Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
File:                     B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft (raw, json)
Hash identifier:          fZEKAnQXUAzgbSoRuFXhU9AC5O4UHoCe1ZA5HE83P8M=
Subject key identifier:   93:59:3E:54:23:D9:A9:14:72:8B:97:0A:8E:74:D8:08:5B:B8:22:0E
Authority key identifier: 07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74
Certificate issuer:       /CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
Certificate serial:       146E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
Manifest number:          146D
Signing time:             Fri 22 Nov 2024 16:52:58 +0000
Manifest this update:     Fri 22 Nov 2024 16:52:58 +0000
Manifest next update:     Fri 29 Nov 2024 16:52:58 +0000
Files and hashes:         1: B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl (hash: oojGca7yGx7hJTUxD4Uc2CAkGzqXDrUIVay0Uomjpac=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5230 (0x146e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276F9/serialNumber=0753FE22FFED6B00B6E6E3C5AB1C3C84202A6374
        Validity
            Not Before: Nov 22 16:52:58 2024 GMT
            Not After : Nov 29 16:52:58 2024 GMT
        Subject: CN=6740b6ea-ed21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:43:4f:82:84:a7:0a:f8:67:a9:72:cc:9d:
                    1e:30:ba:06:68:53:88:85:cf:d6:ec:ad:7f:39:d4:
                    c7:cc:68:3e:6e:3b:98:a2:35:42:76:e3:19:10:1b:
                    ee:a7:33:c3:b6:2a:36:7e:df:11:74:9e:6e:63:92:
                    60:f3:d6:b0:13:93:87:0b:b8:16:99:90:6b:12:4d:
                    17:5b:6d:c1:4a:96:2e:de:7f:31:02:c2:32:99:af:
                    ed:fb:18:91:6c:22:cc:03:d2:09:85:b2:d3:cd:3e:
                    6e:1e:68:1e:f2:1e:d0:7c:2d:a2:b0:ba:b7:5d:91:
                    d9:16:e3:9f:e2:a4:b9:84:25:bc:8d:01:9b:5c:b9:
                    2c:5c:fe:b3:09:c3:21:d9:e0:c7:22:8c:c0:cf:13:
                    e6:8e:95:58:60:96:b7:a9:48:14:53:39:18:65:e8:
                    75:00:f1:05:b1:c8:5d:a8:e1:85:3c:17:be:dd:66:
                    e9:75:db:0b:27:a0:f8:b6:d7:7f:64:9e:82:db:14:
                    a5:bd:e9:bb:f0:da:65:d0:b1:02:31:26:22:d4:43:
                    e4:9c:93:f2:d6:d3:0c:d4:c1:9d:8d:f2:95:67:95:
                    82:c3:ed:1c:33:c2:43:eb:30:23:15:1c:71:e7:92:
                    9a:a8:53:07:2b:ae:47:9c:1d:a7:6f:53:ae:97:f7:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:3E:54:23:D9:A9:14:72:8B:97:0A:8E:74:D8:08:5B:B8:22:0E
            X509v3 Authority Key Identifier:
                keyid:07:53:FE:22:FF:ED:6B:00:B6:E6:E3:C5:AB:1C:3C:84:20:2A:63:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1P-Iv_tawC25uPFqxw8hCAqY3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276F9/C51F394A559E11E880047E48C4F9AE02/B1P-Iv_tawC25uPFqxw8hCAqY3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ce:ed:80:25:b6:34:09:a5:53:91:27:a6:68:9b:67:bd:7c:
         d3:36:a1:a0:6c:df:22:0c:d1:10:32:94:ae:3e:09:80:94:c6:
         92:56:b9:cb:c8:ab:3a:31:54:9b:23:1e:3a:a5:66:03:e2:34:
         dd:d0:e4:ae:0e:55:cb:ff:0a:a0:e1:88:42:a2:e5:c1:66:3b:
         ab:3d:41:ab:2c:ab:6d:b6:a1:ee:7d:65:e8:13:5c:97:69:a8:
         c2:c2:3d:92:14:a9:20:94:78:b8:96:98:ad:9f:03:69:00:bb:
         19:51:c8:52:97:26:94:18:a7:c7:f7:fc:a8:0b:a0:24:b7:09:
         b5:e7:44:68:76:1e:e2:1b:84:cc:fb:6d:86:dd:4f:3e:b8:80:
         22:96:25:07:4a:c1:75:55:38:83:6f:60:b3:6a:20:a7:65:5e:
         93:4a:94:ed:2f:39:d3:68:73:58:d1:88:dd:c7:b6:77:0a:3b:
         57:5e:d9:b6:99:30:16:c9:14:7e:41:0f:4b:19:12:bd:3f:c3:
         e9:95:b9:c3:95:50:04:0d:32:f0:bf:0d:42:57:03:25:a1:38:
         08:36:ec:e5:af:72:b8:f6:b2:df:56:0e:74:01:45:d7:f6:a9:
         5f:08:5e:94:68:52:99:3a:db:89:9a:84:b4:a0:af:a9:38:d1:
         4a:09:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org