Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          UXBuCTJ8SSmzWoHM9Sc+6If9JzKcjD3YEPj17PObf8w=
Subject key identifier:   B1:82:DA:17:D2:1A:A9:B8:01:8A:55:07:39:C4:8D:79:2B:6A:CC:D0
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       33B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          33B9
Signing time:             Thu 02 May 2024 15:27:09 +0000
Manifest this update:     Thu 02 May 2024 15:27:08 +0000
Manifest next update:     Thu 09 May 2024 15:27:08 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: ah1FdMMDfO8QieKOuK04KdnqfZjkxEWymH9IODxZ/ds=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 15:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13241 (0x33b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: May  2 15:27:08 2024 GMT
            Not After : May  9 15:27:08 2024 GMT
        Subject: CN=6633b0cc-e37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:3e:c4:e4:de:28:87:16:9d:97:76:b6:f1:
                    d5:ab:5d:07:ef:dd:26:40:14:6f:c7:ef:89:df:da:
                    0b:c4:48:2a:35:fd:12:14:14:9c:0b:ce:69:34:ad:
                    81:90:a6:59:ef:74:e6:bd:a3:30:f7:15:38:44:fb:
                    69:dc:71:9e:bc:6a:c7:20:29:05:e5:78:16:09:6a:
                    28:a6:d5:31:57:a1:28:75:d8:4c:b4:c0:bb:93:22:
                    91:0a:70:04:b8:bf:26:be:58:c6:c5:d2:6d:6f:10:
                    06:49:0b:ca:fd:50:a5:d2:1a:85:5a:ef:48:90:c4:
                    50:d5:bb:5f:64:e0:d4:52:0b:6f:a9:f6:21:89:6f:
                    0f:39:5e:8b:a3:73:16:59:b7:54:bc:68:17:45:0f:
                    fa:d5:ad:1f:23:c1:f3:94:03:6f:b2:c6:4d:83:00:
                    c9:db:cf:94:85:83:2d:1c:7e:32:81:c9:33:19:c7:
                    b7:4f:72:46:50:22:c9:a9:f0:ba:11:b9:56:56:e9:
                    89:17:73:0a:d7:db:e4:fa:4d:af:ba:31:07:18:d8:
                    9f:7b:de:95:12:e2:a1:f2:4b:40:ce:15:e5:72:a4:
                    7c:aa:cd:4c:9c:54:2f:2e:ae:9a:f8:a8:bd:6c:ea:
                    e2:0c:f1:dd:ab:94:72:e9:29:1a:19:28:24:02:db:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:82:DA:17:D2:1A:A9:B8:01:8A:55:07:39:C4:8D:79:2B:6A:CC:D0
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:c9:4d:12:5a:1b:02:a8:b9:92:52:a6:0f:bd:58:5e:07:
         c5:7d:8e:34:e5:e2:d5:a0:b2:48:7e:13:f9:6d:30:9e:50:72:
         8d:7c:3f:7e:27:e8:a2:c8:25:b5:09:b8:e1:83:f2:af:ab:9c:
         54:80:fc:9f:14:b2:47:fa:c6:4b:d2:c1:e4:7a:ce:e3:a9:04:
         e1:bd:ba:cb:ea:9c:4e:65:39:99:dc:0c:db:c1:70:b2:99:e0:
         e0:5c:db:4b:66:89:9b:6f:64:b8:dc:81:a7:09:fd:42:21:e8:
         0d:42:27:53:44:d8:d3:1c:ac:70:1b:a0:45:f2:04:f5:86:b4:
         f9:46:8a:f5:7b:96:06:5a:25:cd:03:fb:07:75:40:6d:83:ad:
         24:26:54:02:5a:b2:a9:03:91:2f:c5:bb:5e:10:77:c6:46:d2:
         de:3a:eb:e2:e6:2a:48:4e:99:f6:2f:08:4d:a6:da:5d:dd:db:
         77:48:2b:a5:49:9b:fa:54:3b:00:0e:b5:4e:a0:0d:9a:f0:6f:
         95:68:53:02:37:86:3e:f2:1b:3e:9f:d3:41:40:9b:2b:18:27:
         6b:a2:ba:92:62:ad:7d:d1:f4:70:73:e9:1c:92:12:96:a8:26:
         e2:21:d7:6c:37:ae:f9:1c:fd:d6:f0:73:4a:a1:36:08:a6:ba:
         3a:08:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:43:04 2024 by rpki-client on console-fra.rpki-client.org