Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
File:                     S0rec85QWER4Xs7uCnUEbWwvtUw.mft (raw, json)
Hash identifier:          pVhA2f2IBl2e1qDlJrTN6DpoAJRVsDVfGhZpdK1jyRA=
Subject key identifier:   CF:6D:4C:85:37:A7:B9:6F:6F:C9:DE:B1:6D:95:F3:19:D4:BA:C5:AC
Authority key identifier: 4B:4A:DE:73:CE:50:58:44:78:5E:CE:EE:0A:75:04:6D:6C:2F:B5:4C
Certificate issuer:       /CN=A91917EF/serialNumber=4B4ADE73CE505844785ECEEE0A75046D6C2FB54C
Certificate serial:       03DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0rec85QWER4Xs7uCnUEbWwvtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
Manifest number:          03CE
Signing time:             Sun 19 May 2024 02:27:55 +0000
Manifest this update:     Sun 19 May 2024 02:27:54 +0000
Manifest next update:     Sun 26 May 2024 02:27:54 +0000
Files and hashes:         1: S0rec85QWER4Xs7uCnUEbWwvtUw.crl (hash: ul+Mr94hN/dxMc1ulwqqdaEYeUS0MNNaNJkh43sApV4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.crl
                          rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0rec85QWER4Xs7uCnUEbWwvtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91917EF/serialNumber=4B4ADE73CE505844785ECEEE0A75046D6C2FB54C
        Validity
            Not Before: May 19 02:27:54 2024 GMT
            Not After : May 26 02:27:54 2024 GMT
        Subject: CN=664963ab-a81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:48:f4:27:f4:a4:38:48:e5:ca:06:1a:57:
                    56:14:bd:11:68:cf:ed:2b:81:5f:7c:a7:b0:42:a6:
                    c8:86:a7:62:a3:7b:a9:9c:83:de:02:6a:d6:79:14:
                    23:16:3f:14:e7:7e:4f:da:d5:41:87:66:4e:bf:89:
                    54:7f:69:46:51:23:46:ef:51:a9:6b:14:c4:56:0b:
                    3c:29:57:69:5c:5a:cd:ea:8b:11:6f:b0:db:12:2f:
                    5c:e0:b1:2d:2e:d8:f7:c2:8b:53:bc:f3:f5:80:0c:
                    04:7b:b8:a9:e7:9a:82:86:2f:47:b4:dc:05:42:23:
                    fc:3c:19:93:b5:38:54:df:dc:de:20:2f:7a:90:82:
                    f3:ba:95:e3:c7:0b:af:16:2e:5c:2a:d6:05:5b:d5:
                    4a:3a:b8:10:7c:bd:69:eb:7a:6d:e4:28:30:22:3b:
                    00:0b:96:81:fb:14:72:38:f0:05:61:1f:86:48:e1:
                    50:2d:0f:ad:70:0e:e0:77:84:f1:dc:86:5e:56:ee:
                    a9:fa:b0:f4:dc:3a:e2:7b:4a:6a:ad:81:bc:62:54:
                    d2:9c:47:c6:b6:b4:56:3f:dd:b9:3e:26:67:6c:0a:
                    bb:87:f2:e1:cd:83:f5:a5:ba:6d:35:b9:88:65:8c:
                    a0:7a:b0:60:d0:da:7b:cf:f2:1c:4d:ea:97:eb:d7:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:4C:85:37:A7:B9:6F:6F:C9:DE:B1:6D:95:F3:19:D4:BA:C5:AC
            X509v3 Authority Key Identifier:
                keyid:4B:4A:DE:73:CE:50:58:44:78:5E:CE:EE:0A:75:04:6D:6C:2F:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0rec85QWER4Xs7uCnUEbWwvtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:20:57:ff:3b:dc:41:ed:2c:82:53:94:48:92:1c:61:60:42:
         b7:b1:68:43:d0:86:38:e3:ce:92:f4:26:7e:37:e2:6a:50:92:
         d8:19:2c:53:8b:0d:1f:ae:86:22:28:d9:34:a5:84:2a:2d:0a:
         06:b8:e8:c5:30:ee:30:6e:c2:23:d4:28:f1:26:9b:ea:af:9e:
         20:26:17:cc:93:04:2b:d7:7e:e3:e4:0e:ed:3d:68:f0:f0:2e:
         81:bb:d2:25:7a:8a:08:59:c4:59:1b:4b:1b:de:4b:34:18:08:
         38:b0:38:55:eb:fa:27:ff:03:3e:72:fa:46:f9:c7:67:d8:e4:
         ac:f8:b2:c0:4d:00:77:05:e1:f0:81:b3:ef:ba:e1:d4:3d:f8:
         18:32:53:2a:54:73:78:a9:28:37:b1:9f:84:24:42:ec:2d:a9:
         65:da:4b:62:51:dc:06:cf:c8:ac:77:90:61:de:e6:7b:86:b1:
         30:53:2e:c3:f0:d9:ba:53:f7:0a:06:8e:86:f1:d0:f7:49:98:
         73:3a:52:58:f0:39:b2:fe:12:05:7d:53:33:d3:8c:3b:dd:6e:
         84:c0:a2:6a:98:16:df:06:f1:24:c2:ec:a3:c6:9d:31:9a:86:
         ff:4d:48:c7:5c:91:31:84:24:9f:bd:52:5c:0e:c1:67:86:2a:
         2e:f7:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org