Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File:                     FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier:          MoCTAIkiTjuWo3YqJ15e1y3QB6mDz7hCzVbCeBVVL3c=
Subject key identifier:   E8:1E:B1:C1:CC:9E:36:2D:2B:0E:4A:56:3E:48:C7:4F:9F:78:02:42
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer:       /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial:       31CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number:          97F4
Signing time:             Fri 31 May 2024 15:35:35 +0000
Manifest this update:     Fri 31 May 2024 15:35:35 +0000
Manifest next update:     Fri 07 Jun 2024 15:35:35 +0000
Files and hashes:         1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: EeWO3bH3/5MZ8WU0vsbKUsyDE5kJruEKr1yEBdO/Xx8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12751 (0x31cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
        Validity
            Not Before: May 31 15:35:35 2024 GMT
            Not After : Jun  7 15:35:35 2024 GMT
        Subject: CN=6659ee47-957d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:87:62:21:12:ce:d2:08:57:98:db:cd:19:
                    04:08:cf:9d:c7:7f:27:a3:1a:fd:d2:c2:81:97:b4:
                    90:93:6c:cd:7b:d4:6f:cb:53:72:da:0b:ae:ec:d7:
                    e2:48:d9:d1:aa:92:f0:c6:f0:ef:da:d3:a1:56:76:
                    f0:8c:3a:dd:de:60:5a:47:4e:94:18:fb:9d:2f:60:
                    f6:aa:0a:7f:33:56:12:40:80:23:7a:d0:7c:a6:19:
                    35:f8:69:49:56:5c:ad:df:8b:66:a1:a2:f9:50:53:
                    ae:36:ed:e1:b3:d6:b5:1a:c1:09:b5:c2:30:1b:74:
                    bd:2b:4b:c3:9a:de:7a:d7:b5:54:9e:2b:1e:b0:d2:
                    11:8f:f5:49:b6:b1:92:df:a2:c9:4b:fb:16:59:9c:
                    bd:e5:df:9b:fa:06:68:9c:27:3d:81:70:78:7e:ba:
                    f5:cd:43:73:d9:1d:27:1d:50:28:e5:20:b5:3c:48:
                    44:68:8f:72:64:07:d7:7f:1c:8e:cf:7c:1e:58:e0:
                    ae:3f:12:5a:74:12:e8:b3:df:95:43:40:a3:46:27:
                    aa:33:16:d1:bb:92:79:81:7e:9d:49:a1:2d:e6:dc:
                    6d:18:38:12:16:5a:7d:0d:4c:34:98:82:c3:45:66:
                    9e:3a:30:8e:04:72:62:5e:40:19:fc:e2:91:94:92:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1E:B1:C1:CC:9E:36:2D:2B:0E:4A:56:3E:48:C7:4F:9F:78:02:42
            X509v3 Authority Key Identifier:
                keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:a8:cf:92:9a:f5:fc:68:4f:3a:c8:22:92:c0:c9:ef:fa:
         53:99:c0:99:df:03:7b:70:a9:49:3e:c8:5a:fb:d1:68:8d:ce:
         a1:e8:24:8b:9b:c2:e3:f9:f1:50:4d:e9:52:45:22:cb:1a:5a:
         59:2b:fe:48:2e:bb:44:a0:4d:40:78:7c:4d:d5:53:5c:1f:e5:
         c5:ab:4c:6f:79:1d:44:30:ba:71:50:04:e2:66:da:ca:e5:a3:
         c3:43:4f:ea:e8:50:f6:88:1a:1c:75:5d:20:4e:f7:d5:df:a3:
         17:3a:2f:86:8e:bc:71:67:43:7b:c6:4e:ab:b4:e6:af:1e:b0:
         dd:aa:0f:fd:78:95:94:a2:24:f9:d0:e8:81:aa:96:32:8e:63:
         89:70:ac:92:8e:66:34:95:4c:7c:dc:d1:5d:b8:20:fd:60:c6:
         7a:07:a1:e3:f5:a0:b5:7d:d7:32:69:4f:0e:fe:cf:e1:4b:f8:
         bf:7b:23:3b:87:ff:f2:52:7f:12:af:ea:b8:4e:93:f1:0c:64:
         fc:b3:95:27:e8:c4:9e:11:67:45:5a:3a:c4:d3:cf:0f:89:4a:
         ba:06:41:6a:3c:da:3b:6a:0f:22:cc:e0:56:3e:ec:e4:54:8a:
         f2:1d:5c:d7:9d:b6:1b:54:4e:9c:e5:13:b9:e5:56:c7:f8:4c:
         8b:12:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:44 2024 by rpki-client on console-ams.rpki-client.org