Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File:                     pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier:          x1BA8lRTYHp106zsRPdmuJYYgxBckjH2ai5EwVhpS8s=
Subject key identifier:   0D:A2:45:8C:50:4F:63:6A:BD:5B:20:1F:8B:D8:82:56:A3:D8:4F:85
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer:       /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial:       0394
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number:          0394
Signing time:             Sun 19 May 2024 02:38:12 +0000
Manifest this update:     Sun 19 May 2024 02:38:11 +0000
Manifest next update:     Sun 26 May 2024 02:38:11 +0000
Files and hashes:         1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: YKysir1YDvImRbcJXVRBz75560NmZxvUP9pAgtTurTc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
                          rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
        Validity
            Not Before: May 19 02:38:11 2024 GMT
            Not After : May 26 02:38:11 2024 GMT
        Subject: CN=66496614-2747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:96:fa:f9:a4:b5:16:27:34:28:d2:bc:39:
                    76:81:cc:2f:a4:38:e8:38:16:dd:d4:19:75:63:dc:
                    a2:77:59:e7:0d:b8:f4:69:8c:89:ed:5e:30:d6:86:
                    3d:6d:e9:fe:f5:7e:00:ce:89:e5:e5:25:d6:2d:fe:
                    23:9d:91:df:73:83:62:e2:3e:aa:c6:13:16:3a:f2:
                    d2:ac:d2:cd:d5:fe:f7:93:fe:58:0f:f8:2e:c0:0c:
                    fc:d5:04:74:97:46:b4:ea:41:19:02:6e:94:77:9e:
                    e8:ed:b4:cd:d6:0b:1a:db:35:b7:18:29:d4:7e:fc:
                    79:25:fd:01:81:92:00:4d:44:a6:f3:b5:ca:53:9c:
                    7b:e4:94:a3:74:25:60:71:ea:10:e8:95:9a:32:0c:
                    12:1e:9f:2d:5a:c1:6c:65:87:65:2b:24:d7:04:8f:
                    98:38:80:bc:6e:11:a2:05:f9:30:96:c6:9f:87:af:
                    61:ed:13:a2:18:2e:12:54:eb:d0:ce:3b:0d:6d:44:
                    8c:93:09:08:1a:67:8a:a6:86:5e:1b:75:d2:fa:86:
                    1f:81:19:92:44:49:3c:20:ac:f7:c3:1e:e5:6a:ce:
                    0a:d1:c4:69:11:0a:35:ce:45:ec:46:5e:22:19:c1:
                    3c:28:81:d0:6a:be:b7:fb:57:9d:28:1a:a4:f0:20:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A2:45:8C:50:4F:63:6A:BD:5B:20:1F:8B:D8:82:56:A3:D8:4F:85
            X509v3 Authority Key Identifier:
                keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:25:78:ad:ea:f2:4d:fa:ff:f7:b9:28:6b:d3:40:2b:db:
         68:80:2f:9b:8c:ae:9f:c2:8d:67:bf:4b:f6:10:f0:79:8f:0a:
         8e:fd:3d:93:94:25:ea:a6:22:fc:dd:08:6f:1a:c0:18:cf:b5:
         78:9a:dd:13:50:b1:40:e9:44:bf:b2:c0:83:13:70:7b:e8:d7:
         1a:12:a3:ca:1c:0b:93:76:6b:31:37:ca:e6:35:f1:b4:e5:40:
         4c:30:00:36:17:3d:c9:0d:d2:e8:e6:c1:72:6a:0a:d6:65:42:
         a5:84:1c:62:2c:95:d4:d9:96:4d:a4:0d:48:5c:ee:be:92:b0:
         5e:2b:74:c7:17:cc:29:41:3b:cf:af:87:3a:bf:b7:1c:68:5b:
         d8:3a:ec:db:f2:eb:87:f4:e3:2f:2e:fd:2e:f1:21:06:87:a9:
         69:02:c0:98:9a:1a:79:ff:cd:85:d5:ac:eb:a0:65:0d:0d:ad:
         b6:1d:a4:ca:f0:0d:f6:a6:a1:a3:27:c8:ed:a0:de:65:8c:f9:
         e0:3d:47:c7:78:aa:fe:0d:e1:56:8c:c7:98:fe:a1:8b:2f:bd:
         a5:a4:7b:e2:f2:c4:9b:1c:7f:48:82:7f:2b:97:7e:68:6d:19:
         2e:91:6e:cd:e9:ae:81:f2:a4:a7:0d:0e:a3:22:97:fa:41:b5:
         dd:72:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org