Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File:                     LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier:          js/aZ9nwXYUkMPYxG7sZ9g4L2WUdSHed01U+Kdy9N/4=
Subject key identifier:   E7:29:67:4B:AA:4F:0C:AD:2B:EC:10:09:7E:49:DD:CB:4E:03:D5:35
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer:       /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number:          31
Signing time:             Sun 19 May 2024 08:22:27 +0000
Manifest this update:     Sun 19 May 2024 08:22:26 +0000
Manifest next update:     Sun 26 May 2024 08:22:26 +0000
Files and hashes:         1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: fg3vKxTSTBuW789Tr1Wz20xKOmyndO5R2+ZFcBYzpuM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
        Validity
            Not Before: May 19 08:22:26 2024 GMT
            Not After : May 26 08:22:26 2024 GMT
        Subject: CN=6649b6c2-bca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:7b:bb:ce:ab:4c:e8:17:43:6e:40:05:ff:
                    c7:47:3d:e1:21:b6:1a:b6:4c:66:b7:6b:8b:a3:b3:
                    a2:ea:90:3f:72:36:6d:33:cb:0a:94:86:a0:ad:91:
                    e6:2c:31:c5:82:3d:b5:85:31:60:23:e0:4e:75:59:
                    e4:f2:7c:a8:7e:5e:6c:0a:33:9d:df:50:ba:cc:59:
                    b9:6d:e3:74:de:79:62:41:ed:83:e0:fe:e0:84:81:
                    6a:db:f1:9e:a9:98:54:de:7d:31:78:60:5f:13:5a:
                    d7:32:53:fa:c2:fa:81:56:bb:95:4d:70:75:a6:80:
                    a8:00:9a:3f:e4:aa:cf:f0:2c:f2:fe:b4:82:a5:29:
                    fe:36:8b:cf:99:93:09:b4:c5:1e:2a:20:6c:4b:c7:
                    6e:64:03:c8:45:90:2f:8d:97:c6:b9:fc:a9:5c:9e:
                    55:ea:71:80:55:37:50:42:5b:c6:ff:dc:7b:81:86:
                    3a:b2:dc:fd:dc:68:ac:98:e3:9c:7c:f7:7f:10:f5:
                    c5:8f:7b:14:12:47:09:65:fe:04:e9:7e:1b:b9:77:
                    93:b0:a4:e7:f0:52:6b:68:b8:87:c8:59:86:77:b3:
                    65:c4:ad:f9:65:cf:c4:5d:67:97:70:22:a7:1c:62:
                    5c:62:73:06:fa:77:cd:9d:84:37:51:63:eb:d0:74:
                    8c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:67:4B:AA:4F:0C:AD:2B:EC:10:09:7E:49:DD:CB:4E:03:D5:35
            X509v3 Authority Key Identifier:
                keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:04:0a:3a:93:36:74:6d:b6:0c:3d:df:e6:23:d5:da:47:
         71:f4:e1:1c:45:f6:1e:f1:dd:f7:1b:21:40:2d:54:e7:31:f4:
         ff:b9:1d:5c:44:59:7b:38:e5:3f:cf:b0:ed:ed:ea:65:9b:44:
         05:fe:61:41:be:18:b6:d3:51:53:f9:91:ba:de:ea:8d:0b:0f:
         93:62:3e:c4:04:03:16:88:51:51:d3:56:7a:24:f5:f7:1c:d9:
         47:3c:fa:6f:bc:58:0e:82:03:8c:89:ef:7e:1c:68:63:2f:91:
         36:d3:cb:52:62:c9:8a:c4:de:68:d2:79:6e:29:ed:14:75:f2:
         b8:d6:90:83:10:bb:46:86:ae:e1:5d:24:42:fc:45:ee:58:c2:
         a0:01:04:d4:d5:cd:e2:e5:e4:81:65:fc:77:4f:f2:6f:ef:26:
         e5:93:c2:d8:44:f0:b0:ce:cf:ed:7c:a3:da:9f:53:1c:4c:a1:
         17:69:12:6d:07:fb:4c:2d:f6:2e:ca:ec:ec:bf:30:d4:44:b3:
         dd:08:ff:63:69:c5:c3:d2:47:cd:1a:08:4e:d9:5b:5f:33:bb:
         f3:cf:86:88:61:7c:0b:d6:b7:15:34:cc:91:fc:bf:eb:2b:11:
         c5:4e:e3:6e:71:3c:a0:bf:b0:ef:b1:04:95:8d:5c:47:6f:00:
         8f:23:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org