Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File:                     ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier:          8kTjxHOqUiFjah8I7fVHIrcXRnNaomM6rJjTpEOoT6E=
Subject key identifier:   6B:4D:13:0E:A4:0C:CB:4B:74:7C:00:50:35:65:A9:2C:6E:DB:7D:1B
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer:       /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number:          0503
Signing time:             Sun 19 May 2024 01:09:40 +0000
Manifest this update:     Sun 19 May 2024 01:09:40 +0000
Manifest next update:     Sun 26 May 2024 01:09:40 +0000
Files and hashes:         1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: kITUQ2rgbJKy0DpK7yTU+Eyzni0O+x6jU07LyioH0rc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
                          rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
        Validity
            Not Before: May 19 01:09:40 2024 GMT
            Not After : May 26 01:09:40 2024 GMT
        Subject: CN=66495154-6e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:f5:13:08:24:52:3c:58:c0:85:59:a5:51:
                    f3:c4:5f:43:c1:97:ea:f7:4f:db:f5:b1:e3:69:28:
                    39:da:fa:dd:0e:c4:b3:5f:8c:04:81:de:3a:33:02:
                    5d:f8:0d:dc:ae:9f:b1:3c:af:06:de:b3:c5:b8:81:
                    9b:dc:0a:ac:fa:2d:b3:34:71:48:91:71:b5:e2:58:
                    5d:d0:e5:56:e2:66:f6:1d:a6:e8:c2:25:e4:54:66:
                    bf:0d:52:4c:1a:29:b5:fa:34:84:11:09:9b:5b:f6:
                    c8:8b:22:cf:48:c7:4a:60:e1:ef:64:69:b5:9f:aa:
                    e4:9c:b6:e4:9b:ca:36:a8:1e:8a:70:7d:77:98:a1:
                    72:71:d1:ec:40:1b:2a:10:c4:94:de:4c:f0:76:73:
                    bf:84:f0:a5:1b:2d:b8:b6:38:34:98:bc:b0:70:5c:
                    cf:29:c7:93:88:0c:05:56:ba:4b:cc:cc:d9:77:1e:
                    2a:27:19:9e:c6:0c:64:6a:69:00:ba:0d:bb:22:68:
                    7b:62:be:64:e0:28:8f:19:43:5c:19:c8:09:75:bf:
                    52:70:36:d3:a2:e9:1e:1a:c1:cf:2f:bd:f1:d1:4f:
                    3d:e4:87:b0:41:13:de:12:6a:7b:e8:a9:cd:2f:4c:
                    6e:41:5b:ca:9d:30:58:02:47:bd:ea:cf:a1:f7:d6:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:13:0E:A4:0C:CB:4B:74:7C:00:50:35:65:A9:2C:6E:DB:7D:1B
            X509v3 Authority Key Identifier:
                keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:01:af:89:e7:0a:ee:15:b6:e3:7a:2f:01:33:c1:c4:43:2a:
         2c:07:01:9b:af:3e:fc:5d:09:ad:b6:6b:30:d9:28:de:72:75:
         de:13:1f:66:86:9c:26:29:ef:75:42:76:60:c1:42:5f:52:5d:
         86:4f:38:a5:38:21:4c:ae:b5:b2:5e:47:69:86:46:3f:d8:6c:
         55:08:89:86:cd:a1:33:7f:7c:92:9a:9a:3c:41:1c:6d:c3:72:
         ee:89:93:1a:bd:b4:5d:5f:f2:45:48:58:a6:85:4a:12:82:3f:
         83:2b:ae:b0:b8:56:85:b5:f3:67:20:3e:75:36:50:04:6e:bf:
         72:a1:9a:18:a4:2e:e1:27:1e:17:0c:d8:37:03:bb:59:60:8c:
         15:88:b5:5d:f1:02:f5:74:4b:d5:3a:44:8d:03:97:c2:b4:4e:
         47:94:1b:a5:89:68:ed:31:35:9b:d7:bc:1f:37:4a:45:0c:0f:
         d2:d9:e2:3b:80:20:aa:59:4f:22:27:0a:c3:e3:29:63:47:c1:
         4b:ff:41:30:5e:24:c5:75:d6:6a:23:47:56:75:5c:ef:1b:10:
         3d:67:45:b3:46:20:b1:99:f7:9f:36:56:68:c9:82:f3:28:b3:
         b0:f7:a7:66:fd:56:06:61:2f:f6:43:8d:75:56:89:85:cc:9b:
         5e:89:a9:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx
RkQxRENFQTgwHhcNMjQwNTE5MDEwOTQwWhcNMjQwNTI2MDEwOTQwWjAYMRYwFAYD
VQQDEw02NjQ5NTE1NC02ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Mr1EwgkUjxYwIVZpVHzxF9DwZfq90/b9bHjaSg52vrdDsSzX4wEgd46MwJd
+A3crp+xPK8G3rPFuIGb3Aqs+i2zNHFIkXG14lhd0OVW4mb2HabowiXkVGa/DVJM
Gim1+jSEEQmbW/bIiyLPSMdKYOHvZGm1n6rknLbkm8o2qB6KcH13mKFycdHsQBsq
EMSU3kzwdnO/hPClGy24tjg0mLywcFzPKceTiAwFVrpLzMzZdx4qJxmexgxkamkA
ug27Imh7Yr5k4CiPGUNcGcgJdb9ScDbToukeGsHPL73x0U895IewQRPeEmp76KnN
L0xuQVvKnTBYAke96s+h99ZgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtNEw6k
DMtLdHwAUDVlqSxu230bMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG
NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi
cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGAa+J5wruFbbjei8BM8HEQyosBwGbrz78XQmttmsw2SjecnXeEx9m
hpwmKe91QnZgwUJfUl2GTzilOCFMrrWyXkdphkY/2GxVCImGzaEzf3ySmpo8QRxt
w3LuiZMavbRdX/JFSFimhUoSgj+DK66wuFaFtfNnID51NlAEbr9yoZoYpC7hJx4X
DNg3A7tZYIwViLVd8QL1dEvVOkSNA5fCtE5HlBuliWjtMTWb17wfN0pFDA/S2eI7
gCCqWU8iJwrD4yljR8FL/0EwXiTFddZqI0dWdVzvGxA9Z0WzRiCxmfefNlZoyYLz
KLOw96dm/VYGYS/2Q411VomFzJteiakJ
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org