Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          Ioc8w7j2j0NL/ojc9cwEZdtYIBuswCBdwEnyqLf39hI=
Subject key identifier:   84:B9:59:08:84:FA:C3:1B:DF:FC:17:CC:F3:27:B4:59:48:26:B1:A8
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          038E
Signing time:             Sun 19 May 2024 02:38:40 +0000
Manifest this update:     Sun 19 May 2024 02:38:39 +0000
Manifest next update:     Sun 26 May 2024 02:38:39 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: 8YC8YBp1BlEKhO64DsNNpLT9GPay8xGZ+Kn9kKuCSPY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: May 19 02:38:39 2024 GMT
            Not After : May 26 02:38:39 2024 GMT
        Subject: CN=6649662f-195b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:f4:2c:c4:70:09:a0:8c:3e:2d:a2:18:1d:
                    ce:9c:3f:b4:ec:36:f2:a2:22:fc:5d:82:1b:d6:3a:
                    30:f5:c7:5a:c1:76:91:4c:a3:67:7d:bd:d2:f1:57:
                    99:9a:8c:9b:4f:e8:96:30:5b:c7:14:ef:82:d4:22:
                    9e:12:76:a1:91:fc:c5:d5:d2:1d:10:cb:df:61:35:
                    6e:cb:0f:0d:af:1f:5e:a1:5b:c8:82:4f:e5:e2:b9:
                    92:01:0a:d8:66:61:60:44:16:6e:42:e9:24:bd:98:
                    e9:69:39:99:3d:44:6c:16:49:14:c4:94:81:0f:04:
                    1a:54:a8:f1:54:49:52:7d:41:ee:29:35:0c:0a:d1:
                    36:a5:86:1b:e5:09:63:26:60:f1:76:60:5e:02:a5:
                    c4:22:13:ca:a1:43:d1:f8:6f:17:bb:bd:38:60:d9:
                    4d:15:61:e0:c2:f1:71:ab:c7:8f:63:43:6f:3d:03:
                    f4:25:1b:6b:7f:66:23:32:4d:e6:60:6a:00:5f:17:
                    ad:78:2e:b2:75:86:e5:11:7c:6d:4a:2b:f4:29:c6:
                    69:24:d9:91:a1:ba:fc:48:c5:18:90:72:e5:15:93:
                    15:15:6d:d5:e2:35:32:08:eb:4e:05:11:22:34:bf:
                    53:43:cd:70:89:d4:e9:64:bf:3d:39:57:96:01:28:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B9:59:08:84:FA:C3:1B:DF:FC:17:CC:F3:27:B4:59:48:26:B1:A8
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:2c:d4:b1:2f:83:15:fa:29:4d:6c:0a:f3:8e:f9:99:85:
         4e:37:f3:58:01:f5:d7:ae:64:f9:03:ad:36:31:5c:76:1a:95:
         7b:66:46:79:af:10:5e:6c:0e:f3:77:5a:82:6b:e2:70:04:73:
         0a:13:a6:eb:ed:b4:e7:1f:35:5f:4f:a8:f5:78:de:a7:9a:6a:
         47:b2:07:df:de:56:7e:05:1f:6a:f8:c9:a1:f4:2b:74:e5:da:
         82:4c:86:ae:f8:1e:1b:b6:9b:9b:79:56:57:6c:2b:bc:91:cb:
         e9:f7:3a:2d:04:34:0c:4f:35:62:68:88:7a:85:ff:4d:db:72:
         e4:70:dd:6e:59:59:cc:8f:50:48:02:d1:09:f2:d7:a6:59:90:
         8d:ee:df:c1:99:51:05:f3:b8:58:f4:8a:ba:50:4c:9f:09:b1:
         be:d3:98:71:17:ef:3a:82:8b:c1:2c:f5:6c:44:a6:45:82:14:
         30:e7:31:28:df:71:e0:de:fa:84:94:ba:8f:0a:28:60:6f:37:
         cb:f0:8e:09:3a:bb:53:5a:42:58:53:3b:60:95:81:a7:a8:43:
         53:08:97:4d:7b:c9:94:f7:e7:dd:e2:5f:28:09:66:b0:72:c3:
         ee:26:5f:7f:b1:a3:47:f2:a8:bd:d5:99:26:3b:e1:2a:99:37:
         ee:a4:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org