Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
File:                     0DacIB93rzjycCn7IkbEOF0njKI.mft (raw, json)
Hash identifier:          7qI7aNnJL3TQ8oxrRpV5DN1/VhG7nkgWn9UtSCkl3y8=
Subject key identifier:   1C:2D:8C:C3:AB:21:46:40:27:55:9B:E3:09:05:49:02:1F:9F:D4:31
Authority key identifier: D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2
Certificate issuer:       /CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
Manifest number:          052D
Signing time:             Tue 07 May 2024 00:59:23 +0000
Manifest this update:     Tue 07 May 2024 00:59:23 +0000
Manifest next update:     Tue 14 May 2024 00:59:23 +0000
Files and hashes:         1: 0DacIB93rzjycCn7IkbEOF0njKI.crl (hash: 61Ly0ANRfe4eEsUZw2mA7Kj15rJxKKzTc6hDE9rDGiQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF27/serialNumber=D0369C201F77AF38F27029FB2246C4385D278CA2
        Validity
            Not Before: May  7 00:59:23 2024 GMT
            Not After : May 14 00:59:23 2024 GMT
        Subject: CN=66397ceb-dcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:60:02:ea:33:a5:90:23:07:c1:58:b9:cc:7c:
                    73:67:3a:f6:0b:06:0a:9e:f1:0f:2d:15:83:26:98:
                    3a:94:00:43:98:10:f1:99:6f:c5:d7:3f:aa:44:51:
                    2d:cb:52:db:81:07:24:43:92:3b:2f:8a:f5:58:c3:
                    61:3b:0e:b7:35:f5:b5:55:56:91:06:85:ff:12:f3:
                    46:11:34:37:18:75:bb:a6:cb:8d:c4:63:9b:61:5a:
                    4f:40:32:3a:ac:6c:20:d4:72:6c:84:1d:ff:01:70:
                    9d:a9:3f:68:65:5d:3b:23:45:27:c8:ec:fd:9e:0c:
                    4e:e6:e9:f4:e8:55:31:59:6d:ff:37:45:76:c3:9d:
                    be:29:43:25:24:7e:73:6b:5e:83:02:7a:48:35:56:
                    de:c4:b5:ba:22:f7:45:f1:a6:b0:de:7f:7f:19:3f:
                    cd:89:a0:f5:fa:22:f9:ab:f6:2b:c5:bc:90:13:a6:
                    c7:ce:ac:58:e3:c1:7c:14:3e:81:13:38:17:80:09:
                    74:da:5d:1a:5b:81:be:88:ed:ae:27:89:c6:ed:03:
                    b8:7d:55:6f:99:e1:2d:95:8f:b2:d5:c5:c9:53:da:
                    b6:fd:e0:04:2d:ac:47:3d:41:07:c0:4e:71:2e:af:
                    55:51:ba:3b:f1:bd:8a:85:5b:80:1e:40:79:42:a0:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2D:8C:C3:AB:21:46:40:27:55:9B:E3:09:05:49:02:1F:9F:D4:31
            X509v3 Authority Key Identifier:
                keyid:D0:36:9C:20:1F:77:AF:38:F2:70:29:FB:22:46:C4:38:5D:27:8C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DacIB93rzjycCn7IkbEOF0njKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF27/F1D3E326ABE711EBB85D5147C4F9AE02/0DacIB93rzjycCn7IkbEOF0njKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:76:34:c1:92:cd:34:54:ab:2a:22:22:56:4c:7c:39:07:
         eb:a2:94:27:42:85:3b:82:bc:e8:86:46:a0:5b:80:a6:cb:87:
         22:f1:f3:ff:e6:da:df:1f:a9:0a:b6:8e:08:ad:c4:4c:43:3b:
         92:22:58:c8:3b:c4:f0:dc:f0:1f:85:14:4d:5c:4c:60:36:c1:
         e6:f7:28:29:94:c4:16:cb:83:55:fa:f1:d4:2e:4d:e1:79:dd:
         86:68:62:f8:9a:a4:4d:b4:19:32:8b:2c:67:3c:c9:4f:6b:fb:
         79:f9:f3:ec:57:8d:07:61:c2:32:f7:2f:0e:22:f7:43:2d:d5:
         67:22:aa:67:db:39:ab:79:f1:55:55:01:f7:a3:f7:e4:96:c6:
         47:a6:e7:58:a9:5b:c5:d2:70:99:ff:b8:3a:9a:5e:7c:3c:7d:
         1d:e8:b8:47:b9:5d:be:9b:c2:26:77:83:62:a1:08:0a:24:58:
         b2:74:b7:b7:e9:87:e4:32:9e:ab:23:9e:be:ef:04:82:96:0d:
         57:2b:d7:2a:98:59:86:45:39:a2:37:48:ca:a9:a7:e1:16:4f:
         8e:11:71:53:da:2d:f7:7d:3b:41:fb:a1:21:a2:4d:1d:f1:63:
         f1:8c:95:67:6d:a1:1a:2f:ff:89:10:e7:fa:3b:92:ad:8e:5e:
         9e:6a:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:01:05 2024 by rpki-client on console-ams.rpki-client.org