Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
File:                     DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json)
Hash identifier:          KnQyYKYmSE+hLsvN1wFVN1MPiTEJjFkCIYR/YBvFkYI=
Subject key identifier:   0C:34:CE:4E:EF:8D:24:2D:3C:03:A4:41:9C:E2:A7:FE:03:12:3D:F8
Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA
Certificate issuer:       /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
Manifest number:          30
Signing time:             Fri 17 May 2024 08:30:45 +0000
Manifest this update:     Fri 17 May 2024 08:30:44 +0000
Manifest next update:     Fri 24 May 2024 08:30:44 +0000
Files and hashes:         1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: Hg2n665jNof1naI4tJJpvLDyo3pSpyXbOfSGCpmczaY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 08:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA
        Validity
            Not Before: May 17 08:30:44 2024 GMT
            Not After : May 24 08:30:44 2024 GMT
        Subject: CN=664715b5-5788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:98:c1:09:62:79:e7:05:87:d6:18:45:29:
                    c8:da:7d:ba:d4:1d:c9:c9:90:fd:48:61:b1:fb:1e:
                    ca:0d:e6:b3:b7:80:f6:03:fc:c7:4b:8d:63:76:67:
                    9b:c6:72:f3:ab:ef:50:5f:a4:16:89:84:2e:b5:c5:
                    c0:14:47:89:ea:ac:7f:25:cd:17:e2:64:19:c7:b6:
                    03:c7:10:79:e2:fb:ae:1b:63:07:96:d9:d4:58:53:
                    49:64:08:c1:a0:08:b9:94:83:7a:8a:99:0d:fa:c2:
                    8c:90:55:de:c1:b5:ce:9f:ca:82:12:cd:d6:6a:f6:
                    45:9c:9b:d8:1e:80:35:3a:9f:24:1d:a3:da:26:e8:
                    b0:a0:dc:ff:78:41:0f:68:d9:09:64:35:6d:02:41:
                    8d:7f:a0:3c:bb:c4:f3:6c:4d:5d:a6:18:14:93:8e:
                    97:f4:d2:f7:da:8d:13:27:a2:f6:a8:9c:26:a6:06:
                    32:f4:6d:09:bf:29:01:3e:28:e4:69:cd:75:a7:29:
                    7f:20:d9:43:83:cd:3a:87:dd:2c:1f:14:53:4d:88:
                    db:b7:ff:01:de:c5:3c:60:81:93:f6:d7:49:16:c0:
                    9e:f7:5a:1d:69:4b:4a:48:8d:26:7a:6c:c5:3d:68:
                    c5:b6:6f:2c:6f:54:21:e7:87:3c:01:c7:cd:52:0c:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:CE:4E:EF:8D:24:2D:3C:03:A4:41:9C:E2:A7:FE:03:12:3D:F8
            X509v3 Authority Key Identifier:
                keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:00:ea:5f:7e:ee:05:16:e7:65:1c:b6:41:d5:66:5e:3e:
         a9:c7:bd:2a:79:b2:90:4a:60:6d:ba:93:c1:ed:5e:0f:91:26:
         64:40:b6:3f:e7:61:d9:90:fa:88:06:56:f1:15:17:e7:2a:75:
         f5:90:0a:88:47:1a:76:9a:04:80:f4:a0:26:1c:27:e7:59:8e:
         4f:c9:f9:aa:0a:65:f9:7d:d8:b9:39:48:9f:3f:e1:f7:cc:20:
         ad:63:9f:39:34:f7:76:bd:c7:c1:78:09:a9:d8:c1:22:6c:a0:
         40:8f:f4:0b:24:73:38:a0:e7:97:b9:d6:10:2c:ac:3d:98:dc:
         c4:a2:90:e5:ca:26:01:74:56:3b:6f:70:03:d5:52:29:b3:9e:
         41:77:d9:b6:86:63:02:20:5c:37:f7:37:06:7e:4b:58:ea:67:
         fb:a6:e6:d4:ce:54:41:6c:7c:93:d7:71:cf:7d:e8:37:88:e0:
         be:64:3c:bc:ac:bb:3e:e0:1c:2e:e5:86:55:aa:60:72:8d:fc:
         30:ff:f1:a5:51:0a:54:e0:52:20:1b:fb:31:dc:33:34:8c:9a:
         a2:09:27:37:08:bb:19:d8:52:34:55:d1:72:f8:fa:d0:62:17:
         dd:5d:ec:bb:9a:d8:d4:a9:d5:ed:91:0e:ff:b7:e2:ee:5f:a8:
         a2:d3:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:59:07 2024 by rpki-client on console-ams.rpki-client.org