Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File:                     A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier:          QmvhcIB9M5Nn+uXkluRnpWuz9Sd3UO2dHvvPtxD4Vsg=
Subject key identifier:   26:D0:7D:C5:0E:A4:AF:F8:48:B8:4F:AA:63:95:24:76:DD:66:67:46
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer:       /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial:       0B01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number:          0AFF
Signing time:             Sat 18 May 2024 19:56:19 +0000
Manifest this update:     Sat 18 May 2024 19:56:19 +0000
Manifest next update:     Sat 25 May 2024 19:56:19 +0000
Files and hashes:         1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: eUjdBzH48YWdGLyq4N0wH3MLa/mW/l/nxeKqNYvFVr4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
                          rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2817 (0xb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
        Validity
            Not Before: May 18 19:56:19 2024 GMT
            Not After : May 25 19:56:19 2024 GMT
        Subject: CN=664907e3-ef74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:04:91:9e:37:3e:eb:ee:13:d5:3f:2b:00:
                    7b:a2:cc:cb:0f:8d:a9:ed:83:7f:58:a4:5a:93:4a:
                    83:e5:e1:f0:f0:21:c2:67:05:e8:72:3b:7f:fc:cb:
                    50:98:fd:cb:b0:3f:65:54:b2:69:b1:38:65:f5:b8:
                    e5:e5:84:56:76:81:9d:31:8e:64:d6:d7:44:b5:0e:
                    fd:86:39:0a:7b:b7:0b:eb:5e:83:d1:5e:f5:03:f2:
                    80:21:6a:4d:ae:b5:8a:b5:5c:d8:1a:9d:02:65:6b:
                    dd:e8:9a:67:95:60:95:ab:5a:12:3d:87:a1:80:04:
                    51:cc:b6:fe:de:ec:e2:a8:3e:b4:ed:5d:b4:dc:04:
                    34:04:f9:8f:59:65:07:14:d3:fe:ca:e1:61:69:a7:
                    f3:2a:fd:8f:f5:3e:ea:bb:bf:af:af:95:f4:7f:65:
                    bb:2c:7b:5c:bb:0d:35:39:84:13:29:fa:f5:86:91:
                    d3:87:21:5d:5f:06:c0:e1:4c:0e:76:7d:e2:5d:62:
                    af:44:38:12:eb:ea:96:cf:3b:4a:92:1d:a0:ad:a2:
                    4a:49:44:a7:7d:d9:4a:81:f4:00:7a:8f:43:9c:0e:
                    54:98:f8:a4:71:7d:24:12:80:9f:b9:0c:c7:64:7d:
                    f3:2e:71:02:6d:c7:c6:1b:55:26:71:9e:ff:28:57:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:7D:C5:0E:A4:AF:F8:48:B8:4F:AA:63:95:24:76:DD:66:67:46
            X509v3 Authority Key Identifier:
                keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:e4:67:b7:49:1c:07:c5:7c:12:c4:52:79:9a:88:cf:76:
         dc:86:64:96:b7:af:4b:e4:ef:77:4e:44:a7:f9:11:a7:84:2b:
         24:1d:8b:9b:23:f8:a3:01:2b:bf:23:51:d0:19:3e:52:6f:21:
         20:6f:96:be:22:b2:38:bc:b8:b5:83:16:98:7c:76:de:11:b0:
         47:e4:6f:cb:fb:27:a7:ac:01:2f:ea:72:d2:a5:b3:7c:45:70:
         5a:b0:9a:55:25:ee:79:6e:0f:33:4a:42:c6:f4:00:78:0b:47:
         8d:08:ca:71:eb:a6:b8:53:24:e4:7f:5a:be:be:01:fd:f8:98:
         81:a3:3c:97:21:2e:99:02:3f:40:53:62:0c:50:53:86:fd:89:
         c6:25:40:fe:aa:e5:86:50:cd:35:c9:33:24:8d:32:c5:74:86:
         03:fd:a6:0b:8a:17:74:dd:f0:66:20:bc:95:aa:ba:78:63:11:
         4a:6f:47:19:36:da:ba:17:d3:90:10:1b:75:e5:34:f3:ba:61:
         45:0a:eb:a5:6c:bf:84:9b:cd:49:c0:55:92:ed:ce:d0:53:f9:
         2d:73:79:3c:73:c9:74:ec:22:b3:6b:68:5a:8c:3b:38:5c:50:
         98:1e:78:6b:c3:19:f5:50:f0:ee:70:be:32:06:da:3b:da:a8:
         b9:84:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 20:48:19 2024 by rpki-client on console-fra.rpki-client.org