Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.mft
File:                     2Vm0ktlTs43LnCp4-0K3-F34bhM.mft (raw, json)
Hash identifier:          KMEXKY+CsvvP30g7aorwTJEBgTfAXJavYO7jkh5zKjA=
Subject key identifier:   77:33:9F:84:B9:F3:69:25:D4:A9:CD:30:5D:76:BA:79:24:21:D3:20
Authority key identifier: D9:59:B4:92:D9:53:B3:8D:CB:9C:2A:78:FB:42:B7:F8:5D:F8:6E:13
Certificate issuer:       /CN=A914A947/serialNumber=D959B492D953B38DCB9C2A78FB42B7F85DF86E13
Certificate serial:       093B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vm0ktlTs43LnCp4-0K3-F34bhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.mft
Manifest number:          0919
Signing time:             Sat 04 May 2024 21:26:35 +0000
Manifest this update:     Sat 04 May 2024 21:26:35 +0000
Manifest next update:     Sat 11 May 2024 21:26:35 +0000
Files and hashes:         1: 2Vm0ktlTs43LnCp4-0K3-F34bhM.crl (hash: 7psv9+ylm8wkvIxxtXKC6G/uYtEc/2JxkOMfTHAMZAk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.crl
                          rsync://rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vm0ktlTs43LnCp4-0K3-F34bhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2363 (0x93b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A947/serialNumber=D959B492D953B38DCB9C2A78FB42B7F85DF86E13
        Validity
            Not Before: May  4 21:26:35 2024 GMT
            Not After : May 11 21:26:35 2024 GMT
        Subject: CN=6636a80b-db40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:c0:03:45:66:45:b4:90:45:ce:76:ed:14:
                    bf:fb:7a:e3:33:cc:94:12:42:3f:b9:62:c9:5a:5b:
                    ed:94:71:13:f8:20:67:51:ba:d3:f7:b3:72:f4:63:
                    02:f0:24:af:a6:69:63:17:e6:77:0e:ce:4b:59:09:
                    b5:34:39:39:d7:70:9b:c0:eb:ec:71:d1:05:2e:0a:
                    10:87:fc:dc:af:36:6c:08:82:95:0a:07:5a:1f:83:
                    cb:4a:8c:27:ee:e2:24:36:ef:aa:1b:fb:91:9f:16:
                    d8:2b:54:7e:7f:c6:91:f5:0b:e9:9a:97:a0:1c:1c:
                    6b:a4:05:12:bd:fd:1a:18:ac:ac:46:01:4d:15:1d:
                    52:da:9d:21:a2:d8:5a:37:11:b9:1b:77:af:66:a2:
                    15:ec:06:09:95:c7:ae:f7:52:0e:bc:c6:9c:a1:0a:
                    bc:0b:2c:57:da:05:35:8e:10:b8:27:73:99:46:75:
                    94:ba:40:95:fe:8c:21:e3:3b:21:83:08:e2:c5:90:
                    b5:f2:cd:6c:b1:81:26:6b:99:d0:7c:51:72:60:42:
                    74:8f:0e:0d:f2:15:79:ff:b9:4b:80:5e:b8:e1:bf:
                    00:17:56:dd:9a:a2:a8:f7:18:d3:8c:fe:31:67:f8:
                    d1:7f:9c:0a:07:c2:df:02:35:8c:95:3c:c6:1b:c9:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:9F:84:B9:F3:69:25:D4:A9:CD:30:5D:76:BA:79:24:21:D3:20
            X509v3 Authority Key Identifier:
                keyid:D9:59:B4:92:D9:53:B3:8D:CB:9C:2A:78:FB:42:B7:F8:5D:F8:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vm0ktlTs43LnCp4-0K3-F34bhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A947/2EFC7994826711EABBD3080AC4F9AE02/2Vm0ktlTs43LnCp4-0K3-F34bhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:36:f3:3a:17:59:54:b8:6c:73:8e:0b:64:6c:e3:f6:45:
         e6:41:d3:1e:8f:cc:77:40:6d:11:64:06:b0:e7:a5:30:f6:5e:
         6d:1a:9c:05:59:44:eb:df:6b:94:27:77:d4:6b:f3:6a:81:aa:
         a6:40:91:07:d4:a6:62:dc:42:d2:ee:16:fa:d8:e7:04:4e:58:
         5b:d0:c0:d5:9d:99:f7:ae:86:5e:6e:a6:2c:8f:9d:82:05:1a:
         6f:1d:c5:87:2f:b2:a2:19:e5:c6:53:c0:3f:cd:99:b7:a0:84:
         9b:6d:37:64:2f:8a:e4:71:2b:63:74:93:c3:1f:85:65:ed:27:
         11:19:7f:9d:c5:71:72:c6:e7:d2:f4:cc:00:0c:86:61:83:56:
         15:b9:90:78:1d:39:aa:6f:20:51:5b:5c:82:e7:39:ab:99:c4:
         d5:4e:35:77:fa:5e:62:ce:10:60:6b:f7:87:9c:1d:17:75:a7:
         7b:d6:ba:20:66:ac:d3:6b:9c:a1:63:b1:93:3e:c4:ed:6c:fb:
         be:34:34:a4:7a:22:27:c4:a9:af:64:da:6f:de:ee:b2:42:b0:
         9c:39:86:6f:1c:97:ea:ab:44:13:61:7e:97:2f:b1:fd:24:53:
         ee:e0:12:03:8c:57:84:a3:40:d0:fa:9a:d6:28:47:90:33:43:
         3e:a8:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:12:22 2024 by rpki-client on console-fra.rpki-client.org