e:c7:c7:44:66:2b:44:0a:f6:a8:e4:a0:fe:a2:67:08:
         d9:58:60:8d:e1:b4:ee:30:a8:3a:7c:70:66:92:68:1e:9a:44:
         0d:51:1f:12:ee:92:00:7f:65:d8:7c:ed:3a:59:d4:a0:19:4c:
         a0:8b:00:05:03:70:65:ef:25:c8:a7:b6:03:67:28:d4:60:25:
         a2:1d:00:a7:15:85:41:7e:92:62:46:5e:73:37:aa:ba:be:1f:
         4e:86:74:60:86:64:2f:2c:1a:aa:90:42:55:04:56:b1:c6:7a:
         41:95:44:ff:fb:ee:a6:66:12:95:bc:f0:35:24:ea:59:cf:00:
         2b:f4:0d:7d:81:18:a7:b4:b1:3d:35:b9:67:bd:2d:6e:84:16:
         56:63:68:75:d5:1e:bb:f8:39:14:c8:5d:57:98:78:31:8a:4e:
         1d:04:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:32:32 2024 by rpki-client on console-ams.rpki-client.org