Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
File:                     BiJAzedW2VtXd-JnqnsGVPg09JM.mft (raw, json)
Hash identifier:          vi2AC+x+srT2L7MhxZ10cs1M7bJ4fvquTbc166jGYMw=
Subject key identifier:   B2:87:FF:34:25:7D:C1:74:55:70:37:5A:CF:3E:97:E9:E0:40:C2:C4
Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
Certificate issuer:       /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
Manifest number:          0578
Signing time:             Tue 07 May 2024 00:38:16 +0000
Manifest this update:     Tue 07 May 2024 00:38:16 +0000
Manifest next update:     Tue 14 May 2024 00:38:16 +0000
Files and hashes:         1: BiJAzedW2VtXd-JnqnsGVPg09JM.crl (hash: vBjZvSmdbq8XMpNFV5hdL8YeVFO72zxkxxWwkujzWtw=)
                          2: E9610376903B11EBB91C8B5DC4F9AE02.roa (hash: x2N2Un6ehEE1eGqvj7WU8PHZwaULyzAkc/GywCEKePI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl
                          rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
        Validity
            Not Before: May  7 00:38:16 2024 GMT
            Not After : May 14 00:38:16 2024 GMT
        Subject: CN=663977f8-6c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:8c:5c:fb:18:5b:29:f5:af:46:18:d9:4c:
                    12:fc:c3:d7:b2:c0:0d:52:ec:77:20:b6:04:f0:55:
                    da:75:d5:5b:66:fc:17:e0:6e:c0:65:53:8a:49:00:
                    cc:5a:87:1a:ec:eb:0b:4a:e7:8b:d6:0c:6c:0b:21:
                    a0:59:57:6b:4d:bf:73:ab:7a:cb:74:19:7e:6f:a3:
                    89:33:7a:eb:31:dc:73:77:3b:4b:e9:cf:bc:f9:45:
                    06:76:3b:25:b9:5c:d9:34:d6:66:a9:51:51:e2:c9:
                    2e:bb:6e:53:94:60:31:d7:b8:bc:b8:6b:9f:9c:20:
                    c6:0e:3d:0a:44:74:21:34:78:eb:fe:ab:0a:22:11:
                    39:19:48:c0:7b:8a:d3:c1:c3:02:28:31:39:1f:99:
                    96:a5:24:dc:f3:7c:88:c8:e2:ae:0e:a7:7d:f5:eb:
                    56:6f:d3:c4:87:cc:78:b2:12:c9:07:b3:b5:ce:37:
                    7a:56:87:42:38:dc:11:fb:a9:a3:38:56:35:1a:b0:
                    b2:8a:90:ba:71:ba:ed:8e:bb:51:93:28:d8:6e:18:
                    ba:a8:1b:0f:78:a1:3a:84:d0:c8:a5:24:bf:16:7b:
                    29:5f:14:29:6b:61:ee:7d:6f:b4:2a:26:05:6a:cd:
                    68:83:73:bb:89:8d:2c:f6:e3:d1:13:7c:82:67:87:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:FF:34:25:7D:C1:74:55:70:37:5A:CF:3E:97:E9:E0:40:C2:C4
            X509v3 Authority Key Identifier:
                keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:23:3a:ae:f8:f9:9d:2e:18:4f:14:a8:6c:c2:91:bf:a5:
         c6:a5:29:7a:e8:8f:a2:20:de:e7:1f:9d:f1:67:d3:3e:39:52:
         d4:6a:b8:a6:bb:ef:bd:fb:b3:38:7c:a1:56:5a:53:d2:99:24:
         a0:ca:9e:fd:6d:49:d9:54:06:5d:a0:18:6f:2b:66:61:83:b1:
         c6:d1:e0:d2:d2:4e:e4:45:a9:d2:27:70:82:b1:c1:34:e2:4e:
         b5:2b:65:f3:65:b7:3c:8c:92:e9:c6:db:7a:51:c1:c0:07:c7:
         dd:b1:f3:da:4c:e9:cb:2d:a3:b4:a9:c1:d6:57:17:b2:31:a9:
         0d:a8:4b:ad:72:5b:18:14:70:d8:b6:39:85:74:59:76:65:3f:
         7d:e5:cf:0d:78:d8:f1:82:fc:58:35:68:46:d6:a6:95:a4:f0:
         62:3a:83:2c:16:d9:e1:dc:6f:7d:10:f3:df:26:42:bb:36:ae:
         16:c4:89:f1:b4:d9:50:c0:c4:de:9e:2c:3a:34:de:85:b6:ba:
         fd:64:40:2f:fd:ac:55:4f:44:04:f9:69:51:c2:03:75:2a:99:
         ce:52:e5:34:75:61:33:85:83:a1:57:95:8b:71:6a:0d:e6:66:
         f2:03:c9:93:57:ac:79:7a:26:46:57:b4:28:20:1e:19:7a:ef:
         5d:f8:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:25 2024 by rpki-client on console-fra.rpki-client.org