Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
File:                     6_FxbSSrM1DAvAcLRejf29D88b8.mft (raw, json)
Hash identifier:          on1x8Jmm2f5/Op4+XpoSeZY2O7qOmTJXz4B5Vmd+Iww=
Subject key identifier:   30:B5:B6:34:08:A3:65:47:F5:23:1F:64:33:F1:5E:7A:97:6D:34:A4
Authority key identifier: EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF
Certificate issuer:       /CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
Certificate serial:       267D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
Manifest number:          267D
Signing time:             Sat 18 May 2024 15:56:43 +0000
Manifest this update:     Sat 18 May 2024 15:56:43 +0000
Manifest next update:     Sat 25 May 2024 15:56:43 +0000
Files and hashes:         1: 6_FxbSSrM1DAvAcLRejf29D88b8.crl (hash: uKPIshZTHe8PPQi2QPmFYHVnCPtWgwJCoTLudrLwYJU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9853 (0x267d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
        Validity
            Not Before: May 18 15:56:43 2024 GMT
            Not After : May 25 15:56:43 2024 GMT
        Subject: CN=6648cfbb-28e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:4e:55:78:cc:4c:5d:16:3e:de:ff:e9:a1:
                    ec:36:93:ef:69:66:d8:83:e9:ea:d6:1a:4e:df:7b:
                    c3:12:77:8d:eb:13:f8:05:1e:22:80:e5:f0:3b:f4:
                    e8:f2:f8:2e:ad:49:05:04:1e:70:b5:2e:fc:fc:3d:
                    4a:09:0b:46:6d:b2:54:cf:ba:df:44:44:08:10:54:
                    6c:52:b7:7a:3a:8e:6a:aa:86:db:cb:11:a0:b9:65:
                    be:57:8f:8a:7b:34:d4:8b:77:df:b2:dc:6a:98:1b:
                    37:42:ce:92:37:a3:32:ac:f2:c4:ad:a9:0e:b8:e8:
                    9d:39:48:80:a7:5c:d0:81:5f:b1:07:35:60:10:ae:
                    15:67:81:80:ed:20:f5:64:c2:a5:01:a6:ed:7b:ff:
                    1c:4a:1d:60:0c:ad:29:85:2e:6c:51:1c:44:86:4b:
                    f9:ec:a2:47:89:56:51:7a:ff:74:b6:aa:ac:74:6f:
                    51:03:12:9e:eb:6a:3b:2d:23:34:e0:7b:0d:89:8e:
                    11:c3:c1:f4:7d:3e:90:56:52:2a:af:22:8e:52:1c:
                    1f:a6:d8:56:45:55:5b:cd:1d:3d:62:d3:f2:35:03:
                    29:81:3a:40:1b:59:af:e5:65:6e:dc:91:5c:b6:1f:
                    fe:aa:fe:d4:f4:2d:b5:e3:bc:65:b8:2a:cf:7a:31:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B5:B6:34:08:A3:65:47:F5:23:1F:64:33:F1:5E:7A:97:6D:34:A4
            X509v3 Authority Key Identifier:
                keyid:EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:db:04:05:db:a4:6d:ba:93:77:d2:8d:1d:fa:82:51:dc:0a:
         8d:71:78:a6:f4:8c:56:3d:19:92:e4:2c:b6:79:1d:8b:e0:12:
         df:cc:de:d1:e9:55:9a:e6:81:70:f7:6b:31:c9:0d:a9:06:e3:
         22:c1:f7:ba:e5:ee:4b:98:39:d1:ba:ca:12:53:f5:d7:c3:ab:
         1e:46:a7:2e:47:f5:a5:c5:24:40:37:55:54:59:3f:f1:e9:5f:
         38:d6:c4:b7:ab:e0:8e:20:8d:69:17:c4:ba:dc:09:58:5c:d9:
         d6:9a:5d:bd:e1:6e:63:60:c6:c9:09:76:28:1d:da:01:4a:0a:
         a3:c3:da:5f:8c:67:a7:79:75:f0:60:05:23:d9:d4:0e:24:75:
         18:0c:a2:3e:9f:86:20:eb:ee:d1:b4:34:7e:19:ff:57:8e:16:
         d2:e9:5c:0d:3f:68:cb:ee:3a:14:4e:e2:7c:b1:5f:92:28:75:
         e2:77:fe:6d:2c:92:5e:ce:45:3a:3c:fd:d9:a6:0f:78:4d:86:
         75:e9:aa:d4:83:dc:76:ab:5f:a7:7d:38:bc:7d:76:8a:d4:c5:
         28:d9:51:28:27:d0:cd:03:76:ae:60:19:22:3d:45:99:65:54:
         e4:66:35:b3:04:52:84:56:75:be:0c:f4:b0:13:5b:d7:f9:e1:
         ff:03:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org