Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File:                     7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier:          +UpAaW8tYZn8NXfoikgNWIz3iY0gFbIaADZFenChA8k=
Subject key identifier:   06:ED:93:79:5D:DF:B1:AD:B2:76:B5:DD:C3:74:50:D7:A5:36:91:3B
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer:       /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial:       2061
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number:          2061
Signing time:             Mon 06 May 2024 16:22:34 +0000
Manifest this update:     Mon 06 May 2024 16:22:33 +0000
Manifest next update:     Mon 13 May 2024 16:22:33 +0000
Files and hashes:         1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: iaeVVnq5Qw+KTLBRnHhJSrf8aBU1rrMqNzLGMPW8ZGY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 16:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8289 (0x2061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
        Validity
            Not Before: May  6 16:22:33 2024 GMT
            Not After : May 13 16:22:33 2024 GMT
        Subject: CN=663903c9-7f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:8a:b2:30:88:41:f8:fa:cd:1d:ff:d1:68:
                    9d:44:a9:3a:f0:07:ba:88:5b:fc:e3:7c:89:d5:4a:
                    14:15:20:a4:e8:2d:3c:d0:47:62:66:0c:73:ba:5d:
                    94:d4:1d:ba:29:32:27:a1:da:02:06:fe:ca:b4:9e:
                    04:8b:88:ba:af:f7:f0:da:97:0f:54:f4:ee:8f:48:
                    7b:bf:38:43:90:51:e8:be:0b:ce:db:1b:35:bd:c7:
                    a2:e0:0d:01:a8:30:1c:39:40:b6:38:ba:9b:09:c5:
                    8d:2f:6d:e1:c1:55:da:b5:33:ef:89:3c:f1:18:68:
                    76:f7:f5:54:c6:42:ee:18:d8:9e:ae:c8:08:94:69:
                    f9:60:a7:fd:1d:d4:15:27:f7:b0:3a:f8:b3:16:f7:
                    97:f1:8a:06:21:27:7c:1c:70:ab:8c:7c:35:a8:e1:
                    40:14:b2:d3:b0:72:8c:4b:34:b1:e3:32:09:f9:a4:
                    53:e2:7a:15:26:c4:b9:c1:3f:ce:36:e5:7e:f8:e9:
                    29:79:9c:42:18:0c:7b:cf:c7:91:0e:ab:db:50:b7:
                    14:25:04:d1:05:68:a7:d5:1e:08:45:e3:dc:75:35:
                    6e:d4:76:b8:66:5f:97:b6:28:c7:43:a4:ff:4c:72:
                    a6:11:4a:0c:cb:98:11:9b:75:ae:3b:74:6b:1d:9c:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:93:79:5D:DF:B1:AD:B2:76:B5:DD:C3:74:50:D7:A5:36:91:3B
            X509v3 Authority Key Identifier:
                keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:eb:dc:16:cf:b3:bf:b9:7e:ed:df:95:3d:05:92:cb:2f:83:
         bd:15:21:3a:8c:81:02:61:30:01:2a:43:e8:94:b5:95:a9:9b:
         50:30:98:a0:85:f3:7c:41:e2:65:bd:dc:f6:46:eb:2e:d2:8f:
         ca:ba:88:82:8a:f8:38:cb:db:c5:11:a0:41:f9:6e:af:9e:78:
         b4:ca:e4:e9:ac:8b:0b:14:97:1b:1b:a2:48:7b:ad:0c:91:33:
         e8:f1:f6:eb:24:19:7b:55:a9:06:7f:fd:a6:33:84:35:9f:5f:
         b0:c2:54:0d:2b:97:e1:43:bb:19:b9:d7:eb:bb:9f:a6:46:66:
         20:f2:1a:8e:0f:42:a0:d0:6e:70:a4:67:74:15:f2:cd:05:8a:
         57:99:64:e9:46:fd:ad:75:32:6b:51:d4:c2:40:5a:f8:d8:19:
         72:87:78:15:bb:91:7c:8e:ae:6e:40:77:11:61:2c:2e:62:34:
         c2:39:4a:13:bd:26:01:db:de:0f:7e:bf:e9:11:33:58:b5:00:
         dc:d9:38:a9:9b:0e:dd:2e:d0:b9:2e:be:53:f4:c1:6f:c2:72:
         79:c0:b2:91:49:ae:1b:1c:be:d7:02:b8:4d:38:97:c2:74:2d:
         82:06:2d:9e:68:14:11:80:d3:fc:d7:8c:53:56:e1:ac:db:94:
         01:99:17:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org