Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
File:                     rlT2Go-9_rnvA0VXvInXETsBUDw.mft (raw, json)
Hash identifier:          G/ulvmBQE4Ph1NBiAjf37bQZEwBBnDuj4GUWL3SgMrs=
Subject key identifier:   46:F3:A6:4B:62:00:1E:B1:E8:26:7A:1E:D0:4C:78:E1:CB:BF:D6:EF
Authority key identifier: AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C
Certificate issuer:       /CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
Manifest number:          10B3
Signing time:             Sat 18 May 2024 18:49:59 +0000
Manifest this update:     Sat 18 May 2024 18:49:58 +0000
Manifest next update:     Sat 25 May 2024 18:49:58 +0000
Files and hashes:         1: rlT2Go-9_rnvA0VXvInXETsBUDw.crl (hash: 4UTQPFXF+NL2Sf1lRvNLfKhqJ1cyIme6pkG6b0rHwkY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C
        Validity
            Not Before: May 18 18:49:58 2024 GMT
            Not After : May 25 18:49:58 2024 GMT
        Subject: CN=6648f857-4d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:9f:8c:ca:7e:2e:4a:f1:73:c1:76:4e:56:
                    c5:06:c6:70:75:a6:aa:24:bc:20:44:c6:b1:71:0b:
                    5b:ed:4e:33:78:c9:49:1b:17:e7:f6:41:32:e4:09:
                    9a:37:7b:8c:94:ad:c5:fb:7c:10:0b:b4:b7:04:9e:
                    e5:47:97:2a:0b:2b:5d:ec:a7:bd:d9:b5:e6:88:17:
                    45:12:4a:bc:38:8b:72:d3:e5:7b:6b:8a:b3:51:6d:
                    2b:d6:3d:1d:80:8a:07:4d:55:f2:cd:df:89:9a:5a:
                    21:0c:c8:67:f8:20:a0:21:d2:74:7c:92:01:e9:11:
                    18:22:d1:fe:c9:e5:e9:ef:7d:23:f9:66:81:02:72:
                    b8:62:46:cd:d2:84:4c:b0:a0:86:77:0d:a0:e1:ee:
                    88:02:95:92:e6:11:30:8c:fb:c4:46:49:14:96:0d:
                    2f:85:df:d6:06:82:37:f3:ce:4e:4c:18:14:d8:0f:
                    cb:f5:2b:52:d0:82:fc:58:8e:90:e1:95:f1:f0:07:
                    e0:64:a8:2f:02:1c:86:fd:6e:62:49:36:43:d1:f5:
                    d2:d4:54:d2:83:69:e8:af:da:91:85:26:0b:d3:3f:
                    a1:cd:7d:94:2d:1c:05:42:41:c1:39:6e:51:ab:fd:
                    f2:16:20:e8:ae:69:27:21:91:c3:34:20:3a:6e:f4:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:A6:4B:62:00:1E:B1:E8:26:7A:1E:D0:4C:78:E1:CB:BF:D6:EF
            X509v3 Authority Key Identifier:
                keyid:AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:3b:9b:9a:96:88:ae:6d:6b:ed:20:c4:68:f9:a9:ea:ad:
         b0:06:10:44:53:e0:8d:22:b9:fe:50:90:b2:05:24:3f:5d:b5:
         81:4f:1f:82:80:da:87:3a:c5:1d:51:2b:94:ac:0d:58:32:3a:
         34:7c:f6:d2:b3:de:f5:36:7a:c5:3b:70:55:68:27:58:1e:92:
         02:64:79:98:cd:2d:70:c2:84:74:7f:fb:67:24:71:5b:ba:78:
         b4:b1:ff:98:ed:17:18:c8:d6:57:77:a1:e4:ec:65:0f:c0:b8:
         60:2f:d8:5d:ee:c2:37:7f:fb:31:77:45:1a:d8:f2:55:f5:26:
         43:34:c8:e4:42:20:a5:90:ac:e3:1b:95:98:dd:c1:cc:53:a2:
         02:f0:0c:fd:34:02:26:06:a9:bc:d3:fa:a6:02:d3:52:f8:5c:
         66:fa:f3:7b:6e:be:1e:15:47:88:2b:75:fb:53:e8:1b:40:08:
         9a:af:6f:9f:72:da:2c:87:fe:49:69:03:74:97:9d:7d:f9:6b:
         ef:d8:7d:0d:a8:2a:43:f0:b8:74:a8:c4:3f:14:f2:d1:e6:42:
         3c:70:f4:e4:86:d6:11:3e:56:28:fd:68:fa:ce:c8:08:9f:cf:
         4b:dc:04:75:4b:9c:3a:79:dd:45:53:ad:b3:94:5f:31:73:80:
         4d:0f:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org