Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
File:                     gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft (raw, json)
Hash identifier:          FbXSIB3oi94wW4b5R3oPmqE/eeA3yegyuITmOYa0KEQ=
Subject key identifier:   2D:5F:4F:BD:25:B0:D9:3F:E3:05:F0:55:A6:B9:6C:54:5E:AC:80:06
Authority key identifier: 82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87
Certificate issuer:       /CN=A91DB331/serialNumber=8230B12177EA436E98D71F1DFF89B9AE2BBE8587
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
Manifest number:          011C
Signing time:             Fri 31 May 2024 05:56:09 +0000
Manifest this update:     Fri 31 May 2024 05:56:08 +0000
Manifest next update:     Fri 07 Jun 2024 05:56:08 +0000
Files and hashes:         1: gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl (hash: D0hh483xf+9URduhLsYvDX+wo3EUbKrAHXq5WKzaJXA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 05:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB331/serialNumber=8230B12177EA436E98D71F1DFF89B9AE2BBE8587
        Validity
            Not Before: May 31 05:56:08 2024 GMT
            Not After : Jun  7 05:56:08 2024 GMT
        Subject: CN=66596678-e7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:e5:fc:d5:9d:06:aa:79:6f:cc:f2:04:67:
                    31:1e:d5:d4:81:64:c0:84:0b:16:99:f9:11:8d:2b:
                    31:4c:9d:3a:af:eb:b4:c2:c3:0c:96:da:fd:aa:9e:
                    59:8c:f0:b9:f8:ba:a4:6b:62:d3:45:fe:ad:b2:05:
                    1f:7e:b2:7a:04:72:3f:98:e8:d6:23:83:8d:ee:91:
                    ad:17:59:b5:b0:37:28:71:f2:13:a9:98:4c:d0:f7:
                    1d:c5:16:3d:ac:fd:4c:31:e1:e5:87:9a:00:1b:d5:
                    50:9f:32:75:05:ac:30:6e:36:aa:4c:54:a9:d6:d2:
                    d6:3d:ed:b9:c5:ee:a3:bd:dc:0b:6c:a3:57:3c:b7:
                    6d:c5:94:41:b0:3a:88:77:86:03:20:6c:8e:ea:f1:
                    4a:ba:75:ae:ab:01:8c:54:8c:56:4e:0b:b1:f7:1b:
                    6b:e3:b9:d5:31:a0:09:65:34:8e:f0:bb:fb:29:69:
                    9c:99:7f:6c:43:cc:e3:5d:8e:6a:10:32:85:04:a5:
                    d1:90:33:21:8a:0b:21:0e:33:89:37:eb:1b:3c:65:
                    ea:ea:3b:5c:73:f9:98:89:9f:44:53:d3:68:a3:77:
                    1c:f1:3e:cc:e8:69:80:b4:fa:8b:a9:57:7c:74:04:
                    d7:72:13:32:c5:84:25:3d:bd:1f:1b:05:a0:27:4c:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:4F:BD:25:B0:D9:3F:E3:05:F0:55:A6:B9:6C:54:5E:AC:80:06
            X509v3 Authority Key Identifier:
                keyid:82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c0:14:d4:e4:58:c0:43:de:02:55:2e:29:cf:5e:b4:95:40:
         b8:68:72:1b:19:4b:1f:c2:cd:31:94:e5:ef:46:fd:ab:d2:4c:
         dc:68:a0:64:4d:c2:d6:4f:6d:a3:b7:1c:fb:44:0c:68:40:dc:
         ce:cb:7a:46:a7:da:e7:74:f7:17:c0:50:ee:0b:75:6c:da:bf:
         aa:b1:18:c4:f1:9b:b3:ab:7c:25:d9:9d:65:0d:64:63:6f:13:
         cb:a7:c3:8a:ce:15:87:92:1b:4d:3e:02:72:11:d5:d4:e5:7e:
         1e:65:ff:db:33:8b:07:e3:45:60:3f:81:15:8f:40:c1:6f:12:
         cb:19:aa:b4:9c:16:d0:60:bf:aa:f2:7a:47:f1:9e:11:e9:78:
         76:89:05:fe:49:0b:d3:3e:92:8d:39:2e:eb:42:3e:b9:2e:4c:
         96:fb:d6:a8:df:63:9b:21:05:cd:a4:ab:5a:31:fa:3e:7d:bf:
         00:19:81:02:a4:c5:58:1f:e5:70:b6:f4:57:b5:3a:d9:9a:1e:
         58:5b:dc:fa:f7:b9:36:cf:43:7d:cc:b7:4d:a7:ad:b2:c8:37:
         c8:8f:59:7b:90:4f:58:6a:f9:9d:fd:1f:9e:c7:c9:b9:98:40:
         c1:3e:f6:79:16:bc:fa:1b:b9:08:2d:76:03:02:a3:8f:dd:f7:
         54:49:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:49:27 2024 by rpki-client on console-ams.rpki-client.org