Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
File:                     daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json)
Hash identifier:          MV89zFtDFemjBoAynS49exLOB0voCfZcsJsPIugDfjk=
Subject key identifier:   00:4F:13:A9:17:F4:0C:77:9E:22:4A:18:00:41:2D:6A:12:6A:26:63
Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93
Certificate issuer:       /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
Certificate serial:       0580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
Manifest number:          0580
Signing time:             Fri 26 Apr 2024 15:16:06 +0000
Manifest this update:     Fri 26 Apr 2024 15:16:06 +0000
Manifest next update:     Fri 03 May 2024 15:16:06 +0000
Files and hashes:         1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: MMl1fTgEwZ+yjs5x0LOso+dn6aHCt73OuDoW1zCcwuQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl
                          rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993
        Validity
            Not Before: Apr 26 15:16:06 2024 GMT
            Not After : May  3 15:16:06 2024 GMT
        Subject: CN=662bc536-f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8a:f1:35:3b:ae:72:cd:54:0e:d8:e0:ec:08:
                    9f:e4:b7:c9:f5:a2:f0:5c:4e:0d:7d:3b:5c:9c:a3:
                    f3:04:52:03:6f:11:89:bc:c3:06:9c:72:16:f2:a8:
                    39:b8:a3:25:f8:27:74:c4:32:f2:43:5a:8d:16:21:
                    02:56:60:7d:32:00:77:c0:1e:3e:11:1e:88:bb:00:
                    a1:e1:27:7b:c4:85:33:70:57:57:a1:4a:c5:92:9f:
                    8c:5f:30:10:f2:5d:38:de:51:8e:8a:d7:ce:b3:61:
                    07:87:d1:ee:25:f6:dc:63:4d:7a:e6:61:cc:30:3c:
                    5e:11:5c:a3:82:24:d1:51:b8:0a:f6:0b:91:19:be:
                    ee:50:fc:8e:a1:a0:53:9f:e4:59:86:9d:b3:f7:0c:
                    38:d6:f0:d2:92:8e:7b:13:7b:1b:32:ae:32:27:b9:
                    65:82:b4:4f:2d:10:75:e2:92:ef:88:b1:8e:a0:ac:
                    fa:c2:9f:71:0f:b9:2f:d2:d2:78:17:b4:51:72:11:
                    37:d5:38:c5:5d:b0:1b:c1:a6:3b:3e:87:2a:e3:c1:
                    e3:98:d7:dc:08:bf:5a:1b:41:b6:a3:db:40:80:d8:
                    f0:1f:13:c1:74:f8:15:67:6b:ce:f2:d5:31:05:4c:
                    08:d7:01:df:61:aa:f3:c6:9b:87:d5:58:fd:6d:1a:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:13:A9:17:F4:0C:77:9E:22:4A:18:00:41:2D:6A:12:6A:26:63
            X509v3 Authority Key Identifier:
                keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:c1:53:2e:0e:e4:0e:d6:db:06:86:b5:e3:11:08:2e:65:
         2b:f9:7f:12:61:15:0b:f5:1f:20:d6:29:5a:0c:bd:47:5b:99:
         d2:fb:bd:ec:a7:3f:63:99:82:8f:3a:dc:65:c4:f5:e1:8f:ae:
         fd:12:da:f6:a7:00:52:98:55:78:47:b1:01:71:11:b0:56:c6:
         9d:b9:c1:c6:b3:c5:65:09:16:e1:d5:c0:46:82:0f:fb:fa:86:
         fa:d3:4a:a4:0b:a4:13:f1:b1:e8:67:2b:f7:74:12:f4:3a:89:
         93:78:c4:a6:13:62:07:6a:46:b2:fc:fa:ce:4c:a7:9f:16:e7:
         53:b4:a1:d9:86:13:76:b1:eb:5d:8a:2b:59:68:69:cd:b4:c1:
         9c:2b:db:e8:32:03:b2:7d:dc:fa:73:7b:9e:51:b7:14:37:1a:
         3c:ae:e6:52:a9:17:ec:00:8b:96:8a:a5:09:05:39:52:a4:75:
         87:0d:5e:74:c6:54:58:c6:69:71:d1:34:3b:18:78:c9:71:7f:
         2b:d3:cc:34:03:40:11:5c:33:1c:3d:ed:d8:e4:3f:48:ec:37:
         b3:cb:01:eb:1e:52:e7:52:fb:3d:97:8d:59:44:60:d6:94:6e:
         59:fb:c9:f8:ad:76:1d:ae:be:05:65:ac:a2:29:12:16:ff:13:
         ed:bf:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:58 2024 by rpki-client on console-ams.rpki-client.org