Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          oPaolz/c4sZ2Si17AYAqgCNZJ7rJJ7K92i+MSti+JRY=
Subject key identifier:   E5:D0:1F:D6:5B:82:FD:D6:4B:F5:66:67:D4:5E:2C:7D:7E:48:3C:0E
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       33BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          33BF
Signing time:             Sat 04 May 2024 15:13:29 +0000
Manifest this update:     Sat 04 May 2024 15:13:28 +0000
Manifest next update:     Sat 11 May 2024 15:13:28 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: 5cWJG5hb3Tv7TI2QPXNITCh1aXlDOX4OWvCWtPC/H7Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13247 (0x33bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: May  4 15:13:28 2024 GMT
            Not After : May 11 15:13:28 2024 GMT
        Subject: CN=66365099-6b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:40:17:14:5c:29:c3:04:e6:77:85:cc:cc:
                    72:bc:08:90:38:c3:d5:8b:a3:74:78:f8:7c:b4:49:
                    ec:9d:55:e4:d6:03:67:eb:d6:97:89:88:ff:80:99:
                    e7:a1:be:12:c7:1a:2b:42:7c:d0:58:ad:3c:df:49:
                    ff:71:09:e9:4f:d6:7f:13:7c:c5:e6:93:0d:ca:32:
                    ad:69:d4:6f:61:c2:88:7b:1c:3a:f6:35:21:5a:a0:
                    56:06:fb:7c:c3:43:31:23:e3:98:10:b4:cd:3c:9b:
                    d1:0c:c3:a1:32:0c:17:42:af:f5:f3:5c:5a:c5:3f:
                    21:40:a9:95:b2:75:18:41:e6:4e:4f:3f:bd:07:2f:
                    3f:04:5e:36:f0:f8:38:d5:b8:c0:60:f2:ce:59:94:
                    bf:c8:1d:1a:85:ec:e0:89:74:25:a0:7e:48:be:f7:
                    2d:71:8c:30:29:4c:e6:6e:87:35:5e:da:39:95:45:
                    d2:85:41:92:43:8d:2a:ef:14:ec:c4:9b:82:7c:50:
                    20:66:de:0e:fb:0e:c5:6d:90:af:51:c7:8a:1f:8b:
                    f4:a5:ed:62:fc:f5:e3:35:91:1d:5f:ae:84:58:45:
                    18:2d:e5:38:3e:7c:5c:f1:2b:4b:56:4d:00:a0:14:
                    39:86:84:fa:96:94:ce:7e:b4:b3:ef:b1:fb:7b:f0:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:1F:D6:5B:82:FD:D6:4B:F5:66:67:D4:5E:2C:7D:7E:48:3C:0E
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6e:05:ea:6d:87:a4:41:68:24:ce:ab:ac:49:92:08:80:56:
         a0:ea:70:fb:2d:8d:de:0a:6e:c4:00:73:72:23:81:44:ca:e3:
         7f:c9:f2:14:a6:9b:51:71:24:96:a6:cb:54:f0:4e:ca:5a:ce:
         b7:68:ed:81:42:49:95:ed:2c:07:6d:6e:79:21:6b:00:e4:0e:
         b3:59:3f:a1:75:57:a1:93:83:f4:51:b1:22:fa:f1:75:f7:d4:
         b6:52:d9:38:34:a4:9c:9d:ac:08:69:ea:94:e5:a9:2d:08:0b:
         b7:cb:58:de:45:7e:bb:35:6c:77:57:3a:73:14:2a:bc:10:61:
         40:78:60:9d:bc:5a:78:60:35:33:a7:f8:53:3e:b5:e6:ec:af:
         b6:7d:33:8c:10:46:bc:92:6e:d6:5c:44:df:36:d9:9a:00:e3:
         91:ce:d2:d7:37:69:03:0e:c7:f1:7b:83:d1:19:4f:ce:1e:c7:
         a8:b7:2e:54:e2:5d:31:3c:6f:34:15:7f:2b:50:2d:58:93:c3:
         bd:e3:75:4b:32:bf:44:8e:c8:09:5c:2b:94:c2:e6:5a:a0:df:
         cc:f8:c3:20:34:e8:90:43:8c:7d:71:dc:87:29:a4:b0:9c:73:
         20:76:df:6e:bd:3c:b8:b5:50:91:c9:84:c1:38:6d:34:2b:76:
         98:45:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:45:44 2024 by rpki-client on console-fra.rpki-client.org