Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
File:                     dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json)
Hash identifier:          8B7aqN8iShL+W6sjmhDIWsY4VohqhrFbw3YRoMbm2jA=
Subject key identifier:   C9:1B:D7:29:6C:F6:52:E6:D5:47:1E:AD:D5:BD:34:4C:37:2B:0F:5E
Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88
Certificate issuer:       /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
Certificate serial:       111C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
Manifest number:          1871
Signing time:             Tue 30 Apr 2024 18:04:57 +0000
Manifest this update:     Tue 30 Apr 2024 18:04:57 +0000
Manifest next update:     Tue 07 May 2024 18:04:56 +0000
Files and hashes:         1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: jq4kkkV+GmzCJc3S1PbRUBMFcK5nz9iA2QY9X8GYuD4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 18:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4380 (0x111c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688
        Validity
            Not Before: Apr 30 18:04:57 2024 GMT
            Not After : May  7 18:04:56 2024 GMT
        Subject: CN=663132c9-8ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:35:f5:74:f7:9d:ba:32:7e:d9:0b:01:7e:
                    d9:d2:f0:d9:b2:eb:86:ad:e8:ff:57:01:42:0d:d6:
                    fe:c5:7f:b8:fe:72:f4:20:f6:9f:4d:bc:3b:9a:50:
                    46:22:bc:58:00:e9:d8:ae:97:f7:b9:26:06:a0:fb:
                    7e:e3:7e:13:2b:81:35:4e:fa:2c:9a:88:4d:54:96:
                    33:51:66:f2:a7:b7:ad:d5:0c:b3:9d:c6:21:dc:ea:
                    64:57:a9:f3:65:08:f6:12:72:ce:80:8f:00:bb:a9:
                    e1:67:de:87:01:9c:b8:5f:29:0f:ac:49:de:ad:6a:
                    04:de:b5:78:08:33:db:a7:b3:10:a0:1f:54:3e:65:
                    43:ec:cb:0d:10:27:47:de:86:33:16:a4:a9:c2:1d:
                    f8:94:a5:36:c3:25:90:91:71:34:12:eb:9e:f3:c0:
                    99:20:c6:98:81:7f:7e:ca:e9:ef:09:79:ad:3a:fa:
                    93:35:21:f8:ca:e4:62:0b:b2:de:35:89:cb:b2:12:
                    81:27:95:c8:41:5c:b3:5e:7a:ee:5c:f2:45:70:ba:
                    f0:04:9b:71:09:68:96:4a:c3:59:44:1f:63:6f:5c:
                    94:43:97:1e:c9:45:60:8c:38:4a:4e:30:e6:17:81:
                    87:19:63:45:b1:ac:2a:f0:1f:4f:51:18:f9:f3:d6:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:D7:29:6C:F6:52:E6:D5:47:1E:AD:D5:BD:34:4C:37:2B:0F:5E
            X509v3 Authority Key Identifier:
                keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:94:9c:ae:f3:4a:1b:88:49:73:79:04:38:24:78:b4:ef:4a:
         ae:b3:b0:95:97:63:70:7e:f1:77:ec:5e:e2:ff:72:94:e3:c1:
         54:a9:18:c3:f5:33:dc:3b:35:e6:23:e9:32:33:77:d5:90:a2:
         42:7e:28:52:6c:67:c9:62:e9:b9:20:8e:22:d8:3a:46:58:9a:
         58:40:fc:fe:05:2c:3a:57:83:73:8d:9f:14:9c:4d:2b:0b:af:
         f1:a3:dd:9a:8a:af:b6:a7:a0:9e:f1:ad:e5:60:80:dc:c3:56:
         48:9e:93:6f:e1:e4:23:6c:cb:e9:14:63:79:65:c7:9d:af:dc:
         c3:df:7e:5a:43:71:da:0b:8c:23:a2:21:9e:20:70:49:b4:1d:
         2b:d1:6a:32:a5:06:4f:83:1c:0f:ef:02:da:bc:64:6c:52:69:
         70:0b:cb:9a:1e:a8:f3:8d:06:b5:2f:c5:42:35:2a:68:9d:0d:
         de:98:9b:21:64:7a:cd:af:bc:f2:cb:a3:da:59:f9:ae:b0:87:
         0e:20:23:75:68:b2:b9:07:21:27:80:80:fb:4b:98:c3:2c:d8:
         d7:8b:ed:95:28:05:2c:b9:b0:f5:92:6b:58:95:8a:08:ed:25:
         ac:2c:a4:af:d7:47:39:43:1a:c2:89:8f:38:90:8d:56:a1:df:
         88:a1:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:22:58 2024 by rpki-client on console-ams.rpki-client.org