Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
File:                     3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json)
Hash identifier:          WVYakefcKX99ofIPXs5aUnFYkGbEgOwNkI6j0LHexYQ=
Subject key identifier:   FD:31:65:1F:04:30:E8:AF:76:E7:58:FD:AF:D2:15:B2:E6:06:FF:43
Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39
Certificate issuer:       /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
Certificate serial:       1B05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
Manifest number:          1B05
Signing time:             Fri 03 May 2024 00:43:49 +0000
Manifest this update:     Fri 03 May 2024 00:43:48 +0000
Manifest next update:     Fri 10 May 2024 00:43:48 +0000
Files and hashes:         1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: z2LmreRNUmVc4Bt7IUdWoxUXy5uFyzkjyhoksOljSEE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6917 (0x1b05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39
        Validity
            Not Before: May  3 00:43:48 2024 GMT
            Not After : May 10 00:43:48 2024 GMT
        Subject: CN=66343344-f202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:ea:c3:c4:64:2b:57:6e:91:ec:de:68:c1:
                    37:20:d8:39:6c:a7:71:83:80:40:50:f3:52:fc:0f:
                    13:d5:96:f5:d5:a5:4d:96:70:b9:b8:ee:73:38:80:
                    5c:b2:4b:f4:37:18:73:b9:f6:bc:61:e2:0f:04:7f:
                    18:d1:85:d6:13:bf:b3:a4:33:23:da:9f:8b:9c:bc:
                    f3:07:88:15:7a:53:8e:31:6c:bc:44:f5:09:d7:d2:
                    61:30:c0:f0:2b:2b:07:ef:aa:50:97:b8:2f:8b:e9:
                    dc:ab:77:d5:73:19:86:a4:66:ca:2c:49:ad:e2:a8:
                    8d:14:70:0b:6b:34:4a:31:32:b7:78:4b:c8:72:1c:
                    c2:f8:63:aa:d0:aa:72:89:db:bc:0d:94:f9:2b:c3:
                    45:68:74:95:07:bc:be:9f:a4:be:d8:98:09:d3:74:
                    47:61:84:6e:59:08:e4:93:63:c3:55:05:af:04:b9:
                    30:13:18:80:15:f0:d3:f7:b7:d4:d2:f5:66:e5:18:
                    e2:16:ac:6b:07:91:99:3d:ca:34:e3:fd:3e:5a:16:
                    99:5d:bc:f2:78:09:6b:f3:6f:d1:0f:86:d4:81:89:
                    f7:c9:3c:b5:76:7c:77:e4:17:9d:28:fb:b2:74:4d:
                    f8:60:87:35:2c:a0:e3:e5:5b:01:34:2a:c7:c2:6a:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:31:65:1F:04:30:E8:AF:76:E7:58:FD:AF:D2:15:B2:E6:06:FF:43
            X509v3 Authority Key Identifier:
                keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:b0:3b:b2:0d:a3:4d:10:de:51:3a:d0:28:71:37:b1:bf:
         d5:ca:23:54:5b:c4:f6:c3:21:7a:d8:46:d9:bf:a0:69:9c:b9:
         5c:0f:01:23:0f:4f:0f:c0:38:81:4f:0a:ec:d0:7b:b2:dd:6f:
         e0:10:6c:2b:16:2d:10:b6:32:0a:78:a6:4d:18:21:49:c4:5a:
         06:dc:05:cb:3f:9a:2b:64:53:f9:be:b7:4b:68:a1:89:e5:a0:
         1c:ea:ab:79:76:19:c8:ed:44:e6:fc:74:3f:d5:af:bc:a2:25:
         72:dd:b2:fc:b9:84:ca:3e:24:1a:9a:09:fb:9f:c6:49:fc:b4:
         39:42:91:1e:ae:b8:29:85:07:dd:18:97:07:93:fb:4a:5b:c2:
         a6:83:f3:ad:06:69:f3:89:5f:ec:70:a1:c5:67:c5:93:d0:4d:
         f1:0b:5c:5a:ec:4a:a6:15:bc:c8:16:35:25:dc:77:e1:5c:da:
         95:fe:31:cf:b2:d8:5b:8f:6f:3b:6d:7c:98:1f:60:43:b0:9c:
         48:f2:dd:8a:e0:5b:42:6d:fe:20:1b:09:b9:4d:76:3d:1e:1b:
         57:27:ab:d4:e8:70:16:30:4c:98:28:28:1a:e9:9f:06:68:33:
         a2:8f:fb:c2:9e:c1:fd:f6:70:45:7f:26:a0:45:21:75:c2:c5:
         cd:53:4f:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF
OTg0MTNFMzkwHhcNMjQwNTAzMDA0MzQ4WhcNMjQwNTEwMDA0MzQ4WjAYMRYwFAYD
VQQDEw02NjM0MzM0NC1mMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Srqw8RkK1dukezeaME3INg5bKdxg4BAUPNS/A8T1Zb11aVNlnC5uO5zOIBc
skv0Nxhzufa8YeIPBH8Y0YXWE7+zpDMj2p+LnLzzB4gVelOOMWy8RPUJ19JhMMDw
KysH76pQl7gvi+ncq3fVcxmGpGbKLEmt4qiNFHALazRKMTK3eEvIchzC+GOq0Kpy
idu8DZT5K8NFaHSVB7y+n6S+2JgJ03RHYYRuWQjkk2PDVQWvBLkwExiAFfDT97fU
0vVm5RjiFqxrB5GZPco04/0+WhaZXbzyeAlr82/RD4bUgYn3yTy1dnx35BedKPuy
dE34YIc1LKDj5VsBNCrHwmpXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0xZR8E
MOivdudY/a/SFbLmBv9DMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2
RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6
eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCP4rA7sg2jTRDeUTrQKHE3sb/VyiNUW8T2wyF62EbZv6BpnLlcDwEj
D08PwDiBTwrs0Huy3W/gEGwrFi0QtjIKeKZNGCFJxFoG3AXLP5orZFP5vrdLaKGJ
5aAc6qt5dhnI7UTm/HQ/1a+8oiVy3bL8uYTKPiQamgn7n8ZJ/LQ5QpEerrgphQfd
GJcHk/tKW8Kmg/OtBmnziV/scKHFZ8WT0E3xC1xa7EqmFbzIFjUl3HfhXNqV/jHP
sthbj287bXyYH2BDsJxI8t2K4FtCbf4gGwm5TXY9HhtXJ6vU6HAWMEyYKCga6Z8G
aDOij/vCnsH99nBFfyagRSF1wsXNU0/f
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:22 2024 by rpki-client on console-fra.rpki-client.org