Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
File:                     eo-Oag5Y9XX8feHNg4R51_c_4nk.mft (raw, json)
Hash identifier:          2+J72AN/aNYGKhCJYQjsxBQ2rOCvvHvec57fh+Aq9Mk=
Subject key identifier:   E7:DE:3E:51:8A:56:D8:A0:EE:8F:9B:55:D6:C4:FA:BE:75:F0:B1:FB
Authority key identifier: 7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79
Certificate issuer:       /CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
Certificate serial:       33D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
Manifest number:          33C6
Signing time:             Fri 26 Apr 2024 15:17:11 +0000
Manifest this update:     Fri 26 Apr 2024 15:17:10 +0000
Manifest next update:     Fri 03 May 2024 15:17:10 +0000
Files and hashes:         1: eo-Oag5Y9XX8feHNg4R51_c_4nk.crl (hash: HrGQPXwlls4KwY4Om9TtYkVe3hdlRVRKeudXsBeZwf4=)
                          2: 92210D6AB66711EC86445C11C4F9AE02.roa (hash: qiqIFs0LgN2orxDBl6FaGNOcLtoVVwNR5vbd6zeu1cw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl
                          rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13266 (0x33d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91775B7/serialNumber=7A8F8E6A0E58F575FC7DE1CD838479D7F73FE279
        Validity
            Not Before: Apr 26 15:17:10 2024 GMT
            Not After : May  3 15:17:10 2024 GMT
        Subject: CN=662bc577-309d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:12:3e:2f:47:a3:6d:66:3d:68:41:40:62:
                    b6:6b:cc:d0:3d:57:11:08:42:4f:1f:c7:f7:19:f6:
                    01:82:de:88:57:e6:c1:26:68:a9:5d:9b:cf:2a:8b:
                    8f:7f:44:dc:b8:dd:a7:16:9d:6f:62:2c:ca:8a:6a:
                    f2:79:6d:e3:d5:fd:7d:ef:b8:7e:07:fc:f5:7d:6a:
                    04:6a:8d:98:1b:69:8c:1b:71:be:f6:de:a8:69:93:
                    25:30:00:d1:8b:04:13:5c:13:d7:c4:92:2f:a3:fc:
                    62:cd:5d:a1:d8:b0:a2:16:ac:79:66:d7:a8:09:08:
                    b2:6a:93:32:d6:1e:db:45:4d:13:b7:a2:f5:b6:ca:
                    84:65:ae:ea:55:5e:1f:ef:05:6b:b3:cf:c4:ee:09:
                    18:2f:05:e3:f3:84:db:95:29:9e:0d:60:ef:a9:48:
                    bf:de:13:df:88:f6:a6:02:ba:e2:ea:2a:dc:8e:3f:
                    b5:e8:a9:fa:1a:06:0a:3e:39:98:7f:90:fc:05:83:
                    9b:56:b8:35:b4:b4:f5:48:08:91:84:f0:f5:1a:1b:
                    ed:49:a4:63:63:e6:6b:db:41:4d:76:fa:ac:80:3f:
                    d7:fa:b1:63:b3:fd:c6:f5:8f:69:56:23:b6:42:0c:
                    4a:24:b8:85:80:a1:df:9e:6d:a5:82:41:29:3a:33:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:3E:51:8A:56:D8:A0:EE:8F:9B:55:D6:C4:FA:BE:75:F0:B1:FB
            X509v3 Authority Key Identifier:
                keyid:7A:8F:8E:6A:0E:58:F5:75:FC:7D:E1:CD:83:84:79:D7:F7:3F:E2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eo-Oag5Y9XX8feHNg4R51_c_4nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775B7/08A49BD21DA211E29364959408B02CD2/eo-Oag5Y9XX8feHNg4R51_c_4nk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:11:cc:21:d7:8f:65:8d:08:cb:7d:64:48:5b:36:3f:63:b3:
         5f:b6:98:0c:02:ad:54:16:8a:dd:d5:ac:e0:b2:e7:8b:ca:d6:
         a5:24:df:48:a2:c6:14:78:80:bc:16:d1:a0:ad:7b:d7:a7:3f:
         e2:6e:ed:31:fa:9f:58:15:0d:fe:4a:70:15:1c:f6:69:6c:db:
         40:1e:0a:57:3d:cb:db:8a:e3:12:2b:81:22:13:4f:3f:0f:bc:
         e6:75:e1:f2:c9:e6:3e:b4:54:d0:a8:14:c7:fe:a8:81:25:5e:
         82:49:37:32:4f:97:aa:c4:63:1a:45:3b:9d:34:a0:c2:97:09:
         d5:15:e2:54:83:e7:7c:09:3f:25:39:e4:7e:9c:58:b2:11:89:
         ff:19:33:04:76:55:e8:17:44:c4:eb:e2:82:99:59:49:d0:92:
         08:2b:a3:14:43:60:04:f1:45:ce:0b:59:3d:ab:c8:7d:c4:61:
         a4:4c:28:dd:2f:52:80:d8:73:45:ca:3f:00:b9:80:17:f1:f1:
         dd:99:40:8c:47:a0:3d:cd:79:f1:bf:38:e6:8b:4c:ad:25:4c:
         22:e8:53:c7:f9:ce:47:8b:b3:84:6f:67:d5:4b:bb:41:34:c0:
         43:d7:5f:0c:3a:76:7a:de:c0:8a:7c:ce:ab:d2:55:1f:0a:df:
         96:38:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:12 2024 by rpki-client on console-ams.rpki-client.org