Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
File:                     bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json)
Hash identifier:          UQcgAzXGMRm72bdJ1GO5QKF/HoqJlUnNlxSxgwlsfUQ=
Subject key identifier:   C8:EC:DE:69:E1:BE:E8:6D:0C:99:22:DD:63:75:83:B6:4E:11:62:49
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Certificate issuer:       /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial:       10C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
Manifest number:          10C5
Signing time:             Thu 02 May 2024 17:57:07 +0000
Manifest this update:     Thu 02 May 2024 17:57:07 +0000
Manifest next update:     Thu 09 May 2024 17:57:07 +0000
Files and hashes:         1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: tIUzF5uTUKbs3IcqLz/3MI3l0OtmJshGbl+aGRWvmL0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
                          rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4293 (0x10c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
        Validity
            Not Before: May  2 17:57:07 2024 GMT
            Not After : May  9 17:57:07 2024 GMT
        Subject: CN=6633d3f3-cc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:a5:79:e7:39:3f:02:57:29:70:4f:e0:30:
                    2a:7d:0c:65:d1:e6:fa:41:d8:64:46:bb:fe:7b:1d:
                    5c:60:41:07:48:76:89:e9:7d:3c:bb:bd:62:30:25:
                    96:b4:07:90:f2:9e:0e:fb:22:30:d6:7d:97:c6:98:
                    39:d5:a8:fb:e8:7d:2c:6c:eb:84:b0:17:45:f3:43:
                    86:26:e7:b9:7a:99:54:19:51:55:67:ee:ce:f6:73:
                    61:6c:26:4d:12:6e:7c:1e:12:e1:84:a1:4a:8e:fd:
                    d6:24:e7:cf:4d:cf:ab:65:f6:bb:3f:cf:92:fb:83:
                    a5:4d:66:00:14:4c:8c:7f:6b:95:f7:1f:7f:01:0f:
                    ad:c0:f3:46:c8:a2:49:cb:d1:20:39:6e:da:92:1b:
                    fb:4d:ed:fb:20:8f:44:c3:c0:59:a4:31:ff:04:b1:
                    fb:fe:66:ee:ce:35:7c:9b:91:86:55:b0:56:3d:10:
                    f0:e0:ba:3e:f9:00:7b:b5:cb:1a:ac:98:f9:62:ba:
                    9d:04:fe:59:53:3c:e7:19:a9:d6:24:f6:f2:cc:f5:
                    f4:5c:7d:cc:44:0d:46:b1:37:f7:ae:9c:d1:83:05:
                    89:24:f8:3e:07:8a:a0:bb:ea:eb:6a:7e:2a:b1:0c:
                    29:7c:1d:45:89:ed:21:35:0e:8f:a4:ad:84:49:a3:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:DE:69:E1:BE:E8:6D:0C:99:22:DD:63:75:83:B6:4E:11:62:49
            X509v3 Authority Key Identifier:
                keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:d8:35:92:3e:fe:f4:9a:75:6c:0d:94:d1:3a:00:27:f8:
         95:b0:1a:88:65:dc:c6:11:7c:73:7c:7c:37:97:df:59:01:a9:
         16:57:c9:bb:45:40:89:88:fa:85:d8:97:03:6c:d9:2c:ef:47:
         be:f6:c3:89:d8:82:37:55:eb:5f:06:68:ab:e1:34:06:a0:e7:
         55:b8:22:36:6c:52:42:d1:1a:f0:00:70:9f:d8:1b:7f:c8:84:
         43:7b:6f:6b:fe:52:6f:41:1f:c8:76:a4:ef:1c:65:bc:a8:4b:
         b1:9e:c1:50:c1:39:1e:05:86:41:1a:60:a9:1d:cd:33:a8:77:
         07:c4:48:99:e6:1d:c0:05:0d:46:d7:36:48:22:4a:cc:42:59:
         c4:17:be:2c:44:af:af:d6:c2:d6:58:fb:32:0a:22:c1:63:ee:
         67:2a:36:ac:84:40:fd:ff:f5:ee:c0:72:dc:3f:d3:ff:a7:b4:
         cc:cb:68:7a:02:ba:3d:3b:74:4d:a7:56:3d:30:e1:34:a2:54:
         d0:3f:7d:ed:90:3a:8b:17:74:a2:77:af:34:71:51:3d:4d:c3:
         09:5d:91:46:82:d2:70:02:70:34:25:53:af:26:c5:a8:29:3d:
         19:1e:96:90:9d:1d:21:7a:2c:db:f3:62:bb:cb:b7:8b:03:ab:
         b9:f8:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:18 2024 by rpki-client on console-fra.rpki-client.org