Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File:                     rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier:          CRQKhg6HW34OPTCP9LxVBWDOhJWX6q46A+MuJaFcINM=
Subject key identifier:   B9:FA:57:F9:4C:AC:7E:F5:C6:6D:30:8C:0E:0B:7F:C0:E9:1E:63:4B
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer:       /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial:       0799
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number:          0793
Signing time:             Sat 04 May 2024 22:21:07 +0000
Manifest this update:     Sat 04 May 2024 22:21:07 +0000
Manifest next update:     Sat 11 May 2024 22:21:07 +0000
Files and hashes:         1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: 8/i38nATpAo+ng3ZBgBhlcbOJeNAKxaS0wmgtqAmC1Q=)
                          2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: m5S5/2Sc1GXzQaY2Bfm+HphMpT1ySFy33p55zUYwl9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
                          rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
        Validity
            Not Before: May  4 22:21:07 2024 GMT
            Not After : May 11 22:21:07 2024 GMT
        Subject: CN=6636b4d3-fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:fa:17:99:20:bb:bb:86:ee:5d:f2:84:2b:
                    08:69:4b:b9:76:5a:65:25:8b:46:85:29:d8:31:da:
                    a0:17:7f:c0:37:3b:e4:98:44:77:83:2a:73:dd:c2:
                    a8:d4:8a:05:fd:2b:8c:5b:2f:6e:a2:9f:2c:4f:b4:
                    ea:2b:e7:c5:81:1e:eb:ab:4f:a4:26:b4:32:05:83:
                    71:c2:9e:80:c9:53:ae:81:f2:db:30:ab:dd:a7:26:
                    b4:f8:8f:5b:54:b4:cb:78:29:97:7f:e6:60:a0:4e:
                    de:31:f7:ce:ab:0f:b8:e1:c6:4b:82:d2:c7:db:7e:
                    c0:e4:9b:cd:86:76:48:8d:8f:23:c5:e9:c3:0d:aa:
                    f2:a7:f1:6c:48:57:66:48:ff:41:58:e2:77:ec:e3:
                    bd:24:97:4c:b5:f2:70:05:19:f8:48:88:cc:f6:22:
                    99:cc:73:72:d2:b5:7e:67:e5:ab:cd:8f:e6:38:8d:
                    f7:71:85:2b:f2:5b:f3:e7:a7:58:2e:25:06:21:f2:
                    d0:07:94:5d:b7:a3:35:3d:36:1e:57:2a:2d:69:21:
                    4b:e4:70:a9:f3:be:e6:8f:57:0e:e2:fa:2d:01:8d:
                    5e:3f:85:23:bb:bf:91:3d:51:d1:09:b8:56:be:fb:
                    01:b5:4b:dc:2c:f4:7b:e4:fe:5f:a8:d9:e5:18:0b:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:57:F9:4C:AC:7E:F5:C6:6D:30:8C:0E:0B:7F:C0:E9:1E:63:4B
            X509v3 Authority Key Identifier:
                keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d7:6c:4f:91:cb:63:c9:23:4c:e9:44:a5:d5:6b:93:fb:fc:
         06:33:a2:e6:66:d8:54:88:3e:6b:a6:4c:0e:4e:f4:ee:b7:9a:
         9c:49:87:c9:c2:dd:76:6d:d2:69:e5:4e:f9:61:14:17:24:eb:
         26:fa:e1:72:55:9a:1b:e3:50:60:d2:f6:f5:25:8d:f4:81:12:
         4d:e5:02:f4:52:ba:c2:3d:17:f0:45:4c:a2:21:c7:93:76:b1:
         78:d7:41:f0:7a:b8:c9:81:eb:23:dc:ed:75:04:2d:52:62:14:
         b3:6b:96:8b:20:33:0d:65:34:b1:76:59:dc:99:99:68:13:07:
         bf:99:1d:f0:e2:25:65:2f:b7:73:61:aa:52:88:62:49:26:36:
         9f:e0:a9:8c:6e:d4:eb:10:aa:3f:ce:d1:ad:f8:34:32:0c:5f:
         67:9a:00:8d:71:e8:13:02:fa:f7:bf:ff:84:23:4a:4f:a2:0a:
         94:5d:95:7c:57:17:a1:a7:d3:13:b9:fd:a5:ef:a5:a4:bd:79:
         ce:dc:e0:ef:e1:9a:61:28:5e:44:52:09:69:89:36:78:d9:22:
         da:5e:7d:ce:81:c4:ff:0f:ae:89:53:9d:db:37:cc:ee:9d:9e:
         ee:97:0c:91:7e:b8:06:64:1c:a8:cf:1d:c4:fe:ec:8b:76:83:
         03:75:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:12:26 2024 by rpki-client on console-fra.rpki-client.org