Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
File:                     wVU6bzeV4xXosEZIGTV6VZhShds.mft (raw, json)
Hash identifier:          Pdxe2lHK0x3bcpJ77TF+0BqE1kOplU+qwOmYxzHdhyU=
Subject key identifier:   7F:09:7B:AF:D0:4A:35:7E:2D:DE:E2:2D:AF:72:87:2D:10:8A:4A:74
Authority key identifier: C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB
Certificate issuer:       /CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB
Certificate serial:       33BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
Manifest number:          33BF
Signing time:             Wed 08 May 2024 14:40:19 +0000
Manifest this update:     Wed 08 May 2024 14:40:18 +0000
Manifest next update:     Wed 15 May 2024 14:40:18 +0000
Files and hashes:         1: wVU6bzeV4xXosEZIGTV6VZhShds.crl (hash: HaEnEgNY9tHOHGF3+drPojDZZ5WinRXuca1hCak6q9s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl
                          rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13247 (0x33bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB
        Validity
            Not Before: May  8 14:40:18 2024 GMT
            Not After : May 15 14:40:18 2024 GMT
        Subject: CN=663b8ed3-7eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:a4:f4:16:64:0c:63:c0:12:b5:e3:8f:8a:
                    f4:c2:e0:43:40:40:a4:06:30:e1:e2:3c:fd:e3:50:
                    7f:5d:84:68:6b:4c:b5:d5:6d:8b:4b:08:df:fa:e3:
                    5b:7b:01:83:52:14:27:ef:4a:4c:5b:7d:dd:d7:37:
                    43:7b:57:43:e0:49:61:ea:85:22:ef:35:fd:e7:29:
                    95:cc:fd:96:56:44:61:63:97:ec:4f:76:10:d6:0e:
                    d7:df:07:e6:6d:04:51:d6:9d:1d:cc:81:d2:cb:1f:
                    d2:f5:22:73:06:0e:f8:51:fe:50:f6:18:ec:ba:10:
                    86:54:22:87:47:1e:df:da:f5:67:88:be:ae:a5:94:
                    be:28:d4:3c:bc:1e:3f:0c:22:be:89:a8:72:50:95:
                    23:1f:54:8e:23:a0:9e:2b:39:eb:96:95:ce:5c:91:
                    65:ee:02:72:51:63:b1:ca:78:a6:62:58:70:32:e8:
                    1e:9e:ad:27:1d:62:c8:92:b8:78:6b:4a:fe:85:98:
                    4d:94:9c:f6:00:ef:19:20:ad:99:b4:f0:15:dc:00:
                    12:80:96:a1:66:b4:dc:1b:f9:c7:f2:17:ec:c9:5b:
                    de:31:b8:09:93:66:8d:79:11:70:46:11:96:c4:b6:
                    99:6a:9e:48:86:be:5e:54:63:64:5d:de:40:bd:3d:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:09:7B:AF:D0:4A:35:7E:2D:DE:E2:2D:AF:72:87:2D:10:8A:4A:74
            X509v3 Authority Key Identifier:
                keyid:C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:40:56:8f:54:34:7f:bf:7b:67:2c:30:1e:ce:2d:4b:cf:
         2b:04:e7:38:3b:98:86:a0:ea:19:97:76:d6:f8:c5:e7:8c:75:
         f4:ed:39:23:68:d2:8e:7e:83:24:d2:18:07:a9:c3:49:1f:02:
         f3:f5:bb:9c:7d:a6:c7:9d:f1:87:91:23:59:c0:be:1d:44:69:
         d7:e2:a3:61:13:ca:08:fc:8c:24:63:b6:78:9b:5f:d8:1c:91:
         df:8b:85:1b:78:70:d8:0a:5a:0c:33:89:cb:f6:db:57:bc:78:
         c4:d5:2c:1e:3c:e9:41:88:84:7e:d0:1e:3b:fe:50:ef:71:d3:
         85:54:c5:2c:54:85:df:97:c0:00:54:25:ae:2a:ca:b4:93:04:
         ca:c6:0b:b8:55:4b:48:53:1a:18:3c:07:4a:40:41:2d:bb:b5:
         32:d0:62:4b:b0:7e:84:d0:30:a4:5e:ec:65:e5:2a:d6:5e:ed:
         7f:58:5f:e5:89:ba:2d:40:57:47:fe:58:ee:33:a6:2b:96:6a:
         15:57:9d:14:cf:66:29:7d:a6:18:35:78:2f:c8:92:9e:b4:58:
         99:45:cc:9b:4b:b3:ed:99:ef:0c:4c:b4:6b:9a:9f:bf:17:bc:
         20:f9:12:35:84:83:0b:6b:77:51:32:3b:22:e6:28:43:c9:3c:
         ef:0a:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:19:07 2024 by rpki-client on console-fra.rpki-client.org