Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
File:                     TShKyE8O4JX9a-sO2MZfx15p__g.mft (raw, json)
Hash identifier:          pCum5KucgtuygsVyFOkbSMRdI5enFg7o420KjV2Fcjk=
Subject key identifier:   D4:7E:4B:B1:43:1C:27:06:B2:78:09:CD:C0:69:7E:6D:A5:DA:AA:47
Authority key identifier: 4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8
Certificate issuer:       /CN=A915542D/serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
Certificate serial:       069B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
Manifest number:          0699
Signing time:             Sat 18 May 2024 23:17:51 +0000
Manifest this update:     Sat 18 May 2024 23:17:51 +0000
Manifest next update:     Sat 25 May 2024 23:17:51 +0000
Files and hashes:         1: TShKyE8O4JX9a-sO2MZfx15p__g.crl (hash: KbIhKh0uYa88U9O2/JS9DRW+GL83FAs6Drz7Flajmsg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl
                          rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915542D/serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
        Validity
            Not Before: May 18 23:17:51 2024 GMT
            Not After : May 25 23:17:51 2024 GMT
        Subject: CN=6649371f-01a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:b3:19:81:23:f2:80:95:83:a9:33:1a:2b:
                    e8:56:ae:9b:23:98:4b:83:c6:81:8c:64:bf:95:db:
                    e4:29:23:af:d7:1b:96:2f:71:d4:b8:f8:4e:cf:63:
                    6f:08:c3:1a:01:d1:8b:90:3d:61:02:c1:f5:00:50:
                    36:a1:04:82:3f:ec:b3:85:ab:1b:3b:d3:b5:2f:7c:
                    19:32:ef:a1:10:ab:bd:1b:71:f5:e4:79:bb:c1:fd:
                    37:ae:da:71:03:ee:1f:04:b5:a2:cb:35:71:7d:76:
                    43:4c:6e:b7:72:28:f8:24:ff:67:01:a0:2f:29:68:
                    0e:ac:74:5a:c2:a8:a2:ee:12:32:fc:8d:88:e0:4b:
                    61:f0:97:21:fe:6e:86:10:9e:61:e2:4c:52:7e:05:
                    94:3e:f8:cd:51:79:6d:07:ef:32:17:35:f3:37:ca:
                    0a:75:61:11:d7:64:ce:cd:41:0f:51:4a:da:f6:94:
                    e8:47:d6:2f:38:23:46:a6:15:bf:71:50:a6:44:2a:
                    69:68:50:ba:2e:36:44:6a:aa:5f:4e:44:19:76:99:
                    b9:f8:da:ac:16:e1:aa:8c:0c:43:81:18:aa:e3:e0:
                    31:76:c9:3d:0c:eb:86:6d:a1:fe:a8:06:c0:b7:31:
                    9d:e2:17:da:f4:d5:00:fd:42:f6:a8:65:1f:32:cc:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:4B:B1:43:1C:27:06:B2:78:09:CD:C0:69:7E:6D:A5:DA:AA:47
            X509v3 Authority Key Identifier:
                keyid:4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:11:e0:14:af:2a:68:a8:db:a0:9a:3a:69:39:66:33:9d:27:
         58:f5:66:aa:8b:bf:b9:44:b8:77:dc:f9:d9:e4:76:98:44:ab:
         8c:0b:88:95:14:9a:2d:42:34:7a:20:c3:4a:fc:3b:e9:ba:0a:
         32:0f:8b:b7:91:57:d8:de:fd:66:8e:4c:22:76:21:8e:cf:02:
         12:85:6e:fe:2b:59:2e:07:69:a7:84:17:22:05:48:52:aa:95:
         d4:b7:75:0f:02:a0:65:6f:51:c9:c6:9a:5d:82:51:cd:ee:22:
         c9:24:79:64:47:48:3c:8f:07:f9:00:08:91:c8:ae:1d:3e:f1:
         f1:f2:0f:a9:2c:19:a8:2b:28:84:97:a4:88:37:aa:bf:aa:e2:
         6e:6e:d3:fd:72:5d:45:bd:9b:86:2d:f7:88:de:90:38:82:78:
         55:e7:a5:aa:73:7d:1e:e2:37:f2:cd:ba:a1:06:b1:02:f9:95:
         2d:f0:91:3f:a6:ae:54:92:eb:15:60:05:96:fd:d7:92:fe:c2:
         c2:31:c8:96:ac:30:66:95:26:e8:b2:c0:ea:86:be:ab:32:cd:
         2b:7a:5a:81:89:e0:57:a5:75:5c:6d:a0:2d:6b:f8:5d:f7:03:
         5e:5d:b9:49:34:ea:45:9b:85:ca:fb:d2:2a:9c:ac:8e:8c:09:
         fd:dd:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org