Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          /7MjnOaj09fMKi1nvqoCfEeTKIQTF5qeYCTkmpQKxlY=
Subject key identifier:   05:BC:C6:7A:59:00:2C:82:F7:DC:A3:7B:AD:BB:F1:3C:50:5D:01:FD
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          06E8
Signing time:             Fri 31 May 2024 23:35:24 +0000
Manifest this update:     Fri 31 May 2024 23:35:24 +0000
Manifest next update:     Fri 07 Jun 2024 23:35:24 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: jR9wLsjgnznxwe3dPlU1FSkD8FknU/GWBS36z/DfAgY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: May 31 23:35:24 2024 GMT
            Not After : Jun  7 23:35:24 2024 GMT
        Subject: CN=665a5ebc-71da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:5b:eb:d9:48:23:60:e2:6b:4c:22:39:06:
                    d2:c4:30:6b:c2:25:f8:40:05:1c:9e:15:b0:62:28:
                    23:24:89:d6:db:3e:97:80:af:16:4a:2e:9f:25:e5:
                    8a:05:cf:13:62:41:63:8f:88:bf:2c:cd:61:4f:95:
                    f5:1b:c6:6a:27:9a:43:e3:db:ba:e0:b7:b3:71:9e:
                    fe:66:2a:01:8c:d9:2a:e6:d3:db:73:59:b5:d6:a0:
                    a2:52:c8:a7:33:6e:d6:c9:97:01:22:7b:d2:c8:f1:
                    90:5a:c0:1f:97:e8:29:b1:03:9d:62:44:02:84:df:
                    24:5c:83:86:cd:48:48:0a:44:77:43:c5:f7:e5:b4:
                    b0:83:27:f3:2d:81:94:90:35:78:e3:d9:68:b1:d8:
                    05:3e:2d:81:62:bd:d2:a6:4a:80:ce:c9:95:21:ca:
                    ad:f3:ea:fa:9c:a7:ac:11:f6:f0:28:d2:58:71:c2:
                    19:71:7f:bd:16:7c:22:f2:21:3a:20:19:b0:a8:5d:
                    a4:2e:b5:af:01:df:4c:83:8e:d5:8f:b3:4a:46:28:
                    a5:06:72:ef:f9:c7:9a:52:3d:56:b6:2a:dc:b6:31:
                    b3:3d:d3:5b:ff:d3:db:64:c5:36:31:c6:67:9c:db:
                    ae:16:11:26:62:fb:98:26:d3:4b:b6:e8:7c:5b:7e:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:C6:7A:59:00:2C:82:F7:DC:A3:7B:AD:BB:F1:3C:50:5D:01:FD
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:b1:61:75:11:f1:29:20:b0:b0:e6:56:c7:a2:ee:f4:9b:
         59:c5:c1:9c:b2:05:84:58:cd:95:ac:c0:9f:1d:2b:2e:fc:bf:
         ab:28:de:34:4a:12:a6:5b:0e:80:75:db:7f:24:11:10:5c:c0:
         52:d1:6d:16:42:dd:c5:1a:f2:61:b9:c4:f0:de:c6:4a:ea:d4:
         da:e6:9e:73:58:1c:c7:b3:39:2b:1f:67:9d:35:63:4b:e4:f4:
         ba:b6:b2:26:8a:88:e7:4e:48:16:67:98:79:1b:13:5b:62:34:
         8e:63:93:c7:03:1b:34:9e:48:d1:dc:d4:ee:f5:37:55:c4:18:
         d2:f5:8c:24:d9:36:6d:fb:9b:4d:5e:19:ec:8c:ad:cc:10:da:
         7c:01:00:7d:f3:60:95:78:61:e1:2b:91:8f:07:c5:fc:79:d5:
         31:f8:4c:eb:61:d9:cc:bb:13:9f:8d:ed:fa:bb:28:eb:0a:fe:
         86:57:6e:14:93:41:ed:6d:32:ce:f1:a6:cb:ad:e9:94:a9:52:
         be:d1:5a:33:5d:e5:c6:a2:fb:12:ce:66:0f:f1:20:78:41:7a:
         49:6c:b2:50:19:be:96:ae:2b:fd:48:44:23:35:22:ba:da:66:
         0a:f3:dd:ec:7d:01:69:66:27:f9:65:df:aa:db:98:d7:46:7f:
         c1:39:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:18 2024 by rpki-client on console-ams.rpki-client.org