Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          iebdL1khjR/JCfztxWMbrLwgVM3ys56VBD0bycfDPkk=
Subject key identifier:   D7:E6:7A:88:06:5C:52:6E:B7:34:0E:03:BE:26:A1:0A:01:31:E7:EF
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          036F
Signing time:             Fri 03 May 2024 03:47:42 +0000
Manifest this update:     Fri 03 May 2024 03:47:42 +0000
Manifest next update:     Fri 10 May 2024 03:47:42 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: X76GuPFLfNtdpX4qJlgEDDA+86nKwf+Pb/oHq+pp+ws=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: May  3 03:47:42 2024 GMT
            Not After : May 10 03:47:42 2024 GMT
        Subject: CN=66345e5e-7e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:25:d9:12:43:a0:c3:21:cb:fa:0d:50:10:
                    40:d0:56:56:6c:eb:e7:be:70:f3:e7:d2:71:f7:74:
                    df:80:35:1d:56:06:db:48:d5:cf:c1:5c:65:72:17:
                    87:8d:a7:77:f2:7c:8d:64:13:f4:78:d3:df:1a:2d:
                    62:f7:9b:93:76:39:2e:5a:93:c2:13:23:29:2a:7c:
                    6f:9b:80:8a:16:64:68:b5:b9:cd:ba:7b:e8:41:df:
                    64:9a:23:c5:70:e9:e6:f2:37:76:7f:d6:ee:36:1c:
                    bf:68:89:25:14:07:43:93:0e:bb:af:80:7c:7d:2e:
                    60:ce:bc:a6:7c:ac:df:39:f3:83:1f:89:cf:28:47:
                    74:05:1c:f2:4c:ea:7a:17:2e:aa:86:57:73:c1:af:
                    18:e8:49:33:bb:27:1e:83:4a:c5:21:cf:0e:9f:c4:
                    b4:ef:00:4d:ae:b2:47:e9:8c:43:62:95:7e:77:10:
                    7d:92:f8:e0:0b:62:c7:4f:18:bb:71:95:84:f3:e0:
                    81:0c:f1:0b:78:24:a3:fd:af:c7:65:4c:85:95:45:
                    1f:f0:90:95:34:66:bb:19:03:eb:18:18:96:15:16:
                    8a:86:35:4b:d0:31:d9:62:b4:d8:dd:6f:ac:18:c2:
                    92:6f:22:b0:f7:3c:27:b3:29:fa:55:7a:18:a0:3c:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:7A:88:06:5C:52:6E:B7:34:0E:03:BE:26:A1:0A:01:31:E7:EF
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:74:62:16:2d:88:88:16:d9:8c:98:6d:2f:34:ae:67:fe:
         3e:8a:e2:15:55:82:34:83:8e:2c:0b:55:3a:02:35:58:90:a0:
         5e:43:86:10:27:29:83:5d:cb:2b:9d:01:2c:1a:95:19:ed:ba:
         99:8e:f5:ad:e5:6b:35:fe:f6:99:98:f7:ba:78:0c:7d:43:77:
         fe:8d:35:6a:43:11:74:00:17:72:8d:06:f9:bc:34:b4:8f:1d:
         9f:8c:a2:8c:28:a9:2a:13:3d:16:df:ea:11:03:17:f6:5a:23:
         71:2e:4e:99:50:3f:47:71:ec:e3:33:56:65:10:b0:ab:f0:d4:
         02:78:15:8a:20:14:a4:21:9b:0f:3c:f9:f9:7f:7c:9c:4f:f1:
         77:4f:c0:da:31:26:07:46:7d:63:35:36:40:e1:1a:09:37:84:
         b9:d6:0f:3d:8b:cc:b4:7a:e2:cc:66:a0:3e:09:0c:14:46:e5:
         e2:54:78:8b:02:0a:a6:18:29:94:ad:be:af:51:75:54:e0:56:
         2f:55:54:a6:6f:99:c5:0a:e5:be:60:49:de:35:00:8a:63:df:
         b4:97:7d:3c:37:58:b9:18:af:2d:14:e9:cc:f6:49:d9:f9:ad:
         69:ce:4c:e0:29:6c:93:a2:93:ed:68:57:c9:75:d1:16:d2:14:
         39:9b:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:47 2024 by rpki-client on console-ams.rpki-client.org