Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          blyP5oKm7A//xdn3PfpuPrbxZvCHNq77BLR1B0B1YLo=
Subject key identifier:   58:1D:97:F9:95:EF:9B:7E:78:6F:4E:28:49:E0:E4:8A:A5:BC:FB:A2
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       3426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          3426
Signing time:             Fri 22 Nov 2024 14:56:52 +0000
Manifest this update:     Fri 22 Nov 2024 14:56:52 +0000
Manifest next update:     Fri 29 Nov 2024 14:56:52 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: W2uVaoZtItGNO9QX2IDVuOXYD0dFpmM4w3EO5ySY1xQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: Nov 22 14:56:52 2024 GMT
            Not After : Nov 29 14:56:52 2024 GMT
        Subject: CN=67409bb4-7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:61:1c:cf:01:a6:c2:1c:d0:ef:ee:4a:97:
                    61:90:8e:2f:16:3c:7b:03:ee:74:00:b4:e9:ab:5a:
                    d0:94:f1:5b:c7:5c:d0:52:d1:68:f7:22:47:52:b6:
                    5a:32:23:5e:1b:b1:91:01:a5:21:ee:01:97:50:0f:
                    6c:7b:b5:8e:9b:10:00:a2:f8:74:16:09:b2:ab:73:
                    12:73:82:11:d5:78:d8:39:4a:b7:f4:74:e1:84:d8:
                    d7:b1:f9:db:31:81:2e:61:1a:ce:e1:fc:d2:ff:6e:
                    16:8b:77:ae:bb:b8:c9:d4:7f:dc:4a:30:9e:48:66:
                    ef:44:bf:b4:dd:e0:a0:28:15:fb:ee:6f:70:d2:30:
                    3b:1f:7b:2f:2d:e2:81:4a:b7:96:41:3d:46:c2:7f:
                    c6:e1:12:fa:da:ee:1e:12:6f:8c:7b:e9:ce:7c:00:
                    21:83:57:74:fc:c8:08:df:51:ae:a9:72:5f:52:e6:
                    02:8a:bf:80:62:76:74:57:1d:2c:97:3d:db:64:6b:
                    b9:99:b5:82:d8:0d:b2:6a:23:46:16:af:cf:71:8c:
                    68:29:79:ff:16:65:dd:55:4c:02:08:49:67:75:43:
                    43:0a:45:12:24:1f:2a:c1:59:40:61:ed:8e:4f:ba:
                    9d:07:87:3e:c1:ee:c2:d8:46:d0:20:5f:ec:92:63:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:97:F9:95:EF:9B:7E:78:6F:4E:28:49:E0:E4:8A:A5:BC:FB:A2
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:16:bb:f0:f5:3b:e2:1e:c7:0f:3f:f5:a7:2a:72:62:ad:3a:
         8a:b5:a3:ea:8b:c3:5d:bf:84:4a:53:07:68:a6:b2:f1:9f:1d:
         7e:d6:a0:8d:0c:ed:fe:d0:7e:3d:ec:36:3e:ab:61:07:23:de:
         c0:d8:3b:8a:a7:ac:3e:9b:1d:e6:61:36:97:d1:1d:7c:c1:d1:
         84:f8:4b:f2:ec:a4:30:4b:2d:54:17:4a:b9:14:b0:fa:44:4f:
         32:56:d0:0c:66:73:7c:62:06:b4:a7:20:2f:7d:b6:25:97:57:
         0e:21:8a:96:f2:17:f9:d8:2e:95:46:e6:1b:65:ea:7d:90:78:
         a7:a4:df:26:ad:f0:6e:1a:a4:d9:33:d7:75:91:aa:96:19:31:
         9b:59:b2:2d:95:cf:f9:3d:c9:9c:05:da:b8:c8:d5:6e:b2:43:
         24:3b:ca:5a:4c:b8:08:d3:a7:46:ff:68:11:47:1c:3e:be:6a:
         64:d2:76:13:15:f5:0c:7a:01:6e:86:cd:fb:74:32:d8:0f:32:
         84:12:e0:84:f0:5e:26:95:9f:35:74:70:d9:d3:63:a1:ad:86:
         53:51:2b:00:ea:75:62:e4:dd:86:24:f4:50:0a:d1:8a:8a:5f:
         33:fe:87:db:01:2a:86:f9:c6:54:01:94:55:d1:a4:31:b5:e4:
         70:28:99:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5
MkQ5RTZFQzMwHhcNMjQxMTIyMTQ1NjUyWhcNMjQxMTI5MTQ1NjUyWjAYMRYwFAYD
VQQDEw02NzQwOWJiNC03YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBJhHM8BpsIc0O/uSpdhkI4vFjx7A+50ALTpq1rQlPFbx1zQUtFo9yJHUrZa
MiNeG7GRAaUh7gGXUA9se7WOmxAAovh0Fgmyq3MSc4IR1XjYOUq39HThhNjXsfnb
MYEuYRrO4fzS/24Wi3euu7jJ1H/cSjCeSGbvRL+03eCgKBX77m9w0jA7H3svLeKB
SreWQT1Gwn/G4RL62u4eEm+Me+nOfAAhg1d0/MgI31GuqXJfUuYCir+AYnZ0Vx0s
lz3bZGu5mbWC2A2yaiNGFq/PcYxoKXn/FmXdVUwCCElndUNDCkUSJB8qwVlAYe2O
T7qdB4c+we7C2EbQIF/skmOJnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgdl/mV
75t+eG9OKEng5IqlvPuiMB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE
OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz
cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByFrvw9TviHscPP/WnKnJirTqKtaPqi8Ndv4RKUwdoprLxnx1+1qCN
DO3+0H497DY+q2EHI97A2DuKp6w+mx3mYTaX0R18wdGE+Evy7KQwSy1UF0q5FLD6
RE8yVtAMZnN8Yga0pyAvfbYll1cOIYqW8hf52C6VRuYbZep9kHinpN8mrfBuGqTZ
M9d1kaqWGTGbWbItlc/5PcmcBdq4yNVuskMkO8paTLgI06dG/2gRRxw+vmpk0nYT
FfUMegFuhs37dDLYDzKEEuCE8F4mlZ81dHDZ02OhrYZTUSsA6nVi5N2GJPRQCtGK
il8z/ofbASqG+cZUAZRV0aQxteRwKJmL
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org