Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          UNMeYvWGIaZLZOaMNOogLq4aCR2rh/po8+z1S83gbwo=
Subject key identifier:   71:02:C8:F5:BF:DB:03:73:95:65:22:60:CC:A2:58:3A:AF:EF:CF:54
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       09F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          09E8
Signing time:             Fri 26 Apr 2024 20:42:27 +0000
Manifest this update:     Fri 26 Apr 2024 20:42:26 +0000
Manifest next update:     Fri 03 May 2024 20:42:26 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: etPsGBcpTGkk0JpHF99muDEXFIu/fcuf4l8oMuOszEw=)
                          2: 13321D24572211EA88CE445FC4F9AE02.roa (hash: PxUVVNoyJKRaoEj5rSN33CxmvUZP8WI87texd/MUtbc=)
                          3: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: nYCpwrhcAXvwunrp5b05kI9OwjiFmz5d4JEVvWDSETo=)
                          4: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: 7rFH7sMACJD0R2lMGO0AlTFs+T1bRVvbCnlIn+IAyek=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 20:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Apr 26 20:42:26 2024 GMT
            Not After : May  3 20:42:26 2024 GMT
        Subject: CN=662c11b3-48de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:90:46:f0:46:85:9a:f3:ac:2f:9e:d8:83:
                    f6:75:63:65:e5:44:59:67:ba:e5:bb:77:50:c7:73:
                    ee:68:2c:71:5e:f5:12:31:3d:6b:09:eb:9c:08:71:
                    90:06:c2:9d:1b:28:10:88:12:98:02:a2:bd:9f:a4:
                    5c:34:2f:c0:ec:f6:61:e3:97:89:58:32:bf:4b:be:
                    15:86:4d:51:1e:06:90:1a:fb:a3:83:d2:ea:94:57:
                    bb:2f:f1:93:dd:a8:a6:0f:85:20:be:3d:6f:bb:13:
                    fb:1f:54:73:97:25:a4:e4:bc:7c:89:a8:07:2c:2a:
                    5e:32:4c:d7:ba:1f:33:75:aa:09:d9:6b:7a:42:b2:
                    2c:c0:67:87:95:34:46:b8:2c:c4:9e:fc:12:7c:07:
                    d5:24:a4:91:ee:d0:5f:b9:af:bb:0d:d8:2b:52:ea:
                    3c:71:6d:e5:73:9a:16:78:d4:a3:71:36:29:db:e1:
                    28:c0:9a:17:73:a3:4b:ae:48:39:bd:7e:a2:af:b5:
                    d5:05:eb:3e:cc:e8:a8:be:8d:6a:6a:23:8e:d5:f2:
                    c7:04:08:78:21:7c:9f:29:39:7b:9e:c3:00:9f:9d:
                    8a:56:19:58:47:91:c1:39:c7:92:1b:eb:74:8c:04:
                    9c:ca:a2:e0:12:ca:48:74:82:1e:f5:ac:57:f3:69:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:02:C8:F5:BF:DB:03:73:95:65:22:60:CC:A2:58:3A:AF:EF:CF:54
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:9f:4c:19:d5:8a:9b:dc:45:aa:7d:7b:bb:a1:35:89:43:
         98:47:eb:1e:95:1d:e2:f3:42:dc:68:70:2e:74:55:fc:ef:25:
         4d:78:98:8f:69:72:b3:f2:d6:4f:1e:3a:3d:9b:85:b7:ea:ff:
         05:e6:09:59:73:2a:2c:7b:d2:58:25:46:b3:22:5e:54:10:26:
         c0:6a:fc:b7:7d:0a:72:2e:ce:21:2a:a2:87:43:d8:1a:21:7a:
         6d:35:b3:db:b7:ae:a1:b3:12:aa:e8:07:ee:d1:97:98:31:63:
         d0:05:eb:2e:0b:f7:32:ff:77:00:9b:ec:df:65:a4:27:e1:de:
         18:69:8c:50:c5:4d:af:aa:ae:6d:18:e5:d2:81:f4:45:ff:59:
         4c:58:84:a4:81:1f:1d:c7:79:f2:5e:85:91:97:a2:6f:90:51:
         73:8e:8b:98:70:76:b2:29:12:ef:29:3b:9d:cb:55:d1:a4:f6:
         77:3c:82:23:cd:c4:b6:60:83:2b:6b:a0:dc:e0:ee:f3:c2:b8:
         be:6c:56:5c:5c:63:97:78:b7:32:eb:3a:81:dd:5d:d3:cd:c5:
         2c:dd:b5:58:d6:5b:f5:20:3a:25:b5:01:aa:f8:b6:93:ca:4c:
         2b:be:7f:dd:87:13:77:bb:5d:e4:a9:29:cc:7d:f2:6d:54:51:
         7d:77:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:34 2024 by rpki-client on console-ams.rpki-client.org