Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
File:                     AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json)
Hash identifier:          Be9QccAxx2hjWbaPSNhpvjF+9SYFNF9OX41aWzFBEhE=
Subject key identifier:   C2:40:3E:0C:C8:3E:BE:79:E0:13:92:6A:85:03:0C:9E:B0:9B:6B:35
Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A
Certificate issuer:       /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
Certificate serial:       041E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
Manifest number:          050E
Signing time:             Fri 03 May 2024 02:11:10 +0000
Manifest this update:     Fri 03 May 2024 02:11:10 +0000
Manifest next update:     Fri 10 May 2024 02:11:10 +0000
Files and hashes:         1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: Y/GQIAjswS6ysM4UQi3gpq+7bsr4JsKZIbWcLyOk5Mg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 02:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A
        Validity
            Not Before: May  3 02:11:10 2024 GMT
            Not After : May 10 02:11:10 2024 GMT
        Subject: CN=663447be-aeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:7e:3e:7a:1f:f9:9b:8b:0c:05:fb:12:ca:
                    57:32:0d:f6:93:19:eb:31:db:d8:a7:84:a8:41:a8:
                    43:81:2d:ca:5e:15:47:4d:6c:c2:7f:fc:b6:7e:2b:
                    f8:81:ee:74:c3:0b:a6:f0:ce:e8:15:d7:25:b2:91:
                    b2:25:89:49:19:d8:38:23:37:b0:9a:e1:41:d3:50:
                    7a:4b:df:15:4f:8b:9d:40:2b:d3:b9:8d:ad:ed:f7:
                    a6:1e:c2:4c:4d:6e:65:50:48:fe:f3:e4:d9:38:3b:
                    c7:46:e1:8b:63:a5:9f:d8:fe:2b:ea:90:dc:45:38:
                    f6:55:45:83:5d:54:64:54:1e:5a:f1:54:41:ed:fa:
                    a2:4d:02:81:5c:30:e8:64:e8:f4:3e:a1:55:41:b2:
                    3e:f9:1d:de:cc:fb:1c:b5:11:7f:9d:d9:3b:24:21:
                    be:e0:8b:09:c3:b0:83:99:b4:b8:23:66:79:53:5c:
                    81:b7:da:0d:62:14:8b:f4:e1:2c:08:74:41:56:0e:
                    dd:a7:a4:43:61:33:dc:8c:d3:0c:7b:49:e4:bb:cb:
                    79:7b:1e:c3:53:c4:09:0e:9c:4d:e1:84:ba:72:19:
                    70:dd:26:23:5e:40:6c:92:57:9c:87:af:ec:f2:2b:
                    bb:5c:8a:cc:c9:5c:2b:e2:76:c2:26:3a:db:34:c4:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:40:3E:0C:C8:3E:BE:79:E0:13:92:6A:85:03:0C:9E:B0:9B:6B:35
            X509v3 Authority Key Identifier:
                keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:a1:0b:d5:f0:cf:44:02:0c:1e:2f:4e:92:64:1a:77:b9:
         19:a7:9f:86:30:65:23:de:4e:cf:26:a4:fc:0b:e7:56:b1:1c:
         75:bc:60:bb:ff:d3:81:e9:a2:41:bb:d3:c1:ce:e1:4f:d8:49:
         75:2f:5f:5c:8a:b7:ae:bf:c2:e9:e9:05:8a:f1:b0:06:57:c9:
         1a:c4:a3:62:22:aa:1f:78:7b:a4:90:bf:47:16:46:27:04:46:
         85:10:95:5b:2c:3e:e9:c5:a5:df:77:59:bb:c4:4a:f2:ad:9a:
         32:bb:fd:e0:fa:18:7c:a1:0e:61:25:cf:e8:c1:66:20:d9:e4:
         e3:ea:3a:31:7e:33:66:7e:19:99:5e:e8:63:ed:be:5c:42:a0:
         6c:8c:58:35:b5:5f:7c:03:c8:0d:d7:f0:dc:b5:46:bd:df:45:
         5c:56:1a:68:3c:2a:a1:0e:02:21:56:b8:ef:53:5a:82:cb:8e:
         f1:06:ba:80:bd:fd:53:8c:00:f7:ca:3c:c8:44:e6:a8:69:d6:
         9e:af:4a:a9:5b:5d:3b:25:dc:62:8b:42:8e:cf:6c:f7:f0:1e:
         39:4c:40:90:f8:c0:cf:2e:d0:c8:39:2a:63:67:37:67:52:c4:
         17:b9:7b:c7:a9:71:97:4f:7f:0e:84:f6:65:93:c3:7b:80:da:
         e1:24:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:08 2024 by rpki-client on console-fra.rpki-client.org