Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
File:                     eFGQATcElYfBJg7e1Re30ooYjrM.mft (raw, json)
Hash identifier:          aovu1+vwQw9aJQgnNpTZoEUirqpdd+hgzmVdX/kMkJ0=
Subject key identifier:   7C:01:D1:5E:09:D0:77:27:A0:79:E3:67:2D:3F:93:D2:21:69:04:44
Authority key identifier: 78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3
Certificate issuer:       /CN=A9130D7B/serialNumber=7851900137049587C1260EDED517B7D28A188EB3
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
Manifest number:          054B
Signing time:             Fri 22 Nov 2024 22:59:53 +0000
Manifest this update:     Fri 22 Nov 2024 22:59:53 +0000
Manifest next update:     Fri 29 Nov 2024 22:59:53 +0000
Files and hashes:         1: eFGQATcElYfBJg7e1Re30ooYjrM.crl (hash: wCvFYl6hX7AQ9/hGEE2IcrXXEam1atdjp71DkyFLi20=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl
                          rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130D7B/serialNumber=7851900137049587C1260EDED517B7D28A188EB3
        Validity
            Not Before: Nov 22 22:59:53 2024 GMT
            Not After : Nov 29 22:59:53 2024 GMT
        Subject: CN=67410ce9-9667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:88:ec:3d:20:61:8c:47:4e:f4:3b:3b:26:
                    c0:96:c6:8b:6b:5a:ce:05:73:57:57:a0:fc:f7:ad:
                    06:72:86:6f:1f:62:c2:22:7d:60:2c:d6:3e:ef:93:
                    70:4a:58:21:fd:6b:52:6b:2b:65:59:54:4b:cf:51:
                    b8:67:9f:70:8b:9b:33:37:28:08:a0:6c:a7:fd:8b:
                    fc:fe:37:0e:d3:7a:37:d7:56:d9:b2:44:65:74:74:
                    5e:10:ac:1a:3e:8f:a5:ed:fc:0a:8c:85:80:2f:24:
                    d1:f5:e4:2f:a4:88:fd:e9:40:9f:c5:02:ed:b1:19:
                    29:b7:a6:ed:45:0e:b2:0a:c2:e5:57:f8:7a:3c:25:
                    59:46:91:f3:71:fe:03:6c:7b:e8:0b:4c:55:43:e9:
                    51:04:65:e2:ac:81:1b:7e:27:af:d6:1f:6c:b3:5d:
                    e1:42:04:ea:0f:1a:af:f1:bc:75:47:14:66:cd:4b:
                    51:71:e5:4a:5b:da:45:2e:07:70:35:98:72:82:0d:
                    7e:f4:54:d4:3b:0c:87:ee:c3:51:ba:e6:60:b9:bb:
                    b6:26:b8:20:5b:32:d2:75:ca:56:03:94:1a:9a:e5:
                    ae:7d:90:71:f9:fb:bb:19:1b:e9:8b:96:7a:b7:e1:
                    5a:52:f5:e8:8f:db:d4:28:a7:4e:c7:fa:e3:8d:84:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:D1:5E:09:D0:77:27:A0:79:E3:67:2D:3F:93:D2:21:69:04:44
            X509v3 Authority Key Identifier:
                keyid:78:51:90:01:37:04:95:87:C1:26:0E:DE:D5:17:B7:D2:8A:18:8E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFGQATcElYfBJg7e1Re30ooYjrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130D7B/7F142E88CA1711EBAFBEB757C4F9AE02/eFGQATcElYfBJg7e1Re30ooYjrM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:81:25:22:01:36:7b:d4:59:2d:ce:17:0b:25:dc:de:94:22:
         a4:56:1c:d6:5e:81:ca:40:13:2b:08:8e:ad:e9:58:98:30:9b:
         17:59:d1:5e:f0:40:38:8d:c5:c4:81:aa:59:f6:9e:84:4b:e3:
         87:a0:78:c2:9e:b3:54:09:d3:5c:63:4b:80:fb:92:8f:01:42:
         1b:5d:31:87:10:96:57:d3:15:42:9c:e6:5a:6b:63:e5:02:e4:
         b2:4d:2c:63:f9:52:f3:08:c4:e7:42:bd:3d:a9:87:99:73:94:
         26:eb:02:ee:21:5f:b3:87:7f:68:7f:d0:73:60:5e:db:76:fe:
         f3:2d:7a:f9:8f:40:08:8c:41:15:86:f6:d4:17:dc:16:24:6c:
         cc:19:29:f8:6d:f4:38:a4:4f:38:c2:d3:38:32:59:ac:cf:9d:
         d7:ec:6f:bb:46:bb:1b:1d:c8:fc:c9:b5:ee:d6:50:d1:7b:e6:
         69:42:41:e3:f4:16:ab:f2:e5:03:fe:cd:08:55:f6:f0:51:fa:
         b6:05:1e:d2:fe:17:4d:2b:b5:f7:27:42:25:04:ad:84:81:89:
         0d:81:75:9c:96:0e:b3:e3:08:ee:78:fd:63:79:7a:86:ee:64:
         f6:6f:18:5b:73:5d:aa:49:46:0c:79:8f:2c:c4:43:d4:95:b3:
         3a:1a:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org