Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier:          bG8Rr5P81pLp2G0oNdxrySvZ2IbeR7sYTNXClGYL4rA=
Subject key identifier:   9C:CC:66:3D:A1:B0:60:56:19:19:C1:92:DB:96:02:61:A6:AE:69:06
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer:       /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number:          C6
Signing time:             Fri 24 May 2024 21:47:46 +0000
Manifest this update:     Fri 24 May 2024 21:47:45 +0000
Manifest next update:     Fri 31 May 2024 21:47:45 +0000
Files and hashes:         1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: ldThrnYkZqpNtXR5a6KUi6bZiof4OYyZ5Jion2ZM7mo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
        Validity
            Not Before: May 24 21:47:45 2024 GMT
            Not After : May 31 21:47:45 2024 GMT
        Subject: CN=66510b01-37ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:1c:08:b6:82:6a:0f:2b:49:a4:8d:17:a7:
                    2c:05:58:a3:92:f9:bf:8d:88:b2:df:fc:38:a8:cc:
                    c4:08:9b:dd:fa:79:e0:73:26:29:da:9f:07:2b:81:
                    32:3c:64:fe:02:be:4f:e2:8e:a5:a4:cb:a0:4a:9c:
                    fd:43:7d:d3:ae:1c:cf:3e:2e:b0:33:2e:83:f1:9f:
                    07:41:76:34:ee:72:3b:23:0f:6a:e6:fb:76:02:99:
                    44:e0:dd:00:9f:8a:81:77:58:76:46:ad:bb:f8:79:
                    37:2a:15:37:26:0b:2a:7a:40:b1:76:62:16:b5:6f:
                    09:62:2d:7c:6d:84:ba:c9:d5:e2:63:ee:29:47:4f:
                    81:68:04:75:84:e8:b5:7c:53:ba:c5:71:bd:32:90:
                    b0:81:25:49:2e:f0:04:ca:d2:50:38:5c:3b:31:71:
                    fa:fb:97:3f:a8:08:1e:d1:16:b9:e8:37:e1:5d:6c:
                    3e:59:7f:e5:78:a2:3e:5e:4d:fc:2d:16:55:85:1a:
                    be:97:cf:f6:bc:ef:90:3d:bd:84:d8:e1:33:f1:49:
                    6d:9d:5f:c9:3d:4f:67:e2:f2:d9:be:e8:8c:17:f2:
                    15:b6:85:e7:3e:63:5a:2e:ea:29:ac:e0:52:8b:8e:
                    84:4b:c2:c5:26:f0:e2:7f:6f:71:58:ac:be:e1:ee:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:66:3D:A1:B0:60:56:19:19:C1:92:DB:96:02:61:A6:AE:69:06
            X509v3 Authority Key Identifier:
                keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d8:a3:76:70:8e:9b:41:14:03:a2:f3:17:d8:90:f1:23:b8:
         07:04:cc:88:0e:cc:e4:c7:a6:42:c9:a9:01:57:69:15:46:a9:
         66:bf:20:89:09:7b:d8:c9:1c:10:48:dd:f3:bf:f5:6e:da:9a:
         17:48:92:29:ad:46:cb:2d:91:ba:eb:a4:27:86:7e:27:e6:9c:
         8c:e9:f1:73:ac:03:ff:2d:5d:6e:56:2a:2b:e6:4d:4e:24:f7:
         27:8b:63:3f:96:c9:a1:22:c5:c6:87:34:04:a2:2e:01:3d:94:
         2a:1e:bc:ef:29:3e:0b:d5:80:a6:50:c7:90:10:73:62:c2:15:
         dc:8e:ee:a7:ca:5a:4b:39:df:44:8a:f6:dc:62:a9:eb:4f:d5:
         69:62:00:00:57:65:58:2d:ab:82:20:e4:99:dc:b3:98:09:dc:
         5f:13:ba:aa:1a:27:98:e0:90:48:70:5e:bd:e6:57:d7:12:1b:
         b6:06:37:f8:0c:b5:b0:19:74:57:15:4c:54:a6:f2:be:ee:10:
         40:1a:cd:0c:af:a8:a0:c6:c0:47:10:74:c6:bc:61:a0:75:7c:
         a8:5e:0d:95:f4:a3:21:6b:9c:f7:c8:0a:41:7f:00:fb:b7:17:
         dc:ec:8b:af:f1:f9:86:19:9b:f9:96:98:ef:a6:bd:46:a7:b8:
         7d:fd:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 23:25:41 2024 by rpki-client on console-fra.rpki-client.org