Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          qaD2arOezuxcqHbsX+gNd18TOYDdG7ioRBej0G9Vkns=
Subject key identifier:   09:DE:AE:DA:02:4F:FD:0D:2D:80:18:BD:47:95:9D:A5:5A:5F:B2:D2
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0BC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          126F
Signing time:             Tue 30 Apr 2024 19:24:58 +0000
Manifest this update:     Tue 30 Apr 2024 19:24:58 +0000
Manifest next update:     Tue 07 May 2024 19:24:58 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: 8//t+hcwBAK7Fe+s8BvZTOkl4/LgYHUa+EMCWAMINgQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 19:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Apr 30 19:24:58 2024 GMT
            Not After : May  7 19:24:58 2024 GMT
        Subject: CN=6631458a-2671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:57:34:cf:2c:78:45:34:3c:64:48:12:d6:
                    df:47:bf:84:51:cc:ad:74:81:5a:30:57:de:58:60:
                    cf:d9:23:dc:78:97:4d:ba:91:58:cf:76:fc:f3:52:
                    28:ae:3a:9b:e9:68:f2:01:b5:0f:52:d0:23:93:1e:
                    03:34:62:72:38:96:08:f5:c3:13:d9:fe:06:98:4c:
                    ac:52:d1:97:32:c6:13:d6:4f:67:ff:4d:81:a2:97:
                    10:ff:e3:0f:5e:e6:f5:af:33:28:9e:f9:9a:02:b7:
                    0d:fb:cb:6d:80:99:0b:c5:10:a4:26:90:ad:2d:23:
                    bc:7f:c5:0a:20:9e:95:c2:ad:93:14:40:47:32:1e:
                    6b:ab:6c:0d:01:5f:20:bc:fa:6f:46:e8:ad:8e:d0:
                    41:2f:eb:9c:0c:c6:ec:8d:44:4a:c3:fa:94:fc:48:
                    4f:40:c6:80:0d:b3:68:c2:a4:11:74:b9:e3:0c:44:
                    80:92:34:1c:a8:da:b7:85:1c:5b:20:e2:fd:b7:6a:
                    cf:e1:0b:39:b2:86:11:14:6a:82:0c:ed:f3:18:63:
                    35:37:60:f4:62:fc:06:c9:21:6d:95:5e:0f:fc:48:
                    0b:46:83:55:b7:b2:01:4c:76:82:b4:48:fe:0f:6d:
                    76:bb:53:a7:68:e0:8f:cd:e2:11:80:54:c2:4d:bc:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:AE:DA:02:4F:FD:0D:2D:80:18:BD:47:95:9D:A5:5A:5F:B2:D2
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:42:7f:71:9f:13:74:6c:a0:57:b3:e2:08:b7:9f:d1:dd:46:
         17:ef:56:75:a4:0e:27:85:26:26:6f:61:15:9f:37:0d:db:70:
         1e:52:85:e3:e7:3e:47:47:06:92:4b:b5:59:20:24:8a:65:6e:
         d9:ce:c4:91:5f:32:55:c5:98:6c:b0:7b:e3:b3:15:82:60:16:
         d3:16:a8:55:2b:fc:61:4a:d4:c2:b4:50:f1:f9:c4:b5:2b:a9:
         c7:3e:f8:86:db:18:51:32:bb:fd:fe:66:9c:9d:a5:85:94:4d:
         c5:33:f5:fd:e8:f9:c6:bb:f4:f9:04:bd:9c:36:ab:46:a8:90:
         28:56:77:58:9a:e6:52:a8:3b:7c:c5:72:44:9d:df:de:0e:60:
         df:08:91:8d:92:cd:10:da:f5:c9:b2:47:bd:1f:10:bb:50:0a:
         a2:e1:73:d5:96:e6:2e:b8:25:63:6c:a2:a4:de:7d:08:35:b3:
         fd:76:c5:95:d2:35:d1:2d:63:21:f9:38:4e:18:d4:b2:a8:b5:
         12:a2:80:6e:69:72:5a:65:4f:44:9c:e4:6b:6e:5d:d2:a8:36:
         d4:a8:d5:54:1f:5e:70:05:0e:43:b9:bb:91:ab:dd:1b:2a:81:
         2d:92:b0:1e:4c:10:59:59:58:18:42:bf:ac:f9:36:0c:d5:1b:
         80:04:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:37:52 2024 by rpki-client on console-fra.rpki-client.org