Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          6Tek0K0sVs4aLtM3N5zMSHI08Jw+SEZ3YrDH9BITvf4=
Subject key identifier:   C8:BF:13:3A:44:16:67:F8:EF:DC:12:19:6E:25:C4:B8:F7:63:D7:81
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       06DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          06DF
Signing time:             Tue 14 May 2024 22:54:35 +0000
Manifest this update:     Tue 14 May 2024 22:54:35 +0000
Manifest next update:     Tue 21 May 2024 22:54:35 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: t6kpGTh8JBdUe6MMLRXMoahSh/ipRSZHz6ZJGp4capE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 22:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: May 14 22:54:35 2024 GMT
            Not After : May 21 22:54:35 2024 GMT
        Subject: CN=6643ebab-8778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:4e:7d:23:42:5e:19:94:9e:14:db:83:7b:
                    87:aa:7b:80:f5:49:b9:86:53:d8:60:7e:40:4b:5a:
                    9f:6b:14:99:df:6c:e7:82:68:74:79:3f:0e:1f:46:
                    c2:9e:80:3a:36:d6:d2:17:59:5a:87:be:ba:8e:e6:
                    b3:c2:1c:ed:b2:eb:61:89:06:b2:19:c5:31:11:4d:
                    98:a5:9b:98:aa:13:cb:c6:ba:da:1b:1b:eb:09:78:
                    b8:e0:68:da:bc:40:4d:06:19:42:73:ab:95:78:95:
                    bf:f6:51:d6:cd:e6:90:ad:cc:ce:c9:5d:39:a9:77:
                    df:75:de:9d:09:82:5e:de:e2:32:81:27:33:55:fd:
                    eb:1c:18:04:54:16:3e:9d:24:c1:f7:11:12:04:8f:
                    07:06:ea:47:53:89:48:a3:f6:b1:2d:da:13:8b:33:
                    b8:57:77:92:b3:88:e4:1f:0b:fd:65:84:09:97:53:
                    42:4a:6a:67:d4:25:7c:25:1f:92:bd:2e:e9:53:7c:
                    2d:32:ec:df:6e:5b:2b:ab:15:61:ae:59:b9:58:61:
                    89:0d:fe:55:9d:39:30:99:9d:7e:0b:13:0a:01:14:
                    82:05:ef:84:39:a6:1c:95:7b:5d:49:51:d7:13:20:
                    00:d4:4c:aa:4a:5b:ab:6b:67:2f:68:7e:b6:bb:88:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:13:3A:44:16:67:F8:EF:DC:12:19:6E:25:C4:B8:F7:63:D7:81
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:d6:8f:c3:27:d3:ad:90:9c:be:a2:c6:b7:ee:68:65:c9:
         54:dc:0f:4e:3e:b3:20:0d:22:7d:17:3a:8a:c9:65:a1:99:3a:
         ee:30:29:be:e6:98:46:3c:34:77:16:8a:5b:b1:30:6a:ea:0b:
         98:c4:03:14:8a:e0:43:95:f5:b1:8b:ee:a9:55:15:a9:ed:7b:
         80:ac:f1:27:8a:3f:b5:cb:b2:35:8b:51:14:e1:e5:36:ef:c4:
         0b:27:72:82:98:b7:70:4e:f0:83:c8:bb:76:11:ff:2c:e9:b2:
         f2:e2:a6:9f:31:7f:4d:91:f8:dc:02:58:aa:b1:21:3b:16:78:
         e1:03:16:9e:98:1b:6d:58:0d:d0:2c:26:41:30:5b:05:a5:62:
         8b:4d:8e:5d:3a:8a:3a:35:69:a3:37:e1:2a:57:68:10:b8:b4:
         1f:d0:a2:bc:08:f6:66:db:e9:3b:01:f6:af:e1:59:06:a4:9e:
         67:71:a5:e9:34:16:d4:1e:fc:13:b2:99:6f:3f:4a:4f:97:c6:
         e1:c3:bc:01:76:c0:d5:b8:4d:75:66:ca:64:11:cf:2f:c8:a5:
         88:c0:ac:22:17:70:8b:7a:3f:8d:48:5f:c8:c1:c9:83:ed:5e:
         6e:31:dd:11:60:2d:2c:e0:62:fa:3d:96:35:24:2a:33:6e:e9:
         a9:39:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 23:38:44 2024 by rpki-client on console-ams.rpki-client.org