Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          VwBp7bQxOEp4iSFYuPfN8e3gMakUHseF+EHuZC//eOw=
Subject key identifier:   4D:33:8D:7A:AF:FC:C7:85:D2:8A:6B:1D:11:28:D7:44:40:BB:83:90
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          04E2
Signing time:             Sun 05 May 2024 01:26:50 +0000
Manifest this update:     Sun 05 May 2024 01:26:50 +0000
Manifest next update:     Sun 12 May 2024 01:26:50 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: GRAg8EcFLxra+Bj4rN+BeaqhJU7ZOpCCXiaX9hVRtdo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: May  5 01:26:50 2024 GMT
            Not After : May 12 01:26:50 2024 GMT
        Subject: CN=6636e05a-6327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:e1:23:0f:50:6c:fa:e1:43:db:31:eb:88:
                    2a:26:65:2c:50:ac:57:b3:97:f1:2a:1b:52:37:06:
                    4d:f4:30:3c:dc:f2:e0:b6:ef:d7:7c:46:c5:c9:3b:
                    08:26:6e:c3:4d:cb:63:cf:b8:2c:c0:40:ec:6e:0c:
                    bf:ad:13:e9:b9:b1:bf:1e:13:ad:61:6b:8b:7e:24:
                    03:4a:77:b5:1e:28:62:e6:d9:37:74:24:74:71:e4:
                    00:16:27:e1:0a:d0:f2:3a:18:30:0b:90:b7:68:4b:
                    bf:27:27:1b:98:6d:33:2a:31:d1:af:66:fe:e8:96:
                    0c:30:cb:ce:b0:fe:0c:f3:59:b1:7f:c2:cd:bd:4b:
                    c5:c8:3f:98:5a:f0:51:b8:66:d0:f7:3b:89:7f:fb:
                    c3:f4:fa:1f:f1:62:14:f8:7c:ca:51:cf:6d:29:72:
                    87:4c:8d:68:c3:8a:2f:26:31:59:9f:a7:b2:f7:b8:
                    67:4a:e8:d5:f9:b2:23:6c:a9:2d:7f:5b:a9:24:f2:
                    bd:a2:08:de:21:fd:b6:20:20:89:83:c6:16:58:ed:
                    f5:e9:b1:68:92:88:a1:5c:84:e2:45:97:cc:32:29:
                    a4:93:b8:e5:ff:0c:20:21:2e:b0:4f:ba:44:5c:3b:
                    b1:d5:14:ff:9a:f8:cd:b0:bc:cb:af:6c:a4:8b:40:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:8D:7A:AF:FC:C7:85:D2:8A:6B:1D:11:28:D7:44:40:BB:83:90
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:a2:08:e4:06:d2:52:96:ca:93:e0:db:d4:9b:aa:32:33:
         0c:57:3d:16:98:1f:3c:ab:8a:3d:84:c3:c2:4f:53:85:1b:d8:
         e5:2b:ac:3b:2d:6b:f5:43:44:4e:4f:98:92:f4:e4:a3:4a:64:
         2c:0f:37:5b:ed:cc:d9:f7:09:c6:66:09:e5:f5:ff:2d:70:cf:
         f4:f4:70:58:78:dd:1c:82:af:8a:50:4f:ad:6b:1b:8d:2b:a2:
         23:64:a8:3b:a5:fa:0e:b7:db:84:bd:15:61:e0:95:b3:62:da:
         8f:e3:c5:9b:f9:c3:9f:c8:25:fe:8c:f8:e9:51:b4:74:1b:71:
         a5:96:f1:30:bd:e3:d5:f7:b5:00:3b:bf:ed:c8:2e:6c:7c:73:
         d3:e4:13:46:b0:38:9e:02:0d:ec:b3:b6:1a:73:87:6f:20:e3:
         50:bc:bb:5c:f9:22:d5:ea:47:ed:64:a5:de:7e:6e:3d:46:de:
         55:71:08:22:d7:60:c4:d4:0c:78:1d:fe:bc:44:86:a5:b1:96:
         75:be:2e:1e:2e:71:93:02:53:26:ad:9f:d6:2f:a2:b9:81:dc:
         09:a7:f4:90:da:ea:f6:cb:f4:b9:16:b7:4b:f9:9c:5f:b3:3a:
         a0:40:d2:0f:61:5d:15:d5:c6:4e:b9:5b:08:b2:2b:74:62:3a:
         e8:f7:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org