Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
File:                     sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json)
Hash identifier:          txChAaiOB5yllsOHqMrmSTXa6ODuGhct/8e3OvEr+3Y=
Subject key identifier:   A0:3F:9D:13:F1:D7:A2:35:82:D8:BA:AF:50:6C:C4:62:80:9A:32:F5
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Certificate issuer:       /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
Manifest number:          0197
Signing time:             Sat 27 Apr 2024 04:36:23 +0000
Manifest this update:     Sat 27 Apr 2024 04:36:22 +0000
Manifest next update:     Sat 04 May 2024 04:36:22 +0000
Files and hashes:         1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: rSgmEARVkWPX9RkG5b2fY/YiJX62i8g4p2l+IudyCTk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
                          rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
        Validity
            Not Before: Apr 27 04:36:22 2024 GMT
            Not After : May  4 04:36:22 2024 GMT
        Subject: CN=662c80c6-6068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:dd:23:7b:fb:42:60:02:a7:5b:82:51:3f:
                    43:63:16:3e:59:4a:2f:15:24:fc:f8:0d:eb:95:de:
                    66:fa:b2:ac:68:fc:52:4d:1b:22:8c:db:03:b0:51:
                    fe:31:43:75:70:bc:c6:29:73:d1:b8:f1:ff:e9:5b:
                    c0:d0:37:76:37:24:cc:82:6c:3e:56:b2:e9:22:b3:
                    95:31:d8:d2:2a:ba:8e:50:40:3e:40:8b:f4:b7:7c:
                    5f:17:56:30:68:63:1a:c8:af:7f:76:21:b2:fc:18:
                    29:19:96:3a:9f:d4:f9:0b:27:7b:d3:1a:54:83:53:
                    b8:95:65:f4:8a:8e:c6:e5:9e:2e:3e:6c:28:86:c8:
                    6b:85:e2:61:99:a7:e6:e0:a6:33:bf:6e:51:e7:bb:
                    42:41:4c:88:8b:25:52:ea:f0:8e:da:c4:85:d9:ae:
                    9a:7a:01:dc:b4:0a:ec:0a:d3:d5:c9:91:85:1a:e4:
                    7f:3b:e7:3f:f6:aa:57:47:1f:18:d5:a8:9e:f8:0a:
                    b2:22:8b:d0:f6:4f:a5:b1:d0:6b:bc:f3:dc:3a:75:
                    08:3e:bb:b7:81:50:cf:b5:0d:7a:bd:d3:2a:a3:e1:
                    bd:e2:b3:16:e4:ee:08:a1:fd:7b:55:8a:52:36:3c:
                    dc:75:c0:6e:91:4f:ec:9a:b7:7f:82:1f:05:a0:a5:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3F:9D:13:F1:D7:A2:35:82:D8:BA:AF:50:6C:C4:62:80:9A:32:F5
            X509v3 Authority Key Identifier:
                keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:a1:09:38:32:7c:3f:30:69:38:3e:15:16:7d:51:f4:00:
         da:84:d6:a6:a3:c9:4e:34:3c:10:06:5a:9d:7d:d1:72:d6:57:
         bf:89:58:a9:83:64:33:73:b1:bc:2d:69:76:a9:c7:45:24:e6:
         20:ff:f9:0d:c6:2e:65:0a:e3:25:65:61:7e:28:b1:15:39:2f:
         ad:8c:13:84:0f:b8:3c:64:0f:b3:5a:4d:78:c3:bc:17:4a:6a:
         e8:8a:81:63:8d:cd:2b:72:2d:8f:1c:ec:60:3d:56:ed:c9:7a:
         cd:1b:27:fe:5b:95:05:76:29:51:c1:2c:2b:d8:d4:dd:e5:65:
         5d:a7:00:3c:a1:de:20:da:3d:29:34:67:92:7a:da:fc:12:f5:
         5d:4e:71:85:9a:f2:d7:23:29:72:cd:dd:53:6e:79:2e:84:de:
         eb:ec:3c:a9:4e:9f:97:bf:2c:60:8c:7a:66:45:74:0f:a4:7e:
         ec:79:29:a9:d9:af:5c:ec:30:69:0e:4f:bd:70:00:f4:43:4e:
         c0:f8:fa:00:0c:68:07:a0:cf:7f:24:e8:e2:7b:26:66:aa:32:
         45:cc:de:1e:03:29:d8:9a:2d:2f:45:53:4c:f7:93:99:fc:37:
         0c:29:33:65:d8:5a:62:e0:43:0d:7c:b1:91:e1:bf:6c:96:c9:
         34:d6:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:20:27 2024 by rpki-client on console-ams.rpki-client.org