Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
File:                     j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json)
Hash identifier:          FJ7T4fjbdfZDBkBht2nwyEKMwzRWRwPu3Br9SpZv1vw=
Subject key identifier:   53:32:DD:DA:52:D0:4A:05:F1:F2:03:B5:E7:7D:61:15:72:38:7F:DC
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Certificate issuer:       /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
Manifest number:          0868
Signing time:             Tue 28 May 2024 22:05:08 +0000
Manifest this update:     Tue 28 May 2024 22:05:08 +0000
Manifest next update:     Tue 04 Jun 2024 22:05:08 +0000
Files and hashes:         1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: XrygkfRZbb13NwwumxmJiun1w2Py33l+Iobn+31yS1U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 21:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Validity
            Not Before: May 28 22:05:08 2024 GMT
            Not After : Jun  4 22:05:08 2024 GMT
        Subject: CN=66565514-753e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:99:3e:7e:40:36:90:5b:e7:90:99:59:12:
                    1d:39:54:5a:5a:0e:3d:84:5b:87:04:92:1f:a9:68:
                    14:19:96:17:5f:dc:84:ec:39:41:fb:9e:73:6a:83:
                    8c:89:1d:d8:11:bb:b5:5c:af:db:9b:7e:3d:cf:13:
                    76:7d:af:28:84:9d:64:e4:a5:80:c7:c1:9e:1a:c5:
                    dd:e9:dc:c0:e0:1a:e0:96:d4:eb:17:a3:f8:84:df:
                    10:fc:71:24:19:df:f2:f7:9e:5b:a2:28:30:7c:85:
                    3a:06:7d:7f:f0:20:1b:17:f1:5d:5e:db:4c:ce:bf:
                    66:9b:37:c6:50:8f:89:4d:8e:52:c3:57:f8:2c:54:
                    4d:1c:48:38:bb:e4:f7:d4:27:68:01:eb:0f:92:17:
                    a8:e6:81:1e:58:15:18:db:60:6f:d4:72:a8:28:69:
                    a4:0f:a3:f0:57:90:2e:e6:f2:91:eb:42:33:58:b8:
                    b5:ac:5c:53:a2:9b:7e:e8:0f:6d:b0:1c:e5:90:a0:
                    50:5f:c3:2d:cf:e3:7c:17:ab:18:48:6f:10:f7:a2:
                    43:eb:5d:c4:f8:3f:8c:a4:34:45:41:36:30:38:42:
                    77:a4:ca:6b:19:70:82:15:d1:0d:f4:2f:48:85:18:
                    26:45:8e:b4:21:70:0d:87:45:b1:83:96:97:f6:d6:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:32:DD:DA:52:D0:4A:05:F1:F2:03:B5:E7:7D:61:15:72:38:7F:DC
            X509v3 Authority Key Identifier:
                keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:85:e4:2c:49:ef:ef:18:3a:b7:db:b3:30:92:61:5d:c9:
         91:ae:ed:d6:8f:cf:ec:b9:3c:c5:50:fc:03:bf:05:c8:87:76:
         be:53:fa:5a:ad:07:15:b5:79:7a:dc:dd:0e:8c:99:0f:c8:99:
         29:5b:39:9d:a7:2f:f1:a9:f4:38:21:36:1c:6c:81:9a:fb:3a:
         86:19:51:c2:ea:fb:9b:3c:cb:91:4d:06:76:94:97:8d:f4:89:
         f4:f7:4d:5e:e7:f9:63:4b:be:ef:d4:1b:da:fc:16:f3:b3:6f:
         bd:21:79:fa:ee:e4:55:f4:7b:64:a8:fb:f5:a0:e2:32:0b:77:
         c2:ef:34:57:2c:23:0d:61:10:8e:29:44:e4:1b:44:e2:e9:ef:
         06:dd:1c:66:3b:b0:88:da:29:7b:b4:d2:9d:9d:19:9a:a4:0c:
         6b:31:a9:a0:68:57:b5:44:04:2c:60:74:e0:e7:68:e2:08:01:
         8d:c4:4e:80:c4:9c:c3:9c:d5:39:73:79:be:ea:d8:b4:24:c2:
         42:5b:d3:b0:cc:bc:ae:10:0f:90:b8:f2:45:d0:18:c1:d4:78:
         10:b5:ff:c6:02:1e:5d:a6:5c:85:29:fe:0a:8b:b1:3b:9e:2a:
         9a:8b:3a:50:21:33:cc:b0:ae:0f:8d:7f:cc:aa:29:1a:1a:d2:
         1a:9b:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 22:32:35 2024 by rpki-client on console-fra.rpki-client.org