Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft
File:                     Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json)
Hash identifier:          30am7GSUYEHDVynQEEaXyuKin5f+C6EDqeo25Nh5X4M=
Subject key identifier:   F8:8C:36:E3:9E:45:1B:1C:34:62:22:68:9D:30:20:54:3F:64:9D:09
Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03
Certificate issuer:       /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903
Certificate serial:       09EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft
Manifest number:          09EE
Signing time:             Mon 06 May 2024 20:46:49 +0000
Manifest this update:     Mon 06 May 2024 20:46:48 +0000
Manifest next update:     Mon 13 May 2024 20:46:48 +0000
Files and hashes:         1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: p4qB1cH9ysXNG0JaNEksnvURr2UlxpzvL8W0MweoWo8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl
                          rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2542 (0x9ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903
        Validity
            Not Before: May  6 20:46:48 2024 GMT
            Not After : May 13 20:46:48 2024 GMT
        Subject: CN=663941b8-dd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:4f:7e:4b:56:aa:99:c0:ab:27:ba:b7:30:
                    e0:35:c6:41:1f:ec:91:96:48:09:ca:dd:4b:59:62:
                    bf:c0:99:f4:a9:d8:91:07:be:87:2f:62:d0:21:3a:
                    64:d9:bc:d0:42:87:c1:b9:ec:1f:f2:e0:1c:48:96:
                    46:31:61:74:78:6b:ec:c1:97:e0:c0:96:f4:b3:d8:
                    ac:b9:9b:67:16:34:8e:05:67:5e:8e:96:89:c7:3c:
                    50:c1:52:25:c5:84:06:7d:88:05:d7:3c:7e:b6:1b:
                    9b:4e:57:94:62:13:e7:90:e0:d2:f5:b1:0e:1f:ec:
                    62:3d:d2:f7:d4:5b:e4:d5:ad:2c:38:4c:29:f2:74:
                    8c:c7:5c:ce:85:88:07:b3:ea:56:25:a9:82:0d:22:
                    a1:42:ce:fd:7c:7b:42:6d:64:9a:bf:33:41:9f:ce:
                    76:68:f7:ef:b4:4d:e1:0c:f3:c6:7c:6d:82:31:49:
                    2b:4f:0d:05:2d:80:48:3d:87:1e:e8:6a:28:16:85:
                    a6:01:41:74:40:c3:49:de:15:3d:bc:47:e2:b3:61:
                    64:a8:a9:52:0e:8c:8a:86:79:15:79:46:ef:6c:62:
                    6b:5b:c5:86:42:3e:b1:46:90:14:b3:14:c6:86:2c:
                    37:72:4d:73:ac:41:5b:6a:c1:e8:12:90:88:a0:69:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8C:36:E3:9E:45:1B:1C:34:62:22:68:9D:30:20:54:3F:64:9D:09
            X509v3 Authority Key Identifier:
                keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:36:fe:61:28:eb:a3:df:f8:ea:31:0c:f3:50:2b:25:3a:5b:
         03:0d:af:b7:be:9b:82:ed:2c:6d:a1:fa:43:25:ff:1f:43:7b:
         da:ef:17:46:70:6f:28:e9:74:b0:7a:90:84:d9:f3:c6:e6:af:
         f0:e1:a1:c1:f6:1e:7b:71:15:ac:1a:44:04:d0:59:44:66:d8:
         74:3d:7c:fd:da:31:b4:e1:ed:83:20:c9:75:a3:87:d0:6f:a5:
         b3:50:4f:3f:76:74:3f:2e:f5:c4:b7:71:d6:09:42:e2:03:a9:
         c2:c2:be:93:83:19:cf:75:52:18:69:75:c7:fc:19:1e:95:db:
         d1:91:98:20:7c:93:df:cc:16:fc:58:5f:cd:d8:0a:b6:e3:17:
         a0:e6:9f:a0:c2:ab:26:3c:b2:1f:08:be:b8:ab:31:37:f8:05:
         ce:d4:88:c5:3c:4a:f3:3d:d3:00:8d:9d:c2:90:1f:ac:13:9d:
         78:e3:7b:a2:a0:bc:ad:66:42:5f:66:de:d7:8a:04:dd:9f:57:
         7b:4b:7f:11:68:69:0d:79:24:42:62:b4:24:f6:d8:3a:f7:30:
         c4:d2:e8:de:e7:4b:d2:75:83:05:2b:a5:ac:be:94:d9:6c:0a:
         34:2f:84:01:d1:27:f0:01:be:cd:f8:a2:e9:7b:7f:90:d9:2f:
         0e:60:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:40:58 2024 by rpki-client on console-ams.rpki-client.org