Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
File:                     0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json)
Hash identifier:          RsacyfGaItTE4T1YD2vY/BIastXzZLMxIvHme49JAEc=
Subject key identifier:   A6:74:90:80:D5:F1:8F:84:45:0F:20:81:09:7F:1C:CB:B0:E8:A1:2A
Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2
Certificate issuer:       /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
Certificate serial:       0532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
Manifest number:          0532
Signing time:             Sun 19 May 2024 00:56:19 +0000
Manifest this update:     Sun 19 May 2024 00:56:19 +0000
Manifest next update:     Sun 26 May 2024 00:56:19 +0000
Files and hashes:         1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: /kNCtB8T8Ub1xYlBKBiz54R0sYc8Wp7qwbDZREEtlDI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
        Validity
            Not Before: May 19 00:56:19 2024 GMT
            Not After : May 26 00:56:19 2024 GMT
        Subject: CN=66494e33-3cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:65:af:9f:3a:65:65:7e:51:12:2c:89:1a:
                    7a:4e:fa:12:5d:76:ba:10:d2:79:92:02:a4:83:bb:
                    80:f8:cc:5d:9a:d2:35:a3:3d:86:23:3e:33:f5:2e:
                    0a:b8:4c:0e:30:cb:44:b3:72:b7:e3:ea:8d:43:af:
                    9f:ac:b7:4a:6a:80:ec:59:1a:d9:44:85:71:23:55:
                    27:ce:22:65:b4:01:57:c0:bb:3f:4f:a8:0c:ea:e7:
                    b1:5d:44:5b:98:4d:6d:5d:1e:a0:76:63:aa:e9:27:
                    77:9a:e1:36:25:8b:12:6d:55:eb:b0:1b:8a:71:53:
                    b6:3b:21:eb:00:36:f1:a6:d2:fd:ea:20:65:f3:b6:
                    cf:37:28:e0:d4:ec:03:49:c0:1d:11:13:77:cd:47:
                    e3:fa:5a:55:f8:25:8d:1c:cd:1d:a3:8b:54:47:13:
                    53:87:b8:e0:d4:23:a2:7a:01:62:19:da:9d:cd:e5:
                    29:bc:d9:97:01:8b:3b:04:0d:97:d9:97:99:56:28:
                    53:b2:c7:34:a6:50:08:ad:67:1c:b2:f3:4f:39:b7:
                    0e:a5:71:ff:6a:d6:e6:03:8e:69:07:00:d6:8a:53:
                    92:e8:25:f9:09:cd:b2:1c:46:6e:be:81:bc:c7:53:
                    36:72:e3:a4:93:f0:7c:d2:bf:f9:1a:18:06:ca:73:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:90:80:D5:F1:8F:84:45:0F:20:81:09:7F:1C:CB:B0:E8:A1:2A
            X509v3 Authority Key Identifier:
                keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:ce:9e:9a:8d:ad:8e:5f:71:e8:99:25:0b:09:5d:05:4c:
         a4:2b:99:7c:85:dd:1b:c3:39:3d:60:18:43:15:bd:fc:a9:55:
         65:3e:fd:72:17:1c:a9:04:4a:0f:d2:83:a9:a2:42:49:39:71:
         2b:08:87:dd:4c:1b:eb:c4:5b:7b:2b:ad:50:0d:88:d6:7f:5a:
         21:fc:ff:60:06:f4:ef:e5:ec:1f:90:04:10:fc:94:86:c0:4f:
         a8:04:de:59:0f:a6:9e:35:6c:2c:31:b8:ec:31:c1:e1:23:b1:
         e3:f2:99:2e:6a:82:f9:e0:33:76:a4:f7:ed:53:6c:2a:fb:f4:
         ad:15:fa:12:02:ee:98:a0:b7:b7:e9:8a:1e:1c:e3:2e:0e:df:
         da:d1:9d:64:8e:f6:ca:9b:35:96:1d:f9:4d:0a:11:19:df:ba:
         b9:5c:37:c9:1b:92:3c:91:7c:a5:c1:1f:c2:70:8c:0c:12:12:
         1d:00:9c:c3:15:ac:d8:7e:56:4f:cf:0c:89:97:83:c9:4c:12:
         5d:f9:2e:23:28:37:f0:f9:66:d0:6e:bc:d9:7e:7d:1c:7c:3f:
         3b:a5:bc:ff:8c:bb:72:5e:eb:e3:29:73:7c:8d:e5:72:c2:11:
         13:12:13:6b:95:95:0e:64:90:d2:63:45:91:ad:02:85:6f:b9:
         5b:2d:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org