Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
File:                     6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json)
Hash identifier:          r5Ur714MwWk6+hOU0yjiVSovN6beWvhZUVwzGMgB7To=
Subject key identifier:   72:50:D2:71:49:1F:2A:F1:79:E1:22:98:0A:9E:40:7F:E6:51:07:78
Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7
Certificate issuer:       /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
Certificate serial:       1A46
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
Manifest number:          1A46
Signing time:             Sat 18 May 2024 16:46:30 +0000
Manifest this update:     Sat 18 May 2024 16:46:29 +0000
Manifest next update:     Sat 25 May 2024 16:46:29 +0000
Files and hashes:         1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: o5SIFcBkl5HfgeotPsGbbpg6NOgNzMLLk9uxwJg/oXo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6726 (0x1a46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7
        Validity
            Not Before: May 18 16:46:29 2024 GMT
            Not After : May 25 16:46:29 2024 GMT
        Subject: CN=6648db65-3593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e1:69:fd:f9:9d:8f:ec:c7:69:79:bd:36:ad:
                    18:92:88:80:3b:08:51:ad:d8:20:88:ae:59:e5:43:
                    af:0c:11:97:e6:4c:85:68:82:e3:b9:c0:33:58:f7:
                    51:03:e0:7b:f0:5e:ef:92:95:af:4c:5c:0c:c9:49:
                    dc:1f:6c:f5:e1:a5:d6:8a:a8:47:6c:8a:2c:fd:15:
                    7c:b0:3e:b2:2f:b9:e0:7e:1a:00:42:0d:f6:e8:b6:
                    37:a8:f2:34:03:54:15:68:57:a2:5e:86:57:cd:3a:
                    7f:dc:4a:ff:88:5e:29:45:0f:8c:cd:9f:05:46:e5:
                    5f:71:a0:9b:c4:78:6a:cb:5d:92:49:e1:3e:98:6c:
                    b8:62:46:12:2c:21:33:21:3c:e4:00:90:7c:9c:6b:
                    ba:7f:3d:16:46:f3:3b:2d:91:c6:37:45:1c:b5:db:
                    1c:66:31:db:74:00:4e:b0:4a:84:a3:ae:43:fc:d8:
                    3a:8d:79:79:c2:03:fd:b7:ef:0e:8b:1c:4d:83:8f:
                    8c:23:f1:fa:a9:0a:ee:92:43:cf:6f:a8:42:3d:90:
                    4a:1a:7f:b9:aa:d7:74:ba:76:52:90:95:86:9f:d0:
                    d6:8a:85:68:dd:a4:01:d8:e4:85:b1:cc:5d:94:02:
                    2b:b7:b4:d2:0d:72:23:16:01:2c:82:63:8b:5c:0a:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:D2:71:49:1F:2A:F1:79:E1:22:98:0A:9E:40:7F:E6:51:07:78
            X509v3 Authority Key Identifier:
                keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:de:db:d2:7a:f9:14:57:69:51:d5:81:21:1c:20:b4:86:25:
         35:0e:43:bb:e2:56:96:c5:3a:3f:c3:78:67:21:82:3b:ab:33:
         f1:bc:43:66:66:a3:12:09:2e:f7:d6:52:b0:d2:3d:3f:59:76:
         e7:6e:a3:5e:0b:d3:3d:8c:71:fd:c7:31:f8:b5:eb:da:60:ba:
         c0:18:79:fe:c6:2c:44:20:82:e1:d6:3a:51:fe:ac:db:49:67:
         95:67:1a:21:3e:56:9a:65:7f:31:63:65:d0:12:74:4a:b5:8e:
         29:36:8a:1c:19:69:2f:a0:d0:c9:cc:4b:75:d3:88:07:7d:5c:
         9f:ec:ea:0e:e6:e2:aa:0a:e2:c7:e4:72:c0:2f:82:57:31:e4:
         b1:ed:2f:06:ae:00:2d:8c:93:a0:a6:3f:3b:df:3b:63:ce:cf:
         8d:a8:1e:b0:9a:31:de:62:a8:44:00:ad:77:36:65:ec:fe:73:
         84:ae:9c:97:f8:0b:74:df:9a:61:48:9b:a6:64:61:98:e8:9d:
         93:3e:3d:98:06:db:54:f8:d0:15:1d:89:17:4a:87:43:59:09:
         13:fa:63:f6:41:6b:65:03:6e:eb:fe:29:fc:e3:0f:d8:27:45:
         36:d8:5c:80:03:4b:10:f6:98:ff:48:a4:8a:2a:7f:46:bc:27:
         ea:b2:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org