Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          Oex7AzJgA0i/9/UtmiEsTfkK/rC12ibZqHAwBaw38XM=
Subject key identifier:   15:49:56:AD:B0:C4:E0:03:72:21:D2:4C:D7:08:06:78:D6:D5:CC:C7
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          94
Signing time:             Sun 19 May 2024 06:55:33 +0000
Manifest this update:     Sun 19 May 2024 06:55:33 +0000
Manifest next update:     Sun 26 May 2024 06:55:33 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: NdVP+RPkUvux+Lgm9iSD6Eo3d72/WLu1R87/VobSQgI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: May 19 06:55:33 2024 GMT
            Not After : May 26 06:55:33 2024 GMT
        Subject: CN=6649a265-53bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:ca:1b:92:82:f4:a5:d2:f8:f8:66:cc:0f:
                    2b:7f:f7:1a:8a:e8:f2:da:aa:51:6a:85:e3:0e:d9:
                    bc:6e:21:e8:70:76:f3:4a:2b:57:f7:f0:8d:cf:72:
                    26:e9:d6:02:99:f9:89:ad:4b:d3:56:81:b9:02:8a:
                    82:0c:bd:c9:3d:1a:e3:fa:0e:1d:74:27:9c:db:41:
                    d8:cf:f7:c1:f1:7e:ac:8f:85:1b:4f:6c:d5:e2:b6:
                    98:6e:10:44:61:53:83:58:14:74:e1:f3:ef:eb:5a:
                    9f:ac:43:0d:bf:25:a2:30:87:81:dd:69:8e:2c:19:
                    17:0a:c8:2d:cb:29:c3:e8:a0:77:ec:49:9f:d0:07:
                    a0:e9:7b:a7:44:50:3f:2f:35:a5:85:da:15:d8:db:
                    c2:fd:9d:00:54:24:4b:08:4f:c5:1d:97:a2:2e:83:
                    a3:15:24:5b:0b:80:9d:b1:57:92:65:8d:5c:1d:e9:
                    9e:3b:6d:6b:5f:02:7a:e5:06:16:06:36:aa:92:b3:
                    bf:7b:dc:15:3a:c2:e7:f0:6c:f8:a2:c6:b4:a6:09:
                    1a:5c:f5:ca:62:a7:1a:23:a9:5b:4a:e3:5f:95:4b:
                    df:30:1a:0c:5f:ae:8a:df:14:3f:19:54:c1:7c:06:
                    dd:52:2a:48:3e:87:c5:fe:ac:8e:fb:c7:02:d4:de:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:56:AD:B0:C4:E0:03:72:21:D2:4C:D7:08:06:78:D6:D5:CC:C7
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:a7:25:8b:96:8f:7b:d8:a0:ba:39:7d:1a:09:43:c9:6c:
         2a:4b:f0:cd:b3:59:3c:33:f2:ac:37:aa:18:a2:8c:2a:ce:73:
         be:b6:51:7b:b4:f4:e3:5b:81:74:77:da:de:5c:57:f1:c6:ee:
         5b:3a:1b:d7:97:2a:7f:a1:72:7e:4a:94:e1:fd:77:95:6a:41:
         b5:b8:fc:f7:4c:e2:46:c4:b1:8d:44:a6:0a:83:cf:b5:41:66:
         fb:87:ee:24:99:03:22:f9:d9:4f:53:1a:46:fd:c1:7a:c9:c7:
         54:32:eb:5c:9a:a4:8b:f6:48:ca:07:eb:1b:f9:c4:c0:b2:24:
         be:97:a4:ee:61:1c:17:7f:53:9d:36:41:21:7e:71:63:24:d1:
         1e:7c:d3:bc:b5:cf:01:6a:d2:63:9d:b2:a4:a3:5e:06:ea:a0:
         05:bb:30:ac:6f:64:ca:cc:e0:42:63:c0:ea:33:ca:bf:01:16:
         db:68:57:22:f1:73:62:d9:89:3e:9f:b8:69:10:7e:7a:b9:52:
         ca:e4:7a:5f:e5:68:66:e5:34:bd:c8:41:b5:ac:d7:b7:ee:79:
         83:f3:d0:c6:03:85:e0:02:b1:13:05:28:65:c6:e7:93:01:89:
         4f:76:a2:98:eb:2b:35:7f:7f:df:93:b0:bf:0e:d9:03:49:d0:
         22:8e:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org