Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          HGQlZUB0qWY8/23iiE5dUK2kKCPAj3gw4/T/IWUANyg=
Subject key identifier:   C1:5C:28:AE:B5:06:E7:71:27:B9:F0:27:5C:03:61:8A:CC:0B:EF:8E
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          1D
Signing time:             Fri 17 May 2024 08:47:14 +0000
Manifest this update:     Fri 17 May 2024 08:47:14 +0000
Manifest next update:     Fri 24 May 2024 08:47:14 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: QtMaygxz5d00v79W+9uE36cgqnHWuI0YPKnJX872hSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 08:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: May 17 08:47:14 2024 GMT
            Not After : May 24 08:47:14 2024 GMT
        Subject: CN=66471992-891c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:5c:59:c5:89:30:e9:e2:15:da:76:c8:08:
                    b9:53:1f:0a:08:ef:f7:74:dd:a5:59:90:61:19:fc:
                    52:15:ee:ce:b8:5e:5c:b1:09:10:0d:48:f6:08:fa:
                    e5:a5:09:57:ee:77:ec:55:45:f7:aa:21:4a:3c:bc:
                    f5:a3:08:91:a9:d5:8a:00:e6:bf:e0:5d:c0:c1:17:
                    b9:4e:c5:48:c8:0e:dd:35:18:b1:67:19:20:ef:fd:
                    9f:df:06:3d:10:c4:62:3d:69:1c:3b:5c:56:ff:f4:
                    7b:66:24:72:b8:e2:64:76:3c:b8:3f:3d:29:62:d9:
                    19:30:0c:82:48:9d:af:25:ce:e8:9b:3c:65:bb:cf:
                    79:95:0e:fc:9c:b5:9e:d2:09:f6:1e:c4:d5:b0:c0:
                    e4:e1:41:64:f4:16:bf:fd:1f:a0:75:e5:42:08:72:
                    69:cd:1c:e9:24:98:8f:30:8f:8c:36:1f:c2:89:8d:
                    44:03:fb:d7:61:7b:86:c3:b0:a4:c2:39:90:cc:47:
                    09:63:a0:6c:20:f6:42:82:d0:0c:3c:e5:71:99:6a:
                    3e:72:97:f3:a2:4a:c0:ac:33:28:81:22:6a:c4:b4:
                    ec:89:96:5c:a1:bd:70:66:eb:26:c9:d6:77:0d:d7:
                    c8:65:3b:94:17:07:5e:8d:bc:3e:2a:b5:5b:58:34:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:28:AE:B5:06:E7:71:27:B9:F0:27:5C:03:61:8A:CC:0B:EF:8E
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:b4:82:c1:a9:99:32:81:ce:0d:1f:8f:74:ba:27:da:40:
         d4:c0:96:8b:50:b4:c5:cd:ac:ae:33:0c:cb:b3:6e:95:c4:76:
         40:d7:d2:1f:4c:f9:b7:b1:22:a9:06:7d:73:af:e0:5b:c0:e2:
         0c:59:8d:e6:69:15:86:b5:14:d8:f0:02:f4:58:ac:69:39:55:
         d6:1e:d9:64:61:61:f4:7e:8a:a4:e5:a3:3f:c9:7c:5e:a2:a7:
         9a:5b:2b:53:cd:a6:4b:24:92:ee:4a:a9:9d:c2:ca:19:e5:a4:
         08:77:63:91:bf:ad:8d:91:82:86:f3:6e:fc:41:cd:b1:80:a6:
         35:9c:0d:af:d7:e6:8c:0f:8f:29:e9:51:12:b9:e1:61:66:f9:
         1c:36:1b:a0:b3:3a:cd:4d:7b:4b:15:24:84:6f:41:09:08:c0:
         cc:f1:6e:bb:0a:b5:41:4b:9b:16:67:1b:18:44:65:74:5b:bb:
         bb:db:c6:59:6d:9f:bd:a8:3b:e8:b5:3f:f9:5d:3a:0f:e7:7f:
         fb:ef:55:96:c2:ae:56:ab:c1:b3:53:69:e9:0f:6c:b6:8e:72:
         76:1d:b7:2f:a4:0d:ec:8e:44:c3:3d:f5:82:8d:81:57:84:07:
         fc:22:97:9e:0e:5b:b4:02:a1:2e:18:c4:1a:ac:bb:85:06:25:
         1a:7f:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:59:09 2024 by rpki-client on console-ams.rpki-client.org