Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
File:                     blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json)
Hash identifier:          Nj2ssPPe74Wm8baPQfRDyZrqTN3+IBs/JHzn7UUfz7E=
Subject key identifier:   92:F4:2D:82:95:AB:49:FC:EF:B0:B4:01:73:F0:56:84:0E:1F:9F:78
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Certificate issuer:       /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
Manifest number:          0621
Signing time:             Sat 01 Jun 2024 00:39:14 +0000
Manifest this update:     Sat 01 Jun 2024 00:39:13 +0000
Manifest next update:     Sat 08 Jun 2024 00:39:13 +0000
Files and hashes:         1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: mMma0znN2BLC45fkzWtjdDP3KZJSIAoE48hC/MSwjbI=)
                          2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: OKeYJ2DZmtU3gbV57powHLVplqjvdJHP0g4S+AjP7LY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
        Validity
            Not Before: Jun  1 00:39:13 2024 GMT
            Not After : Jun  8 00:39:13 2024 GMT
        Subject: CN=665a6db1-13e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:7b:40:7d:44:de:29:ae:65:09:52:e4:ec:
                    c8:c5:c1:dd:57:51:38:7c:f4:c4:18:5b:28:28:3e:
                    02:06:d5:12:af:2d:92:d0:e3:6f:ca:33:c2:09:ed:
                    f9:eb:b4:90:7a:d0:d3:b8:e0:76:28:ef:ff:e2:21:
                    32:b2:c1:b3:26:d0:ac:6e:72:ea:8a:f6:fb:5c:31:
                    b6:88:4d:a9:fb:b8:b5:4e:f2:98:fe:69:c5:0c:0c:
                    5e:05:0a:71:f8:59:71:cd:48:13:8b:58:91:4d:92:
                    53:fb:c2:6e:f6:9a:2a:f2:70:38:0c:ce:75:75:c7:
                    39:15:0c:1c:2c:67:94:1f:a3:73:38:54:67:98:51:
                    c6:48:d8:1c:0d:4d:10:b0:c5:7f:7f:65:f6:16:d5:
                    d7:eb:07:65:da:93:13:aa:fe:a4:4e:24:11:fd:12:
                    6a:6b:6f:ce:89:1d:c7:ec:48:a4:0e:41:6d:20:2a:
                    cc:de:54:95:76:4e:43:fb:e3:31:06:06:f6:50:8a:
                    54:03:ef:eb:92:19:97:52:df:b0:d9:2a:be:7f:6d:
                    dc:a9:1d:f5:5f:56:9d:4a:8f:ae:f8:c8:03:13:ae:
                    46:2e:43:ab:50:35:0c:08:58:01:4c:1e:ad:42:90:
                    3b:fe:6f:98:37:21:16:2b:50:5b:6c:6e:a4:0a:09:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:2D:82:95:AB:49:FC:EF:B0:B4:01:73:F0:56:84:0E:1F:9F:78
            X509v3 Authority Key Identifier:
                keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:94:6a:de:3e:88:28:38:10:54:e6:be:c9:d2:86:47:fd:06:
         b0:1e:98:1c:79:5c:49:d7:03:d6:e3:ce:73:83:dd:e9:d7:b6:
         27:29:eb:e8:2a:a5:c7:50:81:40:0c:00:97:f5:d8:af:ef:a5:
         78:73:ee:c5:3a:b8:84:11:fe:74:8a:67:bd:5f:2b:ee:9c:e6:
         f9:63:8d:bd:4c:60:8d:52:c7:18:f7:f7:7c:63:86:a7:3e:ae:
         64:c1:df:f5:22:7a:89:28:14:34:ab:a2:8f:b8:f8:38:3b:31:
         5c:6a:85:55:88:78:98:14:64:69:53:32:8a:1e:ea:a7:21:c5:
         5d:09:78:5f:6c:05:1f:bc:cd:e4:27:b5:66:5b:67:88:a2:87:
         7f:52:73:08:31:7e:d5:a2:b2:05:35:ae:be:d1:d7:bd:01:78:
         4f:7f:e5:fd:99:83:3b:4f:de:e2:e4:d1:90:78:a5:05:54:07:
         d3:24:99:b7:fe:6f:a3:fa:0d:8d:09:17:65:c7:1c:04:7d:f4:
         33:7a:ec:31:18:db:19:f4:80:ba:54:5a:1e:d8:6e:45:4f:f2:
         d3:2f:ec:94:71:6d:01:69:83:cf:ad:f1:85:4e:a8:85:b9:28:
         3f:98:d4:4d:c3:02:1c:b4:d1:67:01:2d:d8:60:87:ab:b0:51:
         c5:86:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org