Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File:                     EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier:          2Biabz1CDvb5IFgSdh7SPo5deZjmv6Pa7mwiPAfAQH8=
Subject key identifier:   CA:33:F3:EB:4C:88:D9:D0:79:F9:57:50:D5:02:55:74:25:A3:FB:5A
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number:          ED
Signing time:             Sun 05 May 2024 05:54:46 +0000
Manifest this update:     Sun 05 May 2024 05:54:45 +0000
Manifest next update:     Sun 12 May 2024 05:54:45 +0000
Files and hashes:         1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: BL/hDJj5//AORkp2eAVwHNf30yXFsKAvRtWt36TRgfg=)
                          2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: Wf8nYA+t9HD4VHUkOzVWpMXetJg2S16feJ3kI9eoFho=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
                          rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 05:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: May  5 05:54:45 2024 GMT
            Not After : May 12 05:54:45 2024 GMT
        Subject: CN=66371f26-688c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ad:40:c8:27:5b:f3:a0:17:56:a8:38:d7:34:
                    4a:da:d2:14:3b:3a:06:91:d1:6f:9c:ae:28:4f:0c:
                    d5:f6:6e:37:72:24:cc:10:ac:91:49:e3:58:e7:9a:
                    70:b0:79:1d:83:12:ed:31:28:c4:9d:a9:2f:59:7f:
                    73:d6:4f:fc:ad:ba:ed:5d:ce:29:45:69:28:3e:58:
                    69:9d:7e:9e:3d:f3:98:b5:28:20:fc:cb:8b:ee:a7:
                    68:46:06:95:44:da:2e:f1:d0:52:e4:c3:ad:8f:27:
                    63:a0:28:30:0c:20:e7:0b:6e:67:80:f2:90:7f:13:
                    e1:08:15:33:af:02:a8:19:d0:84:92:1f:84:ed:88:
                    98:29:73:05:76:d3:a1:95:86:c3:7d:b8:b3:43:f0:
                    a1:9a:f4:d2:12:7a:82:ed:2d:89:73:93:20:8e:4d:
                    e5:55:fb:2b:f1:fb:bb:32:12:6a:b0:c1:ab:1b:57:
                    fe:13:8f:8a:6a:09:b3:61:e7:d2:6d:88:b0:ef:de:
                    17:16:ee:48:29:e3:97:0e:82:80:57:1d:9a:37:ca:
                    bb:23:d1:b0:2e:f8:f2:2c:cd:af:64:18:d6:50:1a:
                    ed:87:9b:3d:4f:13:51:ca:05:b1:6f:54:a7:aa:79:
                    7f:c2:a4:1e:71:42:1f:77:1c:c9:8d:58:92:b5:63:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:F3:EB:4C:88:D9:D0:79:F9:57:50:D5:02:55:74:25:A3:FB:5A
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:ac:46:a0:c6:c3:a2:b1:57:de:ed:63:5f:29:31:bb:42:
         ec:e4:88:f9:8b:bb:e8:27:45:c2:56:67:ed:1e:71:bf:c6:83:
         8a:c1:14:c8:c7:c1:1c:ae:03:c6:46:09:74:c5:4a:c3:7e:6c:
         71:60:62:14:de:d2:d1:6b:92:c3:12:78:aa:8e:d7:a9:3d:69:
         c1:03:74:1d:6b:5c:d5:f3:a7:4f:89:90:d1:32:5b:1f:56:9f:
         70:b5:01:ec:dd:aa:fe:fb:12:f4:bc:ff:87:ed:0c:26:6b:8e:
         3e:dc:9d:22:17:5f:04:c5:4f:d7:6a:fc:21:60:3a:f6:32:3c:
         2b:1d:75:14:c6:ed:d3:c0:1d:a2:95:c4:45:e8:61:b2:3c:68:
         f0:5b:d2:6c:23:b3:c5:ce:a6:e7:98:e7:a3:04:84:d8:1b:14:
         ff:88:2b:98:88:cc:28:80:34:02:bf:81:b1:a7:3d:ff:30:b0:
         d6:e9:11:b7:f9:d9:32:6b:e4:5c:f3:78:45:15:a3:37:86:d0:
         53:ab:47:2c:12:f8:35:63:9c:a3:e3:d4:1b:7a:15:95:1b:eb:
         7f:b5:9a:56:69:2c:55:5b:04:47:d5:c4:05:3d:41:b2:af:11:
         7f:05:1b:52:06:ad:31:68:ea:60:18:68:4d:a6:3b:68:85:55:
         d0:24:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:21:06 2024 by rpki-client on console-ams.rpki-client.org