Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          h+VP+ykeQoYF//gjRwusxAr0nUfG8BCYfZ3YttqIZq8=
Subject key identifier:   0B:31:2A:1F:98:66:E4:60:B3:4E:0F:7D:5C:D1:BE:C8:52:52:B9:53
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       33CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          33CB
Signing time:             Sun 02 Jun 2024 15:05:29 +0000
Manifest this update:     Sun 02 Jun 2024 15:05:29 +0000
Manifest next update:     Sun 09 Jun 2024 15:05:29 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: zApI67AU5V31ZEE1BdBubz4e2vTC0Z0lQte1xKhduyE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 15:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13259 (0x33cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: Jun  2 15:05:29 2024 GMT
            Not After : Jun  9 15:05:29 2024 GMT
        Subject: CN=665c8a39-26b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:05:e2:1d:37:3e:7e:46:78:89:e8:f2:af:
                    71:b4:0a:ef:8c:57:72:67:cb:cf:c3:10:c2:7b:a5:
                    cf:9c:00:05:88:36:60:d8:c4:d9:b1:4e:cc:e4:4f:
                    55:46:bc:8e:e7:58:6c:dd:c3:49:05:83:b1:9d:74:
                    20:fd:5e:99:66:4f:0f:42:b9:5c:73:58:52:41:a0:
                    41:01:9d:23:11:34:d2:44:31:85:47:b5:82:62:03:
                    77:fb:c5:3d:1f:c1:0c:b0:1c:fb:8d:24:48:f6:98:
                    8d:22:5e:24:f5:12:e8:19:7f:ec:8f:98:6b:5a:fa:
                    d7:40:c8:b0:74:f1:ee:9d:dd:b0:b3:f1:fd:8c:63:
                    c3:58:8d:ea:88:1d:b5:e3:3b:cf:9b:2d:df:8c:32:
                    cb:7b:72:2d:e2:7d:f6:ea:7b:60:f8:f3:2d:eb:7c:
                    be:b9:ff:7c:8e:c8:30:49:e9:d9:65:a0:d7:b0:38:
                    80:42:81:5f:f1:21:5a:93:90:4b:13:1d:53:a6:89:
                    de:1e:fb:50:de:8b:a2:ea:ae:ba:92:96:dc:58:4f:
                    89:2b:a9:a4:6f:9e:c2:4e:0e:14:b7:67:c4:92:4c:
                    34:27:64:4b:01:4f:e1:0b:43:31:ae:36:f4:f0:a9:
                    25:57:6c:97:d9:46:51:57:f5:08:b7:36:5c:34:99:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:2A:1F:98:66:E4:60:B3:4E:0F:7D:5C:D1:BE:C8:52:52:B9:53
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:71:a8:5c:55:93:55:6e:c1:fb:41:11:74:80:ce:24:72:f8:
         15:0d:c4:77:22:db:0f:74:1d:97:23:69:63:98:59:0e:c0:d2:
         1d:9f:24:89:4f:47:20:93:0c:74:91:17:a8:57:2a:9b:b3:4d:
         59:b3:0c:f3:77:b7:4a:30:fe:7c:5d:43:ce:53:c2:36:a5:0c:
         b5:92:4e:db:10:bc:77:98:ac:75:90:63:aa:0a:93:b7:19:b8:
         d8:81:f9:70:51:a4:a7:4c:b8:88:93:d5:80:f4:00:31:fc:5c:
         35:80:54:05:be:ef:9e:3f:e7:86:72:44:30:26:19:50:8d:5e:
         81:3d:43:97:32:07:94:95:64:c2:0e:93:27:08:9f:a2:87:60:
         2c:e2:53:ad:3c:b1:23:32:22:2b:19:98:e5:af:db:e0:8a:41:
         88:cb:50:58:ae:d5:76:33:d2:c9:db:ef:04:99:63:69:d4:c9:
         c8:d8:e9:98:9d:9c:40:24:58:c5:2a:62:7e:24:48:1e:78:93:
         15:e9:d2:91:3e:44:f9:9e:d0:5d:a2:a7:91:66:1a:a8:fc:eb:
         72:be:4b:d5:e1:e9:bf:ac:7c:2c:6f:b5:8e:34:6c:88:3f:d3:
         4f:ad:eb:89:30:9a:9e:97:ac:aa:07:9b:b6:6f:fc:b8:30:76:
         3a:c8:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:37:14 2024 by rpki-client on console-fra.rpki-client.org