Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
File:                     FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft (raw, json)
Hash identifier:          74OghRSD9NL+n5A0I65DN+iQOascoT8P+FGiOk3WDzQ=
Subject key identifier:   15:05:67:7E:0F:95:52:61:29:18:E5:38:C0:72:3C:62:C3:18:F3:A1
Authority key identifier: FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD
Certificate issuer:       /CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
Certificate serial:       3222235117F23FD1AC58EB32580F6B3D3063E948
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
Manifest number:          0169
Signing time:             Fri 31 May 2024 15:32:19 +0000
Manifest this update:     Fri 31 May 2024 15:27:19 +0000
Manifest next update:     Sat 01 Jun 2024 17:41:19 +0000
Files and hashes:         1: FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl (hash: Ew2YF3RrjDSW79YC+LUhCvEiAk2SOZLdm6RoALoEL8o=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 17:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:23:51:17:f2:3f:d1:ac:58:eb:32:58:0f:6b:3d:30:63:e9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
        Validity
            Not Before: May 31 15:27:19 2024 GMT
            Not After : Jun  1 17:41:19 2024 GMT
        Subject: CN=1505677E0F9552612918E538C0723C62C318F3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:4d:fe:3e:c7:7a:59:fb:37:09:60:cf:81:
                    7a:9c:dc:4d:c9:da:04:d5:17:29:20:ef:20:86:f1:
                    39:10:c5:c0:aa:1e:e1:e5:f7:08:2a:46:67:8a:fd:
                    e8:14:b8:49:2b:78:22:38:07:1f:36:6a:3f:13:4d:
                    b9:09:b5:e4:fc:d6:6f:04:7c:24:29:b5:42:69:ef:
                    b9:57:9a:a1:aa:7b:df:29:35:b4:07:71:25:15:04:
                    b5:f1:3f:64:ec:d0:4d:9a:9d:d7:cb:98:bb:8e:03:
                    75:36:92:05:aa:70:4e:1a:dd:5a:5f:5d:d4:af:58:
                    da:64:ac:08:4b:5e:ed:03:55:98:d7:0f:ae:6c:72:
                    3a:d6:22:a8:81:fc:fc:7a:48:29:b8:79:80:6a:4f:
                    33:c1:43:ee:76:0c:fe:fc:88:23:a2:1a:f1:a6:13:
                    96:40:fc:44:eb:a0:4d:c6:db:cf:d6:20:58:71:bb:
                    77:1f:6e:ab:3f:90:51:d9:a5:d9:4e:74:60:48:7a:
                    56:69:a8:59:86:3a:a2:ca:a8:d6:09:f4:36:c2:9d:
                    e3:42:d9:de:1e:f7:83:d6:95:18:58:4b:99:98:4a:
                    e9:73:c2:f6:af:7d:1d:9e:fb:52:a0:96:f5:22:16:
                    a5:77:f4:5f:62:20:fc:d4:99:aa:3f:76:8d:2b:45:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:67:7E:0F:95:52:61:29:18:E5:38:C0:72:3C:62:C3:18:F3:A1
            X509v3 Authority Key Identifier:
                keyid:FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:28:9b:a0:2f:65:11:0f:22:2a:ac:7a:9a:99:43:0c:84:7a:
         3f:c5:71:37:ca:ba:2b:ab:56:38:27:53:61:3d:9c:af:9a:11:
         61:6d:b5:44:36:32:49:65:1d:ab:c0:ce:44:89:4e:b9:10:9a:
         3c:5e:e3:e3:3f:8d:ff:79:4f:09:3d:ad:e2:be:e7:82:8a:68:
         24:11:12:2c:9c:9f:07:18:40:a4:65:1b:a4:82:7e:01:04:44:
         37:b3:1c:a7:b3:d9:e5:11:2d:af:44:3d:79:f3:4c:36:8e:51:
         29:4b:51:3f:a3:75:22:13:3a:22:25:f3:7f:f3:f2:d5:3f:7e:
         ee:6e:ba:ba:a1:7d:ac:dd:b6:61:b1:86:76:73:0f:b3:05:85:
         2a:b5:ea:1c:e8:d9:58:e3:17:05:00:00:83:9b:a1:b4:66:b5:
         13:13:25:d3:06:2b:02:26:66:9a:61:36:b9:2d:df:d3:2f:9f:
         20:a5:ca:d1:1e:75:b9:42:d2:ea:a7:13:66:f8:29:a9:00:5a:
         89:32:c2:31:50:5d:2c:5b:d9:ce:ac:22:33:e2:a4:ac:8f:4b:
         1d:b4:69:68:9b:cd:44:f2:36:70:f0:52:b8:40:8c:94:b5:d9:
         2f:5c:98:90:3a:b1:c0:14:af:d5:f8:92:79:7d:37:87:98:04:
         d9:ff:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:07:45 2024 by rpki-client on console-fra.rpki-client.org