Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
File:                     TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json)
Hash identifier:          ECVHUOsE3n3DTOCWHkaJ1FT0eI6KA7WE4VYGx+WRf6M=
Subject key identifier:   B7:74:91:7F:D1:A4:59:57:7E:60:2C:6A:91:6C:A2:2B:84:99:EA:25
Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Certificate issuer:       /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
Certificate serial:       068F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
Manifest number:          068F
Signing time:             Sat 04 May 2024 23:28:54 +0000
Manifest this update:     Sat 04 May 2024 23:28:54 +0000
Manifest next update:     Sat 11 May 2024 23:28:54 +0000
Files and hashes:         1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: F3vwmOi/SOLHUfwhWxAQP9lLfxpWMl2RlHCkJE9KBP4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
        Validity
            Not Before: May  4 23:28:54 2024 GMT
            Not After : May 11 23:28:54 2024 GMT
        Subject: CN=6636c4b6-e0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:d5:d6:12:83:02:4a:9d:93:27:ef:8b:f4:
                    b8:29:12:0b:07:c6:99:5a:15:b1:92:c8:4b:9f:b5:
                    07:3d:b1:3f:4a:b0:07:54:3b:f9:b0:d6:11:6a:f8:
                    3e:c1:b3:6c:15:55:db:e5:33:5f:85:79:4a:ba:66:
                    21:3b:f7:51:a0:85:8b:fe:3c:07:a4:09:3b:24:b1:
                    3d:d6:db:30:8c:3c:88:e2:4b:d9:fb:a0:66:e0:e9:
                    e6:32:82:29:32:2c:2a:dc:b9:6c:e3:f1:00:b0:4f:
                    54:b2:44:18:cb:89:cc:ae:ab:1f:bb:33:1d:9d:b3:
                    10:92:94:c2:cc:b1:58:d1:2d:6d:fe:de:0f:ce:bf:
                    cb:4c:68:06:12:ce:51:9f:1e:50:74:42:45:9a:b5:
                    25:75:1a:0c:67:10:3a:7f:da:40:92:fd:26:e0:80:
                    82:37:a2:63:f2:ca:54:b2:af:47:85:3e:71:90:4e:
                    c2:69:f4:e6:2b:a0:c1:b3:d7:7e:06:23:f5:43:03:
                    90:27:d1:ee:fe:23:cf:21:3e:e2:e3:22:0f:66:19:
                    df:db:2e:79:dc:c6:c2:06:cf:e9:09:57:9c:6e:8f:
                    21:3e:4c:93:4b:d0:c8:d5:84:d6:05:40:67:e1:69:
                    f8:34:c2:77:8e:f7:1e:83:e4:21:a3:21:7f:29:b0:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:91:7F:D1:A4:59:57:7E:60:2C:6A:91:6C:A2:2B:84:99:EA:25
            X509v3 Authority Key Identifier:
                keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:b4:c8:2e:f8:b2:5a:71:dc:1e:8b:6a:9d:7c:01:a6:83:
         3e:62:e2:b0:06:15:8f:46:96:05:c9:22:85:df:da:ff:ab:2f:
         32:6e:6b:71:a6:97:d1:71:9f:f1:cc:19:91:5e:14:a8:85:48:
         b7:94:6c:d9:6a:7b:f9:d0:76:0f:03:97:d4:6b:70:a4:ff:4f:
         78:25:77:1d:26:9b:0e:98:78:cd:55:77:ea:26:79:9c:ed:01:
         cd:d6:9c:55:36:52:45:3f:df:97:9f:34:23:70:bb:b1:91:87:
         20:13:1c:7b:0a:80:b8:bd:61:39:85:0a:6c:0c:31:8f:c6:bf:
         34:07:0b:37:db:1b:47:d2:cc:6e:04:09:6c:97:ac:4e:6b:2c:
         a6:4e:83:92:40:00:02:59:3f:bb:1d:8d:7c:31:6a:8c:2b:ae:
         03:d1:5b:d9:12:a2:e0:ad:8a:a4:e0:e3:6b:ff:9a:3a:03:ff:
         94:f5:d2:1f:1b:98:62:ce:14:17:40:99:c4:6f:bc:38:38:c7:
         08:e8:10:f8:d1:2c:88:69:47:a3:10:22:1d:69:58:3d:39:e1:
         3c:87:71:45:5d:89:99:71:fd:c4:9d:6c:ac:0c:c5:ae:fd:00:
         4a:8f:d5:98:37:5c:cc:c6:5e:94:6a:2c:64:43:2b:f1:ba:5a:
         dc:e6:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org