Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
File:                     pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json)
Hash identifier:          le4rf/cEY93V8Z5+hW9/vO3dYg75SrYFBMvx5bVe6EY=
Subject key identifier:   1E:7A:49:E8:1B:4E:11:19:90:82:E9:5A:B0:D1:68:A1:A2:39:3E:90
Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78
Certificate issuer:       /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
Manifest number:          063F
Signing time:             Wed 01 May 2024 00:00:52 +0000
Manifest this update:     Wed 01 May 2024 00:00:51 +0000
Manifest next update:     Wed 08 May 2024 00:00:51 +0000
Files and hashes:         1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: H18jxkkH22z9RtUIgqvkXg7H4RXWDcewCuVmOGPisn0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 23:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978
        Validity
            Not Before: May  1 00:00:51 2024 GMT
            Not After : May  8 00:00:51 2024 GMT
        Subject: CN=66318633-f4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:1f:e7:d0:a2:13:ee:36:ce:53:aa:e4:77:
                    9f:09:28:15:ff:49:56:07:70:d5:ea:7a:34:17:a4:
                    23:e0:ec:4e:bb:77:25:5e:84:14:f4:10:f9:21:23:
                    c2:8f:e7:2f:fa:26:c9:a0:40:6f:71:d4:4c:37:20:
                    99:b5:83:d6:4a:73:82:b0:c6:9b:b3:3c:a4:20:b8:
                    f2:ea:cf:6d:b0:14:75:4d:8a:6d:42:70:ec:ce:66:
                    d9:94:65:6b:c4:a1:1a:f1:b8:5b:69:fc:c8:47:51:
                    42:1a:ab:b7:b7:5b:c6:db:a3:4a:e1:10:7d:ad:d7:
                    6f:5a:1a:c7:88:6d:35:79:34:a7:eb:95:72:7c:c3:
                    cc:77:c3:a7:25:93:c6:eb:75:40:a3:5c:8a:04:c3:
                    f6:10:1d:fa:7c:d6:d4:0f:07:66:cd:ca:30:b1:92:
                    6b:3e:af:bd:1c:5f:20:65:ed:df:5b:3e:08:92:d7:
                    28:64:6a:84:6f:8e:86:f7:09:71:fc:f0:c6:c4:c8:
                    ff:97:76:eb:fc:5c:ca:f6:cc:e8:4a:d2:2f:f1:80:
                    d6:33:24:90:48:b5:e5:55:5d:a4:b7:67:7e:ab:3a:
                    63:b5:8d:6b:e6:36:c5:5e:e8:00:b4:35:1d:41:22:
                    eb:8a:d7:27:ef:4a:67:e8:b9:b8:e7:ad:69:8f:ad:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:49:E8:1B:4E:11:19:90:82:E9:5A:B0:D1:68:A1:A2:39:3E:90
            X509v3 Authority Key Identifier:
                keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:78:6b:99:ec:d5:2a:c6:b8:ea:16:f5:8e:c6:22:d0:9c:ee:
         75:5b:f4:0b:ee:7a:65:3d:58:6a:a2:b6:52:89:e6:53:b3:c8:
         91:79:4b:e8:39:e4:8c:c0:88:18:0b:fa:99:c5:7a:85:0f:bf:
         8d:3f:2a:d0:89:ad:8d:a2:21:2e:20:7d:c7:ab:f6:5b:d3:30:
         4a:06:cf:85:bb:8e:de:ac:23:cc:05:ae:a4:68:aa:da:ca:68:
         ca:31:3d:78:03:35:21:68:9f:0f:a5:78:f3:90:ca:48:a1:34:
         d0:75:cb:0c:ad:e4:b5:56:1e:96:bf:8b:1a:f8:76:37:08:5e:
         48:5a:9f:50:70:61:79:ee:6b:58:46:14:06:26:42:13:4b:bf:
         2a:aa:69:6b:2a:fb:84:88:88:bb:e5:69:0e:5a:21:2a:fd:a8:
         09:14:2f:f6:9b:47:03:68:fc:7a:fa:8c:e7:bf:b6:9e:de:9d:
         30:e1:b1:05:9c:50:ef:b1:2f:7e:f0:d5:ca:f9:2a:28:73:25:
         b9:46:df:2b:74:0a:bd:6c:93:38:f2:25:ab:92:4c:48:66:65:
         a8:16:1e:8d:bb:20:71:52:0a:18:e6:47:7d:b4:e3:a1:74:6f:
         6a:2b:b8:9a:4b:bf:eb:7a:70:64:3f:0a:87:89:cf:63:3f:37:
         45:83:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:04:06 2024 by rpki-client on console-fra.rpki-client.org