Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
File:                     JzleQrl9eM47L4WUayfnxogHVDI.mft (raw, json)
Hash identifier:          2x0aNSh+5ax28DbxRcAc+LMTPY/2A05s6VeQEF/c+jE=
Subject key identifier:   FB:13:27:8B:8C:14:B9:8E:47:1B:B0:11:4F:67:84:75:84:E2:09:18
Authority key identifier: 27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32
Certificate issuer:       /CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
Manifest number:          0684
Signing time:             Thu 30 May 2024 23:56:52 +0000
Manifest this update:     Thu 30 May 2024 23:56:52 +0000
Manifest next update:     Thu 06 Jun 2024 23:56:52 +0000
Files and hashes:         1: JzleQrl9eM47L4WUayfnxogHVDI.crl (hash: TwUi6SJj8Yat3nfazpolgxzFCHWxbTz/4LRRoKCMYDI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl
                          rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 23:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
        Validity
            Not Before: May 30 23:56:52 2024 GMT
            Not After : Jun  6 23:56:52 2024 GMT
        Subject: CN=66591244-00ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:c6:46:f0:57:66:45:dc:7d:d5:7f:08:b3:
                    58:77:ca:af:31:25:3c:46:d9:32:59:6b:b7:67:03:
                    4a:83:4a:11:15:ad:ba:ee:1e:7d:7e:e4:63:09:e2:
                    e8:ab:b4:97:6f:bb:44:c1:87:41:83:51:d6:e1:61:
                    69:b6:29:88:95:54:ac:e1:29:e5:10:f0:c0:cd:b0:
                    75:6a:00:c7:57:97:9e:da:32:36:a1:0f:56:8b:e1:
                    dc:4d:7a:11:26:6d:19:82:21:33:40:b7:5d:01:7c:
                    b4:b3:92:06:19:b3:81:0e:a7:4b:cc:cf:04:e8:32:
                    31:68:fb:e7:b9:52:ad:84:47:70:55:d4:1a:4d:b6:
                    5e:30:d0:ee:07:8c:10:2f:d0:73:44:ce:d1:92:fc:
                    bb:b5:74:48:35:a4:83:93:77:94:cf:1e:4a:e7:c8:
                    46:ac:a7:82:32:c4:f6:c2:ab:52:86:26:de:ba:79:
                    82:19:00:2b:7c:b3:24:bd:8e:d1:98:f6:7b:c7:7c:
                    82:4d:7d:ae:e4:11:70:a9:91:20:c8:89:59:cd:67:
                    7c:cb:98:6b:71:70:6e:cd:bc:f1:b5:35:87:bb:20:
                    c5:3d:50:f4:15:21:5b:7c:85:e6:d5:7b:77:3a:b3:
                    f2:bf:70:26:be:b4:30:4d:0b:e1:13:7b:d0:d2:f2:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:27:8B:8C:14:B9:8E:47:1B:B0:11:4F:67:84:75:84:E2:09:18
            X509v3 Authority Key Identifier:
                keyid:27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:f1:e3:92:6e:2e:6c:24:e7:d9:c5:6f:a8:33:02:4b:7b:
         1b:3d:4a:64:71:60:2c:88:06:dd:4d:ab:41:8b:ab:5e:dd:97:
         a2:aa:22:d3:b3:02:5d:74:43:30:8f:6f:51:e3:c0:3d:5d:06:
         f9:38:a2:84:60:3c:93:be:3a:d7:21:30:c2:7c:34:d4:1a:6f:
         78:dd:b6:b2:c4:cd:54:dc:eb:8c:71:32:aa:2a:26:43:b5:39:
         6b:0a:1e:73:0c:e2:e0:0b:a6:0a:5c:1b:6f:37:7a:74:ca:2e:
         dc:d5:75:bc:58:89:e2:88:34:76:41:fc:2f:f8:e3:b8:a5:e1:
         39:74:17:26:d3:f8:f2:94:cd:88:ae:3e:ba:8c:04:7a:4e:da:
         ff:d3:83:03:41:fa:98:10:c5:44:3e:32:7f:d6:77:a9:95:eb:
         a4:62:25:b8:34:83:4c:aa:f8:c3:78:2d:df:ca:e8:4d:fb:5c:
         5c:53:7a:eb:ec:7f:98:d7:7e:9c:c6:fe:38:4e:4f:0b:1b:5e:
         5a:26:86:bd:7e:54:d6:e5:08:7c:bf:81:f4:00:1f:ca:d5:25:
         96:64:1e:ef:18:2a:05:47:a8:91:a4:45:72:91:70:5f:41:fa:
         d3:17:f3:da:1c:65:d0:cd:b8:b7:b3:08:76:e8:74:b0:42:60:
         2e:1f:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 01:33:50 2024 by rpki-client on console-ams.rpki-client.org