Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File:                     Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier:          /osB+iDXGSU6FVj+zUCqgVbx6hqILggB+7Cqfbei9TI=
Subject key identifier:   F7:3F:FB:C4:AE:34:C1:F4:F6:B4:0C:7D:1E:6D:DB:D2:30:AE:5C:44
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       03A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number:          178A
Signing time:             Mon 20 May 2024 17:30:29 +0000
Manifest this update:     Mon 20 May 2024 17:30:28 +0000
Manifest next update:     Mon 27 May 2024 17:30:28 +0000
Files and hashes:         1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: IZhfca4qnWOH63hF8WtmRaGdX6KVrB0HGadlpVCXpnk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 17:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: May 20 17:30:28 2024 GMT
            Not After : May 27 17:30:28 2024 GMT
        Subject: CN=664b88b5-f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:ef:bf:a8:f7:e0:c6:88:55:e1:37:bf:de:
                    51:ee:fb:c6:b0:68:97:15:f8:ba:cf:49:a1:6c:2d:
                    c9:f7:ca:a7:8f:09:20:6c:84:85:1c:05:1a:65:d6:
                    f8:46:6c:55:24:c1:b6:b1:ef:98:1b:91:3a:bb:4c:
                    1e:e4:36:38:1a:ac:be:1c:49:5d:c8:14:22:7d:7c:
                    9e:07:d9:88:82:0b:d1:61:87:ac:8a:06:2b:52:89:
                    fc:34:07:bf:34:e7:b0:64:6f:db:f0:6b:89:8e:7a:
                    e2:5d:0d:51:f5:88:23:fe:7e:ce:92:c6:11:b8:7d:
                    b1:75:7c:f5:7e:f0:1c:dd:6a:7b:50:70:c8:c5:18:
                    53:24:b2:79:5e:25:cf:91:05:63:00:60:68:d9:66:
                    17:4f:e1:2a:de:c9:a9:46:d9:73:2a:06:7a:6c:08:
                    18:2b:a4:b5:7a:c2:4f:36:3e:f7:85:5c:d9:92:aa:
                    e7:73:c8:54:72:e5:78:19:10:44:84:8a:ca:c0:84:
                    bb:d3:f5:93:3e:92:88:af:10:38:ca:3c:a3:b2:07:
                    7e:2f:1d:3b:9b:1d:95:e2:6e:3d:28:ce:33:07:17:
                    9a:7a:73:75:be:95:8e:5c:ac:4f:a9:4d:e6:0a:8f:
                    72:db:8a:29:2f:9d:6d:f0:26:87:b3:d3:2f:ed:43:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3F:FB:C4:AE:34:C1:F4:F6:B4:0C:7D:1E:6D:DB:D2:30:AE:5C:44
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:57:9b:b4:27:81:58:fd:81:d2:66:02:63:1b:ec:20:9e:c6:
         ae:6e:80:b9:31:4f:d2:97:e8:04:55:bd:c3:f5:00:ae:23:dd:
         bb:31:26:1a:5e:1d:96:8e:d8:fe:07:0d:b4:5c:dd:bf:ee:a2:
         b3:3e:cc:13:95:b1:3e:31:0c:bf:7c:2d:e5:ca:e7:f6:fe:6e:
         89:08:68:69:d8:3d:4a:93:03:4d:46:a0:1a:33:59:80:25:69:
         d5:b6:30:4b:05:cf:cf:5a:8a:3d:45:86:75:3e:fa:92:15:6b:
         13:d8:d7:96:d3:7d:e0:2d:fc:5c:e9:2a:e8:c0:1f:f1:ce:fc:
         f9:6b:a9:f5:59:e4:f8:89:68:53:fc:69:ff:10:37:e3:4b:85:
         af:d7:4e:01:76:2b:85:4e:91:b7:f0:d7:ff:95:b0:2e:66:12:
         11:da:40:30:0b:e6:4e:03:80:d9:06:f9:f4:36:d7:52:ec:92:
         36:d5:a9:af:18:ef:db:3e:aa:4c:44:62:43:5e:1a:f7:db:77:
         19:67:1b:5d:c2:3d:0d:75:57:bb:39:41:72:79:e1:60:95:43:
         5c:eb:b0:a4:8d:16:81:58:74:fd:38:ef:67:c3:bf:b9:5c:b4:
         6d:c7:ed:f4:25:43:17:cd:43:22:4c:36:4a:c9:e7:7a:9c:4e:
         50:1b:51:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:20:11 2024 by rpki-client on console-fra.rpki-client.org