Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File:                     dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier:          CT2F2aVODbWSrwQYQ9u6pq6zSlFIbKwPIxuXFsfEzDs=
Subject key identifier:   98:86:8C:89:B0:DF:3B:71:2D:1D:3D:3F:3E:D8:0A:72:9C:54:A5:CE
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer:       /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial:       0671
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number:          0726
Signing time:             Sat 18 May 2024 23:32:47 +0000
Manifest this update:     Sat 18 May 2024 23:32:46 +0000
Manifest next update:     Sat 25 May 2024 23:32:46 +0000
Files and hashes:         1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: oU2mg44DUJuDNLmV7v4F+nMqev0BjSiHxI3xqsYkZmE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
        Validity
            Not Before: May 18 23:32:46 2024 GMT
            Not After : May 25 23:32:46 2024 GMT
        Subject: CN=66493a9f-9319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:9e:3f:de:f0:98:69:95:b8:b1:ca:09:7b:
                    b1:41:92:9a:13:fd:9c:dc:d6:dc:a1:73:04:59:2b:
                    81:88:a1:71:f7:b1:ee:cb:99:5a:10:3e:f7:c0:b0:
                    d6:1a:db:6d:6c:45:00:c4:8a:e8:8b:8e:e1:e2:15:
                    38:f5:71:db:a8:31:f4:9e:f2:ed:53:d8:4b:10:4e:
                    31:7d:27:37:22:34:d5:54:f1:18:a9:76:49:57:2c:
                    be:a6:72:6a:33:1a:0c:c6:62:5c:87:ac:c0:c4:c9:
                    e0:63:5d:b3:f3:76:5b:f1:f1:30:f8:2c:1a:98:53:
                    8a:89:eb:45:09:2a:6b:1a:a1:0b:21:23:04:f3:0e:
                    03:31:87:6c:e8:fa:a7:52:66:bf:4d:dc:04:94:07:
                    09:6b:4a:30:f8:46:94:bb:c7:3b:97:ab:2a:aa:e6:
                    94:f3:f1:53:7a:97:4b:9d:1e:d6:e6:47:02:bd:12:
                    22:66:d8:e0:f8:dc:a5:18:23:3d:a0:34:71:5a:3b:
                    ef:49:14:05:49:93:be:01:a9:9d:d7:ea:bf:13:aa:
                    e3:02:67:1b:2a:1c:c3:16:70:cc:2b:6e:66:7b:52:
                    56:60:94:c7:ab:2b:f5:06:65:a4:d2:d8:d5:56:f2:
                    7b:11:c1:c5:20:f4:52:c9:c2:06:e9:13:7f:62:1c:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:86:8C:89:B0:DF:3B:71:2D:1D:3D:3F:3E:D8:0A:72:9C:54:A5:CE
            X509v3 Authority Key Identifier:
                keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:36:e8:24:af:f8:95:d8:45:a1:3c:1f:89:d3:24:73:ff:
         18:e6:22:26:7b:ba:5c:50:37:f8:04:96:16:65:09:7a:0a:81:
         98:e1:33:d8:eb:d6:42:c6:0f:90:b4:3c:35:14:64:6d:5d:05:
         57:10:fe:e3:7f:50:3a:40:bf:07:7c:80:b2:2e:67:a5:5f:80:
         6e:da:25:bc:b6:4a:30:c9:cd:9f:60:c0:36:28:83:40:f8:81:
         8b:05:77:aa:b5:18:7f:cb:da:06:31:8b:ee:6d:a4:ca:b3:f5:
         5c:ab:ac:b0:29:a2:ef:54:f9:39:2b:e3:ce:5f:8f:14:08:52:
         1f:14:45:c2:77:cf:73:a8:2f:38:09:da:be:86:b1:4b:5a:ed:
         8e:67:ce:aa:42:aa:45:2f:c6:87:62:69:ac:85:7e:72:9f:82:
         41:6b:59:5b:4c:67:a5:35:5a:9b:db:72:95:7a:0a:a9:f2:85:
         c1:73:f7:ad:12:81:71:24:6d:e3:9b:31:eb:59:fa:f8:f7:6e:
         0f:8b:e6:1f:a1:db:5f:44:5d:39:aa:62:b6:20:3a:bd:29:23:
         20:1a:98:f8:0a:14:3a:f9:6e:ae:80:c8:e4:93:c3:fe:32:e2:
         b5:a0:af:5b:53:36:03:8f:bd:a5:30:25:35:fa:45:c0:c4:a8:
         6d:77:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org