Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
File:                     62LfxzSiW8FU02epjPJ-0W9B6tA.mft (raw, json)
Hash identifier:          87OHaLyvmOwrn+gu1TsZ8P3SAk9Nyn8zdmaVtk/PhCw=
Subject key identifier:   EB:B9:F3:B2:A0:F5:DB:36:0E:29:EF:69:7F:7B:C9:49:0B:5B:FA:38
Authority key identifier: EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0
Certificate issuer:       /CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
Manifest number:          0665
Signing time:             Sat 04 May 2024 23:44:17 +0000
Manifest this update:     Sat 04 May 2024 23:44:16 +0000
Manifest next update:     Sat 11 May 2024 23:44:16 +0000
Files and hashes:         1: 62LfxzSiW8FU02epjPJ-0W9B6tA.crl (hash: 6j1YfyTGEj4qay0/3w8bGNSzVGNw2/y3KNWahWDY2JQ=)
                          2: 1C64580A4F6111ED9365FC4AC4F9AE02.roa (hash: Y8QTcLV5LPkrG9JQnlJADfWdBAy5AdfWQK2g3hi9/ws=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl
                          rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D209/serialNumber=EB62DFC734A25BC154D367A98CF27ED16F41EAD0
        Validity
            Not Before: May  4 23:44:16 2024 GMT
            Not After : May 11 23:44:16 2024 GMT
        Subject: CN=6636c850-94eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:be:bb:b3:61:6f:27:c6:4a:b7:7e:f8:4f:
                    ca:a4:7c:19:c1:9b:0a:1a:f3:08:b9:19:13:ed:1c:
                    0f:f8:4f:be:63:fb:b5:54:6c:02:5e:1d:f3:e5:d8:
                    85:79:96:b7:a0:a4:cb:b2:3f:bc:a7:9d:05:66:63:
                    15:6e:f0:25:6d:6f:6b:6c:cb:b8:a6:fb:b3:f0:82:
                    6d:bf:e8:96:a3:17:25:ef:35:08:63:3b:d1:ff:60:
                    62:51:39:54:a2:41:ca:87:03:8f:f1:16:79:52:66:
                    e5:a3:79:80:07:04:d6:04:19:b8:ee:03:4c:74:6e:
                    b3:da:4b:47:c6:67:85:c7:a8:78:50:3f:05:53:89:
                    b2:b5:b6:49:25:89:7c:b6:54:fc:bc:8d:6a:31:05:
                    98:7f:54:e2:8c:a9:8c:42:7a:4d:d3:44:99:b8:6d:
                    0d:e4:e0:18:50:53:44:38:ec:28:36:8b:87:e9:3c:
                    2c:5e:df:de:f7:3d:04:c1:5e:27:e6:fb:08:d8:44:
                    cf:73:0a:d2:7c:8e:79:7a:ad:9a:40:72:26:15:0e:
                    b8:0e:cf:5a:b1:06:92:38:09:9c:76:97:8b:fe:75:
                    53:da:db:4d:bd:ea:dc:8b:0b:50:4d:5b:21:81:92:
                    33:15:46:4d:bb:86:ea:f3:73:23:11:60:cd:83:ca:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:F3:B2:A0:F5:DB:36:0E:29:EF:69:7F:7B:C9:49:0B:5B:FA:38
            X509v3 Authority Key Identifier:
                keyid:EB:62:DF:C7:34:A2:5B:C1:54:D3:67:A9:8C:F2:7E:D1:6F:41:EA:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62LfxzSiW8FU02epjPJ-0W9B6tA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D209/B3397B4A353A11EBB7EB6B18C4F9AE02/62LfxzSiW8FU02epjPJ-0W9B6tA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:fe:7c:b0:e3:b0:73:4a:f5:4b:50:5c:ac:f4:22:86:4e:
         d3:c2:f4:3f:dd:82:fe:8d:bd:c9:a7:80:b0:a5:b7:15:41:23:
         17:a6:71:8f:30:b5:ae:84:33:e5:ae:d3:81:ea:70:7c:64:72:
         57:7b:ae:61:92:32:05:29:df:bb:51:ef:d8:90:af:fd:a8:c2:
         1f:b1:c0:cc:c5:57:8b:cf:23:8d:af:6a:bf:6d:e2:3a:65:f1:
         ca:92:81:27:32:28:99:f8:f9:d3:92:67:c9:8a:d7:6b:4f:50:
         bc:ff:e7:ad:a1:53:fc:7e:2e:7a:6f:3f:18:fd:25:ea:65:5a:
         e7:ce:5b:2e:ed:c5:c0:63:f7:7b:39:df:c4:b3:88:b3:76:b6:
         71:35:bf:f2:10:b3:6f:b1:3d:7f:fb:9b:cf:ff:a1:dc:5e:e4:
         5a:67:05:e7:a2:c4:5f:e4:5c:9d:d7:bd:8d:26:45:ef:b5:3f:
         92:d9:09:c9:ea:21:02:59:98:da:71:8a:b1:17:c3:c4:f9:11:
         35:f9:99:f7:a8:93:0f:f0:a7:82:fc:2d:da:47:d9:dc:af:18:
         6a:bf:9d:36:6a:83:99:4f:b5:7a:ca:68:54:35:80:28:dd:8c:
         f6:03:d1:b2:1a:00:38:8d:2d:2d:0d:4e:1b:3f:7f:95:4e:79:
         26:80:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:23 2024 by rpki-client on console-fra.rpki-client.org