Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File:                     ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier:          zloAEOxUrfXYC1FKymbzsLoTlyHJSdUOaHculSjG4/w=
Subject key identifier:   F0:8D:F7:23:AE:5C:BA:FE:A8:A7:FA:BD:AE:AF:29:76:C9:8D:C4:45
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer:       /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial:       0919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number:          0913
Signing time:             Mon 06 May 2024 21:20:31 +0000
Manifest this update:     Mon 06 May 2024 21:20:30 +0000
Manifest next update:     Mon 13 May 2024 21:20:30 +0000
Files and hashes:         1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: rStO4k7XYzIRzMMdFj7wE73FuMhkwLaia7JsvTCEi9U=)
                          2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: wV7xQaxRbFLVq2HZttBnATllqcopndiOwrQG41rgWGg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
                          rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
        Validity
            Not Before: May  6 21:20:30 2024 GMT
            Not After : May 13 21:20:30 2024 GMT
        Subject: CN=6639499f-1f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:26:ec:d4:e6:17:d6:c5:cd:df:69:8b:2b:
                    6d:7d:29:54:6f:5e:6f:e1:40:bc:7b:2d:cc:75:82:
                    75:f4:ac:a0:5d:98:18:75:d0:5f:73:f6:39:4c:c1:
                    92:4a:67:2f:40:35:39:a2:39:33:57:6e:82:62:5e:
                    04:c9:04:44:07:91:13:21:8d:c9:42:d9:3c:c2:ff:
                    ba:0d:c0:29:27:98:48:dc:9f:72:76:e5:73:26:81:
                    59:70:75:a3:3a:cb:c3:f7:55:0f:80:49:c9:78:ea:
                    23:98:25:11:7d:78:b6:27:6a:04:56:4d:8e:c2:d1:
                    b4:8f:13:ab:a0:92:55:d8:0a:c9:7a:84:92:95:3a:
                    25:e5:2f:6d:5e:82:c4:4a:5c:3d:2b:56:91:b8:a0:
                    68:9d:40:1c:2b:f6:c0:ea:7e:99:e8:47:a6:a1:b3:
                    e9:8c:5a:d5:c1:0c:54:da:e4:12:a0:de:cd:03:99:
                    eb:27:b2:f0:c2:24:cf:21:c8:9c:4c:5f:86:8f:52:
                    4f:f1:00:cb:a2:2f:c3:bd:1d:c0:f5:18:bb:41:fc:
                    14:20:51:ef:32:43:0d:7b:8f:a8:ed:04:56:8e:d2:
                    bf:b6:8d:92:68:89:9c:06:2b:7a:7b:79:98:db:71:
                    92:e6:a6:20:cd:17:17:18:c5:64:e2:cf:ec:e4:c5:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:F7:23:AE:5C:BA:FE:A8:A7:FA:BD:AE:AF:29:76:C9:8D:C4:45
            X509v3 Authority Key Identifier:
                keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:a4:85:4c:c4:9d:c3:b8:ee:9b:c4:18:62:96:f6:46:56:
         58:c2:93:f9:7c:f2:c5:0e:3d:be:f4:19:7f:47:83:32:14:da:
         1f:d3:2c:da:fa:f4:8f:a7:14:be:94:6a:27:68:af:9c:c5:5e:
         3d:a6:8e:6a:11:59:70:40:b7:e7:0a:13:fe:03:81:fe:91:95:
         be:d1:52:6f:a0:2f:51:0d:49:53:71:a2:82:5c:bc:f6:38:78:
         d1:ed:e5:c9:e2:a5:70:ac:d7:1e:24:d1:0d:a3:24:1a:0d:6a:
         e4:9b:9b:2c:bb:d9:ee:98:a7:0d:bb:fa:da:64:99:cf:76:4d:
         d5:4f:9a:44:9c:c7:6e:4e:17:c1:7d:1b:4b:d1:8c:59:59:ca:
         30:3f:8c:36:31:7b:00:73:ca:12:58:be:65:d0:f9:54:0a:e5:
         38:20:7d:ed:91:ac:d7:b9:84:7f:04:a1:67:8c:0d:4f:77:88:
         aa:d0:53:21:7d:75:78:9d:cb:85:08:1d:af:fc:82:0d:6c:18:
         a1:c6:c5:d0:9e:b7:31:e3:82:97:43:0f:09:a8:f2:14:b9:ac:
         cc:bb:87:5f:88:4f:1e:fa:6a:eb:08:d8:e0:ab:5a:12:8f:dd:
         83:0a:2b:c6:74:5e:9d:06:86:68:4c:c8:0f:18:ae:be:f4:6b:
         1e:7e:8e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:41:04 2024 by rpki-client on console-ams.rpki-client.org