Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          ajY9qGyXSTqhLgs0ofDS6bLV2MLQxCywzY8U2zxpOIQ=
Subject key identifier:   36:0A:C5:CC:7D:64:58:40:52:F7:84:02:0F:DB:EE:AE:AF:24:0B:59
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          A6
Signing time:             Sun 19 May 2024 06:41:32 +0000
Manifest this update:     Sun 19 May 2024 06:41:32 +0000
Manifest next update:     Sun 26 May 2024 06:41:32 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: olDpVyG4I9mHPFfPtLJj4rw/4en3EonMvrrHIOMQV1g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: May 19 06:41:32 2024 GMT
            Not After : May 26 06:41:32 2024 GMT
        Subject: CN=66499f1c-dd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:d0:00:04:b7:0f:09:fd:36:2f:78:b1:5a:
                    c6:30:45:29:59:3f:58:6c:65:8f:a3:89:e2:30:56:
                    c6:15:43:aa:c7:0e:bf:11:ae:b4:f7:ac:ac:6f:e8:
                    d7:1c:e0:c3:4a:db:94:d4:8b:64:2b:74:a2:e6:a1:
                    8c:6c:94:25:51:5f:44:95:6c:7b:d3:e6:fe:29:1f:
                    65:45:a5:bc:fd:c2:82:f8:99:22:8e:a2:9d:ed:56:
                    cd:59:51:ae:35:1f:6b:44:45:a9:fe:89:01:12:3c:
                    4f:35:01:99:99:4f:a3:01:e5:59:8e:6c:2f:fa:d1:
                    e9:8b:f0:d9:35:c8:e1:fe:8e:92:85:2d:bf:9f:8a:
                    a2:fb:c3:e6:25:b2:67:cd:b5:b3:08:f7:fc:56:e2:
                    e2:95:ef:29:f9:52:f9:14:28:d4:d7:ba:be:6f:6c:
                    88:02:dc:de:6e:ad:9f:d5:72:1b:37:e1:8c:97:05:
                    93:a6:fa:96:c1:89:da:73:4c:97:be:5e:4b:70:9f:
                    b9:35:86:16:22:6c:8c:5b:5c:79:1b:ce:b2:3d:0d:
                    19:c5:06:12:c6:40:4f:ee:f6:80:a8:aa:08:5e:c4:
                    5a:ae:9e:46:4d:5e:d9:12:16:73:72:5a:bb:5b:bc:
                    37:b4:e2:fe:82:16:45:84:ca:d8:d9:96:aa:e0:42:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:C5:CC:7D:64:58:40:52:F7:84:02:0F:DB:EE:AE:AF:24:0B:59
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:bb:ae:5e:7e:1c:88:41:e7:ff:cc:50:09:18:03:02:49:
         a1:84:8c:51:10:5d:d2:ec:c0:a5:33:8e:dc:84:a2:a4:0b:74:
         bf:06:58:4f:ce:90:b6:62:26:6a:e6:41:0d:0b:67:c3:85:ef:
         6a:70:c1:79:c2:42:0a:06:0e:34:64:37:d8:e7:3e:25:a9:96:
         ae:5d:e1:20:c7:45:c8:e2:bf:cf:43:fb:44:d4:fc:28:8f:27:
         bf:82:ab:9a:90:bb:1a:3c:96:4e:67:57:ab:2d:98:3f:1f:97:
         e2:3f:9e:4d:46:76:0e:67:eb:a9:20:77:ca:0f:25:ac:66:58:
         cf:51:bf:79:82:1d:78:e7:dd:73:fd:7e:d3:d8:e1:30:35:ec:
         50:d7:90:56:a3:dc:f1:78:c6:a7:bf:84:b4:3f:6e:0c:f3:96:
         ad:22:3f:fd:a7:32:08:44:e5:cc:d3:f6:07:cb:ef:63:51:36:
         4e:35:9e:8d:dc:f7:5a:f1:70:43:ea:97:91:bb:f1:04:e2:4d:
         ad:a0:34:cb:b0:e8:e0:99:6a:dd:2c:94:11:cd:36:44:86:27:
         c0:4c:ac:9a:0d:c0:26:9e:7c:a7:10:d0:d6:46:87:32:29:d2:
         42:66:c1:34:bc:51:98:50:0b:67:ee:c1:44:66:20:12:9c:af:
         71:c3:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org