Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
File:                     5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json)
Hash identifier:          mDk+qk5JO3UyqqRu5FiABYzurenzRmnVsqG8hp+28l4=
Subject key identifier:   30:24:A8:FF:70:93:A3:A5:6A:85:0F:C7:B0:8E:07:82:11:73:49:35
Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69
Certificate issuer:       /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
Certificate serial:       33C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
Manifest number:          33C7
Signing time:             Sat 18 May 2024 15:24:51 +0000
Manifest this update:     Sat 18 May 2024 15:24:51 +0000
Manifest next update:     Sat 25 May 2024 15:24:51 +0000
Files and hashes:         1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: 1giNn0aTQbtV2Pt1KwsVuiN+oq+T7OiwTvHmkvMgNq0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl
                          rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13255 (0x33c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369
        Validity
            Not Before: May 18 15:24:51 2024 GMT
            Not After : May 25 15:24:51 2024 GMT
        Subject: CN=6648c843-664d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:77:c2:99:d6:b9:ed:22:c1:c8:f6:ba:47:76:
                    53:e5:9a:2d:e4:40:f2:e1:8d:4e:76:b5:53:c6:77:
                    a4:b7:cb:ca:01:1b:65:92:b1:ea:d7:72:14:b1:5d:
                    1c:f6:b7:c9:1e:fe:82:3e:fa:35:9b:ae:61:e1:cd:
                    67:b2:22:40:c3:dc:66:be:02:4a:3f:41:c5:88:61:
                    12:aa:80:52:4a:f4:96:ab:12:95:8b:8d:6c:48:65:
                    5c:b3:39:d0:bd:be:61:24:2b:08:4f:1f:33:0a:02:
                    3a:02:d4:bb:cb:84:96:43:3d:4b:e2:87:d1:63:45:
                    91:4d:fe:93:c8:44:e7:1d:7d:dd:ae:90:62:06:86:
                    3f:6e:e0:b8:ef:91:13:83:ce:2e:f5:fa:f7:e6:f5:
                    b9:ae:0f:16:72:2b:01:5a:3b:7b:57:b2:c1:3d:93:
                    58:28:9e:fa:fe:08:08:66:f7:3e:1e:5a:bb:a2:f2:
                    bc:b5:f2:42:34:8e:21:d9:30:6a:5b:e1:aa:7b:2b:
                    88:cf:ef:3f:0f:dd:6d:ec:92:ab:6c:f2:07:12:e0:
                    e8:96:97:bc:6e:7e:f4:96:64:d4:47:b3:8e:43:8a:
                    43:2c:da:34:59:e3:aa:31:a3:d0:82:c2:75:1d:6f:
                    cc:ea:64:b9:aa:9a:15:2b:d6:5a:0e:28:30:3c:71:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:A8:FF:70:93:A3:A5:6A:85:0F:C7:B0:8E:07:82:11:73:49:35
            X509v3 Authority Key Identifier:
                keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:3d:1c:97:5b:51:1e:6b:8a:f7:b1:00:75:26:24:a6:32:e6:
         94:16:40:6f:b4:22:e2:28:7f:0f:c4:70:68:79:e0:55:39:65:
         8e:1c:c3:66:e9:05:2b:02:47:ab:f3:11:8d:b2:af:1b:d4:6f:
         f5:54:ad:7b:92:53:3f:eb:c9:93:17:07:df:8c:ca:9a:7e:01:
         0c:ab:d1:87:10:fd:b7:97:4c:3b:b2:16:57:01:ae:65:a7:9b:
         00:9a:d6:3c:32:09:8e:39:d7:29:d4:b8:53:71:7b:15:8b:37:
         b6:50:51:3d:d6:23:08:f6:82:be:1b:51:2a:4b:1b:e0:9a:98:
         39:e3:4d:d8:4f:34:c7:55:09:b1:50:6d:60:ab:67:7e:c3:ed:
         d2:f3:e1:7e:5b:61:54:04:7b:38:f2:63:d5:85:66:fc:ec:5d:
         79:e1:75:4a:bd:76:bc:c5:a8:2c:d8:46:50:d0:e9:d0:ba:b3:
         85:38:8e:84:64:ec:1a:0d:0a:7d:12:48:16:2a:57:f2:69:78:
         24:12:7e:0d:8f:ac:44:9f:79:48:4f:4d:ba:75:46:fa:1f:bd:
         73:12:d1:0b:86:7b:7f:de:6c:3a:2d:c7:cc:13:bf:2f:2d:6a:
         dd:4c:58:f3:a7:cf:a2:ea:c7:a0:7a:e1:fe:e0:38:94:41:10:
         0a:4d:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org