Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
File:                     xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json)
Hash identifier:          sQi2Q+6WayziO04TCbVmDNgnXErnmxi0bI2CwDIWfEw=
Subject key identifier:   09:93:CD:F3:B3:D0:94:04:BF:07:32:DE:2F:5D:22:B6:26:1B:A8:CB
Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
Certificate issuer:       /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Certificate serial:       2AE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
Manifest number:          2AE6
Signing time:             Sat 18 May 2024 15:49:09 +0000
Manifest this update:     Sat 18 May 2024 15:49:09 +0000
Manifest next update:     Sat 25 May 2024 15:49:09 +0000
Files and hashes:         1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: WbwNSwA2AdobD4xYfb6fkoC4rByzVMud+B9CIlqd82o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
                          rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10982 (0x2ae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
        Validity
            Not Before: May 18 15:49:09 2024 GMT
            Not After : May 25 15:49:09 2024 GMT
        Subject: CN=6648cdf5-e464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:26:a4:0a:a7:79:6b:12:c1:d5:7e:dd:82:
                    e1:c3:c8:ce:6e:cb:d3:58:00:58:e9:7e:b1:e7:f6:
                    53:71:2e:4d:ec:91:7f:7d:6d:46:a8:f5:ce:7b:09:
                    e2:0d:bd:ee:8d:6e:be:b1:a1:70:0f:2d:d3:51:a4:
                    51:ff:37:72:9d:01:17:b4:35:51:67:7b:7f:6e:b6:
                    9a:28:9e:01:23:05:e5:89:c8:ee:00:61:3f:8e:ca:
                    1e:c5:81:91:5c:11:e7:ce:93:62:b6:83:e7:6d:59:
                    e0:2f:a4:4c:2c:e4:11:43:71:76:fc:b7:b8:1c:ec:
                    ff:53:14:9c:14:13:8a:bc:8f:9e:18:ed:49:2e:51:
                    b4:dd:bd:47:02:20:47:29:f8:b7:d9:36:56:03:3e:
                    5b:68:df:fa:c5:14:30:e7:6c:32:bc:5d:c8:dc:3c:
                    11:9a:36:8b:e4:b1:13:11:cb:82:ee:3d:d1:92:39:
                    c1:32:8e:5a:b8:76:3e:65:36:e0:65:46:d2:8c:19:
                    75:a9:09:33:8c:fc:e0:7d:ae:25:ba:ed:94:2b:8b:
                    03:b6:ee:21:e4:df:58:ae:1a:4b:f8:cd:d1:41:1e:
                    d3:3a:ab:2c:5b:16:f0:85:cb:4f:dc:93:d5:09:b0:
                    d1:1f:88:d8:39:a9:74:a2:93:08:82:45:75:74:83:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:CD:F3:B3:D0:94:04:BF:07:32:DE:2F:5D:22:B6:26:1B:A8:CB
            X509v3 Authority Key Identifier:
                keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:27:b8:59:4f:a7:6f:18:79:10:1b:42:60:fc:8e:97:4d:
         7d:3b:c1:53:59:57:a7:11:f8:2d:66:bd:c6:01:68:03:e4:60:
         6a:be:f4:3f:83:a0:f8:55:cd:2b:b7:5b:f6:fb:a0:5e:94:da:
         24:5e:2a:f5:d9:5d:37:7c:a6:51:41:9f:29:e5:21:b5:3a:20:
         dc:80:5b:f2:f6:32:3f:ac:96:20:5c:c3:60:80:76:91:77:93:
         eb:84:64:2f:05:44:c4:0d:1e:a4:3b:f6:07:59:0e:bd:0d:68:
         ae:71:6e:a4:7c:7b:15:2b:27:28:3f:27:06:1f:26:47:38:5e:
         e6:74:ad:eb:3b:87:da:10:d0:83:fc:4a:1d:82:14:df:ea:79:
         a5:d2:5b:61:a2:12:d5:4b:dc:c6:5b:47:1f:58:f1:9a:06:9f:
         d9:66:2c:83:c5:e0:eb:dc:19:fb:e5:ba:0a:0b:1b:ee:0b:c3:
         2a:0c:31:fc:92:86:38:9d:4a:c4:39:3a:59:a6:b1:93:60:35:
         cf:c0:12:0d:c3:80:62:b4:d5:41:83:33:7d:bb:36:01:c1:3c:
         f1:00:5b:3c:b9:68:82:bf:74:33:62:24:b0:1d:c3:6a:20:38:
         69:c4:4f:d0:42:b8:01:0d:7e:50:e1:bd:99:28:0c:6b:6a:86:
         d4:d0:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org