Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
File:                     EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json)
Hash identifier:          o0Uoy7HNeXc8NFy1dp8BJj/LnX9683f0aO/zkFwJ3Gg=
Subject key identifier:   49:A3:8A:E5:8F:00:9D:9C:F6:62:90:CC:77:66:FD:3F:0D:26:2D:8A
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Certificate issuer:       /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
Manifest number:          C3
Signing time:             Fri 17 May 2024 06:42:07 +0000
Manifest this update:     Fri 17 May 2024 06:42:06 +0000
Manifest next update:     Fri 24 May 2024 06:42:06 +0000
Files and hashes:         1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: p6A5NTWypDumV5a95ZvTFHjEgiISB8TyEsPAMMy+718=)
                          2: DD3E1594135411EFA8C34E30C4F9AE02.roa (hash: V2luil4xWHIOyr0OpGy79m4G/EaerQQaOxEWKBeuquw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
                          rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
        Validity
            Not Before: May 17 06:42:06 2024 GMT
            Not After : May 24 06:42:06 2024 GMT
        Subject: CN=6646fc3e-4823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:8f:fc:66:45:7d:e6:d3:ed:5e:ab:1b:b9:
                    3a:7f:3a:99:af:03:61:51:5a:bd:52:26:2a:4e:e3:
                    0d:11:f1:72:8f:f9:82:0e:7e:46:75:47:87:68:16:
                    46:5c:9f:3e:1f:28:b2:94:5d:7d:60:5c:6c:bf:d9:
                    4e:72:ca:e6:4d:ef:42:99:5f:b8:07:9b:50:de:8b:
                    cf:41:a6:c6:1c:5b:46:37:a9:3c:b0:d5:61:c2:12:
                    8e:77:90:ae:03:07:1e:88:c0:65:f5:c5:11:3e:94:
                    7c:45:b7:0e:53:d8:de:ca:a7:83:99:50:a9:dd:61:
                    fa:cf:4e:9f:2b:53:2f:e9:e7:35:9e:af:e0:1a:10:
                    75:20:60:f4:54:fa:f8:ab:53:d4:c8:55:9c:ed:1b:
                    53:67:a4:92:49:ae:cb:06:4e:3e:79:09:6b:4e:c9:
                    f6:38:9e:7b:83:58:b6:c9:2d:44:18:3b:4b:83:0a:
                    3b:ce:22:f7:75:59:49:9b:0a:44:82:cf:b3:14:76:
                    23:b9:a9:b2:d3:69:b6:1b:f0:b9:48:35:0a:3c:25:
                    99:80:ff:27:80:52:0a:87:8b:83:40:d7:0b:f6:50:
                    05:64:95:1f:68:44:3b:99:6b:1b:59:41:d0:6d:6c:
                    60:41:06:a7:e5:d3:e3:b7:cd:d3:34:c4:79:80:4f:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:8A:E5:8F:00:9D:9C:F6:62:90:CC:77:66:FD:3F:0D:26:2D:8A
            X509v3 Authority Key Identifier:
                keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a3:3a:7c:9b:51:89:36:8f:98:27:98:78:0e:e5:3d:1f:af:
         a1:d3:d5:83:ca:90:e1:a9:30:3c:39:e2:00:77:fd:e8:8b:4d:
         2f:a4:21:fa:0d:46:17:fa:ab:36:c9:5d:b0:b4:1e:e0:c6:cc:
         c4:13:26:48:2f:ba:11:43:cc:a5:75:cf:a9:30:35:fb:d0:5b:
         be:39:7b:2f:58:25:3f:07:48:d6:a7:3c:4c:58:10:28:e1:9c:
         1f:16:4c:ac:44:08:d4:4b:f6:09:31:79:84:da:1c:c2:52:ac:
         2b:2a:52:63:79:17:fc:0f:99:ed:42:5c:37:47:08:9d:f7:41:
         3f:8f:54:f7:99:08:7f:20:ec:22:df:9e:11:a1:ee:df:9f:8f:
         71:d9:13:31:9d:a6:1d:49:68:c4:7e:d2:33:75:3a:cf:84:50:
         f4:46:4e:1f:40:07:d8:df:0d:26:77:9a:f0:6d:67:c7:d1:ee:
         54:d1:3d:c4:29:d3:d8:5d:ef:50:78:9c:f0:dd:5a:fd:af:02:
         28:e4:b6:0e:82:28:90:8c:f5:b8:ef:d1:b8:a3:7e:87:4a:87:
         c2:a7:0c:05:52:a0:e5:09:b6:28:d5:1e:2d:81:fb:17:c9:7f:
         58:f3:1e:aa:3a:c8:b0:c2:21:7c:9d:16:dd:07:a8:e1:f5:c1:
         5a:0b:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org