Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
File:                     FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft (raw, json)
Hash identifier:          022RQ2nmqz22Ln64ANwLkpnMS5uUFhESYU/2ZmpNfhY=
Subject key identifier:   1E:79:08:7A:E8:E1:8E:EC:B0:2F:4F:FB:BF:B6:A7:3A:55:D9:B9:79
Authority key identifier: FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD
Certificate issuer:       /CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
Certificate serial:       742B98493C81DDC6BEF85B243D5C8B0D6CEA65A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
Manifest number:          0157
Signing time:             Sat 18 May 2024 04:19:22 +0000
Manifest this update:     Sat 18 May 2024 04:14:22 +0000
Manifest next update:     Sun 19 May 2024 07:14:22 +0000
Files and hashes:         1: FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl (hash: 7TO32KsXHLcxJh14TfMI0hjpSu9HIHNAclBeUyEyQI0=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 07:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2b:98:49:3c:81:dd:c6:be:f8:5b:24:3d:5c:8b:0d:6c:ea:65:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
        Validity
            Not Before: May 18 04:14:22 2024 GMT
            Not After : May 19 07:14:22 2024 GMT
        Subject: CN=1E79087AE8E18EECB02F4FFBBFB6A73A55D9B979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:20:c1:3c:27:54:82:20:7f:e9:91:38:fc:
                    bd:08:eb:1e:e6:49:59:47:d3:c1:4f:c9:2a:b0:6a:
                    9b:86:0a:4a:13:67:15:eb:12:80:ba:25:03:5c:c7:
                    a8:53:b7:a6:04:7c:ea:8a:b0:d6:f5:ae:6b:c1:9f:
                    85:de:ec:aa:02:51:ae:bd:8b:fc:86:70:cf:52:ee:
                    a1:10:94:07:4e:d7:ce:4a:93:9c:71:fa:f0:0d:16:
                    0b:0d:bb:3e:14:1b:0c:51:8a:e5:15:7c:fa:3c:f7:
                    93:22:c8:f9:99:3a:90:16:e4:5b:0f:fb:9f:b6:02:
                    7c:dd:c4:80:2b:51:50:30:98:c8:1f:4b:69:d8:49:
                    f8:0f:62:43:53:0f:90:b3:86:35:44:63:06:3d:f8:
                    66:ef:60:bd:5a:f3:34:18:22:47:85:81:51:23:a0:
                    ef:97:26:14:00:0a:06:bd:e0:de:c5:ec:6b:ce:ae:
                    bf:66:bf:c7:9c:a3:a8:52:cc:54:6a:d9:0a:82:00:
                    44:46:26:da:56:d2:ca:36:fe:cf:79:63:cd:bc:b1:
                    37:f4:85:8b:c4:c1:bf:56:59:cc:76:fe:c7:f2:ab:
                    8c:58:6e:a7:e3:82:10:b5:58:f4:4c:b1:68:43:99:
                    ca:d9:b7:2a:35:84:b4:68:57:34:47:d2:a6:cb:da:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:08:7A:E8:E1:8E:EC:B0:2F:4F:FB:BF:B6:A7:3A:55:D9:B9:79
            X509v3 Authority Key Identifier:
                keyid:FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0a:bf:50:99:7d:c0:03:28:7d:e7:d0:3f:02:e0:48:a0:57:
         41:33:3f:04:ca:9d:9b:45:49:50:a9:d1:2f:26:40:fc:27:48:
         47:ac:63:d0:77:82:16:7a:0e:87:ba:5b:03:02:fe:fe:19:54:
         3e:e6:76:94:4e:4e:56:94:87:dd:70:2a:32:5c:14:02:a3:f9:
         d7:ad:c8:0b:6f:77:3a:bd:9c:4e:d9:3d:96:eb:d6:7a:bc:4d:
         f5:bc:2f:cf:a7:93:4f:c5:3e:75:e2:83:75:f5:01:20:ec:54:
         6e:44:6d:69:7c:2b:23:91:e0:24:75:b4:00:1d:26:e8:d0:c0:
         d7:9a:19:fc:89:8a:8c:43:22:d3:5f:01:51:f4:f3:69:92:a9:
         7e:50:d7:2f:0d:c2:97:53:ad:66:8e:4f:54:07:72:fa:fc:5d:
         b2:6e:9d:91:bd:e8:3a:0b:3b:8f:93:a7:33:d4:dd:46:d4:48:
         08:6b:f5:dd:ef:50:a6:d7:66:40:03:2f:50:f1:71:23:6b:0a:
         18:f6:f3:e6:42:26:ec:54:5b:1d:ce:3a:78:49:8f:fc:4c:78:
         ec:58:f1:c4:0e:c0:13:27:4c:40:dd:b3:28:56:85:8d:8e:14:
         46:54:6a:73:97:ad:20:6a:ee:68:3f:e3:b1:9e:d2:6c:d1:fd:
         e8:eb:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:57:37 2024 by rpki-client on console-ams.rpki-client.org