Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
File:                     u-ULDcHkp69YCVjW19dBR67ZDG4.mft (raw, json)
Hash identifier:          fgcJ0U+TgYgiSsZNL/mDIcxfNGWy9JSbZACvpUdesIE=
Subject key identifier:   27:B1:62:56:7E:62:8B:D8:E6:C1:13:A3:22:5B:A3:F7:88:47:C3:05
Authority key identifier: BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Certificate issuer:       /CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
Certificate serial:       0D31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
Manifest number:          15BE
Signing time:             Mon 06 May 2024 18:45:59 +0000
Manifest this update:     Mon 06 May 2024 18:45:58 +0000
Manifest next update:     Mon 13 May 2024 18:45:58 +0000
Files and hashes:         1: u-ULDcHkp69YCVjW19dBR67ZDG4.crl (hash: mZxXPT0nhZMjdsgcNvSDtraYB8W5iB1pfCHHyTCrx3Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 18:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3377 (0xd31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626/serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
        Validity
            Not Before: May  6 18:45:58 2024 GMT
            Not After : May 13 18:45:58 2024 GMT
        Subject: CN=66392566-87d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:c9:b8:ab:b7:8b:08:5c:b5:63:08:1d:23:
                    0a:ff:e9:fd:0c:a6:c7:13:32:63:5d:d9:4e:a4:d7:
                    f5:36:b2:3a:a6:e6:51:7a:ef:b8:ef:13:7e:b7:2b:
                    34:21:08:f1:ea:e0:d6:5c:5b:84:a1:a7:d7:2c:44:
                    55:62:c9:38:e6:45:52:9e:b5:62:6a:8b:08:b4:74:
                    d4:db:37:ca:18:b4:d2:e3:da:e1:a4:af:eb:ac:20:
                    b7:b6:ba:d4:9a:88:95:34:41:7c:a7:65:62:cc:00:
                    78:07:ee:dd:90:00:ea:75:c1:22:7a:55:f1:db:08:
                    06:3c:d9:11:fa:43:30:67:b8:31:3c:7e:29:01:64:
                    00:1e:92:b4:59:ad:20:77:7a:98:b7:87:e1:76:0e:
                    44:b9:1f:57:c5:b9:39:44:b0:32:f0:40:64:18:ae:
                    33:fd:c8:ed:61:72:53:7f:67:32:5c:0e:cd:2e:c7:
                    19:15:43:c6:dc:23:e2:16:bd:12:ff:43:1f:28:4b:
                    70:0e:ae:c0:c4:70:54:c3:85:62:75:78:d1:21:61:
                    1d:bb:2d:9a:c6:74:26:cb:95:c2:cc:81:ab:eb:72:
                    87:f6:d3:4a:09:8f:3f:0e:73:f3:aa:ca:6e:65:11:
                    84:b7:e4:dd:19:2a:b1:f2:9a:41:c9:f9:00:f6:a1:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:62:56:7E:62:8B:D8:E6:C1:13:A3:22:5B:A3:F7:88:47:C3:05
            X509v3 Authority Key Identifier:
                keyid:BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:15:92:d8:3b:91:08:ec:15:7a:b0:f0:af:37:07:88:9e:27:
         f2:b6:7e:97:60:ff:e8:f5:f0:72:40:8b:3b:c5:45:f0:8c:c8:
         3a:bf:5f:ef:c0:0f:4a:bd:ee:2e:9f:d2:23:29:5c:4e:3c:5b:
         8b:84:18:5e:4c:97:65:6a:0d:5a:2a:06:ed:cd:6d:1d:74:2a:
         0c:60:3b:73:5b:a2:b3:bc:7f:e4:b0:cc:06:fd:89:9e:1f:d1:
         78:ee:f0:67:87:98:be:66:7e:a3:b6:88:3b:d1:f9:dc:fc:56:
         4f:91:e2:2f:12:44:e9:98:4d:30:20:5f:e6:48:f8:90:8b:cc:
         ed:c4:09:f3:c6:f1:c7:3c:fa:af:b1:23:23:fc:f5:5d:12:80:
         4a:dc:32:c3:d3:30:e2:65:96:77:3a:a1:31:8e:85:1d:88:ab:
         e2:6c:a4:25:c7:aa:18:4d:63:fd:ab:75:91:53:6f:1d:81:ae:
         b2:5e:03:b6:b2:53:32:18:da:ec:2a:b6:c4:cb:a0:14:3a:b7:
         6a:aa:5a:f8:53:fe:77:4e:54:e8:1a:67:d9:32:07:70:44:b6:
         d8:cf:b2:05:72:a8:47:1d:f4:19:69:ab:2d:df:a4:e7:bd:d3:
         d7:14:22:b6:fe:2a:06:51:f4:89:11:07:37:69:88:be:13:0b:
         b5:1e:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:19:08 2024 by rpki-client on console-fra.rpki-client.org