Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          YVqc5w7DoU4StPQO9HXu4e/N+IU7mzgNgz8AlzwMgCo=
Subject key identifier:   39:23:3C:56:E2:7C:47:98:B1:20:DF:A3:37:5E:E8:E8:99:B5:D1:92
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0A5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0A59
Signing time:             Thu 02 May 2024 20:26:52 +0000
Manifest this update:     Thu 02 May 2024 20:26:52 +0000
Manifest next update:     Thu 09 May 2024 20:26:52 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: b06MHIZwmj3jQrC9vwKgTKwqOX7Gcro/xFDggluTUmE=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: cOUG9AZv4ens5bJXYGgDSu06OlyCFYAg055PsMNTDCk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 20:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654 (0xa5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: May  2 20:26:52 2024 GMT
            Not After : May  9 20:26:52 2024 GMT
        Subject: CN=6633f70c-8eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:f1:33:a7:22:18:97:8f:92:c4:e5:5b:ca:
                    2d:10:c8:04:c5:0e:9d:0f:f7:6b:14:04:b2:5e:b0:
                    9a:8b:ac:bb:f4:31:9b:df:eb:e7:07:26:d2:40:05:
                    29:a2:ca:d3:3a:92:93:c3:4d:36:27:0b:99:d4:dd:
                    c0:68:d9:b5:05:37:c4:4c:3f:52:99:9e:10:8d:1d:
                    b4:c6:33:c2:e0:15:0a:c8:74:b1:94:3b:b8:2f:d9:
                    97:94:ac:fb:cb:54:f1:46:22:ef:1a:3b:10:c7:45:
                    0c:4b:a5:b9:6e:a5:df:4e:86:3c:c8:a1:f4:5d:6c:
                    30:6e:5b:43:5d:cb:e7:6c:cb:05:c9:14:e8:c2:ff:
                    b3:57:e2:cf:31:74:c7:cc:c3:bf:8d:e0:9d:4b:3e:
                    e6:59:e6:77:19:22:2e:aa:ca:4e:49:63:7d:31:e9:
                    18:9c:1d:ca:e8:a0:7c:86:56:a0:86:e9:3a:d8:0e:
                    0f:91:97:3e:6f:02:9b:42:bf:31:fc:4d:03:c2:ea:
                    92:52:65:08:eb:57:e6:37:e8:24:5a:30:f8:32:e5:
                    ba:b4:26:64:57:7d:bd:16:cf:c8:ac:a4:f4:fe:21:
                    0f:8a:18:b8:1d:23:46:85:23:67:4c:66:12:7d:21:
                    32:d9:12:5e:20:1f:41:10:8e:71:73:98:0f:41:9e:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:3C:56:E2:7C:47:98:B1:20:DF:A3:37:5E:E8:E8:99:B5:D1:92
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:59:b2:74:e2:26:28:42:3a:eb:e9:c8:89:65:2b:77:45:
         97:68:f1:d2:3a:1f:2f:98:9a:ee:50:ba:b4:c0:ed:87:0a:50:
         d9:2b:02:c7:1f:07:26:a4:c6:3b:63:84:89:20:bf:c5:f0:33:
         e4:e1:b4:c8:4b:f7:7b:a8:4e:e9:a9:20:4b:2b:b0:36:cb:81:
         3c:12:ca:5f:02:dc:14:d9:ec:27:fc:91:d6:91:2d:4e:0c:66:
         2f:01:24:0a:f7:66:7a:dd:70:56:0b:9f:c9:3a:a5:ad:2a:15:
         9f:00:49:67:f6:50:94:ef:70:f4:a7:dc:75:88:f1:fa:0c:ec:
         57:4f:5a:dd:4e:5e:34:83:eb:81:a4:b6:2d:b8:b0:b4:4d:3f:
         a4:be:89:a1:24:81:b9:bd:90:28:92:f5:5a:5d:26:29:c2:ec:
         c2:79:af:bc:72:eb:4c:37:6b:9d:37:bd:83:d8:78:7c:e4:bf:
         ac:7a:61:88:f0:e5:e2:43:4b:e1:da:e2:ef:de:58:ef:a8:ea:
         c2:20:1d:8e:96:8b:dd:d1:b0:a6:6d:c5:4d:39:13:95:06:15:
         a7:05:8e:da:9d:be:34:02:29:01:bb:2b:c0:0c:16:5d:95:41:
         f8:c0:40:60:34:bc:82:ab:3e:31:c4:a2:35:e9:81:51:0e:55:
         a8:60:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org