Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File:                     ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier:          /cImzyH1N/uUTVg7pozzkQPxfiux1Nq+INSSEPmAnQI=
Subject key identifier:   2F:53:4E:57:EC:63:B4:63:6D:8E:98:63:9B:63:E6:C1:10:DE:C3:52
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer:       /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number:          058B
Signing time:             Sun 19 May 2024 00:28:53 +0000
Manifest this update:     Sun 19 May 2024 00:28:52 +0000
Manifest next update:     Sun 26 May 2024 00:28:52 +0000
Files and hashes:         1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: ZbgG+u5ZXLuKLdnSbMxRAjSSCcTedqVrS/8jbwurerQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
                          rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
        Validity
            Not Before: May 19 00:28:52 2024 GMT
            Not After : May 26 00:28:52 2024 GMT
        Subject: CN=664947c5-7dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:6c:7f:b4:e1:e9:ec:ae:e5:41:f4:e5:ee:
                    7d:81:89:40:f2:78:0a:d6:41:94:16:be:83:a3:ff:
                    2b:64:c8:50:e6:86:38:35:10:51:0b:46:5b:2b:54:
                    97:f5:a4:8d:33:69:d3:05:0b:28:9c:ed:39:67:f8:
                    8e:0e:9f:5c:74:d8:b2:cc:e8:0d:76:b2:97:d7:bf:
                    71:34:d9:09:c2:eb:7a:99:97:60:3c:f6:dd:b5:b5:
                    6d:60:1c:84:82:57:37:d2:71:26:89:3e:09:de:10:
                    4d:3f:f0:8f:07:9b:e5:f3:25:98:27:0b:d3:ac:af:
                    49:8e:9d:dd:fc:31:b6:5e:dd:d4:4c:eb:8c:18:2e:
                    3d:11:ec:7f:ce:a4:1b:38:89:48:20:54:b9:91:2a:
                    3b:43:ec:ab:f5:d7:3f:ea:f4:3f:8b:66:47:66:10:
                    87:2f:9a:7b:e4:d1:66:14:ae:18:cf:28:81:10:ce:
                    8a:ae:39:bf:a3:b6:73:52:3e:3d:b1:c9:bf:3b:92:
                    be:72:04:83:17:42:69:bb:51:79:54:5b:0e:e4:e3:
                    55:f7:c3:09:fe:f0:3e:f6:f6:dd:a6:05:d7:4a:d7:
                    a8:bc:f5:d8:61:6b:8e:15:f5:c7:f3:35:45:dd:ee:
                    03:4d:a9:8a:c1:56:f9:25:d1:dd:0d:6c:38:b5:12:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:53:4E:57:EC:63:B4:63:6D:8E:98:63:9B:63:E6:C1:10:DE:C3:52
            X509v3 Authority Key Identifier:
                keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:69:68:a0:5d:f0:4e:74:fc:7e:f9:9b:21:80:4f:1e:1a:65:
         67:ff:1f:8e:b9:3f:fb:81:95:0f:6b:b8:eb:d2:37:05:9d:2e:
         38:b0:3c:b7:74:19:57:73:90:8b:25:6e:86:dc:ec:5c:bf:f8:
         20:54:50:61:f7:7a:fe:a1:c3:51:63:0c:95:07:73:89:8d:0f:
         d5:59:d8:25:5d:60:6c:ed:33:01:d1:1a:d5:6f:4e:24:0b:bb:
         d9:1b:ef:c1:bc:c9:a0:86:39:f9:b7:ce:23:92:34:86:96:87:
         1a:30:db:2f:d7:31:cc:bf:52:a5:30:bc:9b:a8:ce:21:8d:9e:
         be:da:28:b6:88:a0:c0:59:de:9d:f2:d7:55:93:02:1a:02:bb:
         08:a2:f0:dd:91:fb:c6:a4:42:51:6c:51:e2:67:ad:16:44:6c:
         b5:6c:2a:6d:97:6e:ab:80:23:a4:e5:0e:32:4e:28:ed:c7:6f:
         53:8a:8a:af:a9:3e:74:9a:b2:78:84:e0:86:b2:d8:a9:36:bb:
         26:06:31:f5:22:91:ad:33:54:19:9d:26:85:e8:c4:42:0e:6d:
         a3:01:22:b1:7f:51:85:b6:6e:a1:44:99:96:a9:d2:d8:20:f1:
         97:d2:80:bb:1b:10:1e:63:2f:71:06:f7:73:2c:1f:28:6c:7c:
         58:1f:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org