Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.mft
File:                     TZ2XH9wOLBckuUf-cjTfCSk5d_U.mft (raw, json)
Hash identifier:          b6DEPfSCVu3GdkIaAgHl3dNhb3BCeYsCp2wzJebIFU0=
Subject key identifier:   39:61:C4:82:F0:99:EC:8C:18:76:5D:37:60:BA:D0:4D:55:FE:D1:E5
Authority key identifier: 4D:9D:97:1F:DC:0E:2C:17:24:B9:47:FE:72:34:DF:09:29:39:77:F5
Certificate issuer:       /CN=A9155184/serialNumber=4D9D971FDC0E2C1724B947FE7234DF09293977F5
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ2XH9wOLBckuUf-cjTfCSk5d_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.mft
Manifest number:          03EC
Signing time:             Sun 19 May 2024 02:15:54 +0000
Manifest this update:     Sun 19 May 2024 02:15:54 +0000
Manifest next update:     Sun 26 May 2024 02:15:54 +0000
Files and hashes:         1: TZ2XH9wOLBckuUf-cjTfCSk5d_U.crl (hash: gNRz6Wu2DeD0mKDZ1Z5cBuBZLR3Gbs+jwE7dvNZ9m44=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.crl
                          rsync://rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ2XH9wOLBckuUf-cjTfCSk5d_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155184/serialNumber=4D9D971FDC0E2C1724B947FE7234DF09293977F5
        Validity
            Not Before: May 19 02:15:54 2024 GMT
            Not After : May 26 02:15:54 2024 GMT
        Subject: CN=664960da-8097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:1e:7b:c4:20:d0:a6:0e:8c:65:1d:15:d9:
                    b1:d5:1b:e5:93:50:f5:5b:3e:c3:27:66:aa:b2:4c:
                    8d:6d:37:13:3c:ee:30:c6:d7:8d:eb:52:04:b2:47:
                    0e:8b:c5:69:00:eb:ea:bb:15:3c:7e:9b:a4:b2:cb:
                    33:f7:00:a4:68:03:10:80:8c:ac:53:fb:fa:24:c7:
                    7b:15:ce:0b:f3:0a:c3:5c:a4:27:96:73:3d:43:c7:
                    8f:06:d3:20:9f:4d:67:e8:00:8d:32:cf:3d:5e:17:
                    b5:b3:46:7c:44:57:38:db:b0:c1:80:d4:a4:59:61:
                    3c:5d:c3:91:97:15:9b:96:ac:2a:9b:80:14:f9:a0:
                    75:af:51:b0:d8:84:29:16:b9:e6:dc:c6:98:a2:61:
                    84:47:44:e4:07:66:da:02:b8:f5:e8:76:3b:ba:56:
                    8e:e7:1d:73:4c:d7:78:81:94:c2:df:fe:2d:d9:1f:
                    a0:d6:c1:e5:1f:0a:bc:0b:41:0c:ce:0a:00:2f:42:
                    b4:62:0f:05:a5:0e:48:1d:42:3c:4b:4a:31:cb:64:
                    0e:c4:72:7e:d0:af:e3:13:ea:0f:9f:4d:54:5a:68:
                    8f:3a:e2:b9:47:0d:41:e6:91:68:9a:40:12:7b:a0:
                    7a:b8:60:c7:fd:a3:99:2b:3d:19:11:9a:1c:c1:dd:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:61:C4:82:F0:99:EC:8C:18:76:5D:37:60:BA:D0:4D:55:FE:D1:E5
            X509v3 Authority Key Identifier:
                keyid:4D:9D:97:1F:DC:0E:2C:17:24:B9:47:FE:72:34:DF:09:29:39:77:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ2XH9wOLBckuUf-cjTfCSk5d_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155184/5F9615A630AD11ECA78CD816C4F9AE02/TZ2XH9wOLBckuUf-cjTfCSk5d_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:87:bb:18:58:68:12:67:b8:f4:8b:90:6a:e9:d1:ab:d9:
         b6:a2:13:82:aa:9c:78:41:af:c4:70:06:cb:7a:bb:2c:1a:0e:
         17:b2:42:b9:15:93:8f:a2:6e:e1:10:f8:7c:83:27:c5:b6:58:
         2f:96:65:ec:0c:87:f7:1a:3f:3b:85:6a:e5:ab:fe:62:ab:70:
         b2:c9:a4:26:bc:aa:8d:c1:fe:bd:4d:41:2d:35:f7:ff:cc:5d:
         ad:63:51:9b:ba:0f:b9:df:4d:0e:b9:cc:18:8e:d8:8a:f6:2e:
         2e:3b:cb:de:6c:d3:d1:14:87:85:5b:61:5c:5e:61:64:1b:6d:
         81:47:57:17:4a:65:c0:7b:c9:75:2c:81:95:4e:c9:8c:cc:ff:
         ad:e6:92:c0:ba:02:f9:84:11:bd:f0:d3:4b:6a:2a:4d:ab:60:
         ff:14:85:9e:00:02:a0:25:d7:e8:e5:c8:34:14:d3:7f:02:62:
         67:22:0b:79:ae:4f:57:8b:e3:4e:60:af:69:e7:57:f9:42:ba:
         72:83:fb:8f:d7:10:05:68:74:0b:b8:9f:49:72:d1:f0:c3:6a:
         02:b9:d2:df:c6:92:07:84:7b:22:4b:02:f0:39:2c:16:a6:62:
         bd:4b:dc:a1:12:3c:99:46:62:20:88:9a:d1:5d:22:37:de:c3:
         bf:19:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org