Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File:                     x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier:          C1OccQa09HAWfaQ+Gbxi0JnhIAOpY2lnBTGDhUSALW8=
Subject key identifier:   20:3D:7C:A0:A4:12:E9:F5:1C:AE:12:20:89:0F:F2:88:BD:9B:A1:93
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer:       /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number:          0109
Signing time:             Sat 23 Nov 2024 03:08:50 +0000
Manifest this update:     Sat 23 Nov 2024 03:08:50 +0000
Manifest next update:     Sat 30 Nov 2024 03:08:50 +0000
Files and hashes:         1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: F2MBMQxM6vM3Q9lYkJEWNfZ/WM8rWXjSngvZjB3jkZI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
                          rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
        Validity
            Not Before: Nov 23 03:08:50 2024 GMT
            Not After : Nov 30 03:08:50 2024 GMT
        Subject: CN=67414742-454b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:27:b4:e8:c2:0e:74:2e:e9:d2:b9:94:63:
                    8f:4a:c6:f5:fa:80:7a:e7:75:55:77:1d:d2:4f:2a:
                    2d:c2:86:50:00:49:e1:a0:77:2b:f3:5d:a7:36:84:
                    72:f3:69:00:af:c4:b4:84:77:eb:39:d4:e1:d2:f9:
                    b1:7a:1e:d5:29:ed:1c:56:fb:f0:d2:3c:4a:95:2e:
                    d1:9e:6a:4a:ac:27:bf:49:ad:1f:df:17:d0:05:3d:
                    94:90:7b:95:fd:e4:6b:72:00:dc:e4:c5:c9:8a:fd:
                    64:db:47:5a:87:bd:c0:1b:8d:2b:e1:51:48:bb:d8:
                    66:f3:67:8e:26:9b:22:4d:2c:23:a3:57:b1:84:3f:
                    37:02:04:58:7a:6b:38:80:f9:38:e6:bd:ba:11:d4:
                    95:d8:fc:a9:e7:38:54:ba:ec:da:eb:f3:c3:1b:a5:
                    36:9e:56:90:16:ef:99:60:17:b7:2f:63:85:a1:ed:
                    91:44:32:95:5b:90:ec:93:31:41:d2:ab:4d:9f:c6:
                    2a:a6:e8:56:ef:b2:96:2d:f6:25:23:b8:cc:b6:25:
                    0d:7c:97:a5:06:1e:f9:3d:27:0b:cf:f6:25:a4:7b:
                    c8:d8:e0:b5:93:64:f8:6a:33:05:2a:ab:54:83:f4:
                    70:03:18:12:62:3a:68:11:2b:a8:e7:70:38:43:2d:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:7C:A0:A4:12:E9:F5:1C:AE:12:20:89:0F:F2:88:BD:9B:A1:93
            X509v3 Authority Key Identifier:
                keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:90:d4:cb:8d:83:99:6a:f8:15:2b:68:b8:c8:d1:fc:fe:
         d2:95:b5:08:19:9a:46:be:76:77:b8:9d:0e:2e:df:5b:81:b5:
         e4:af:ae:0a:89:6b:9e:bf:4b:47:c4:6a:4a:77:a2:69:ef:46:
         99:97:f8:63:ba:3a:c1:75:b1:57:92:fe:b6:3c:1f:40:b5:5b:
         b1:33:37:45:47:88:8b:18:29:05:8f:82:c4:91:23:70:8c:4b:
         f1:f1:71:91:12:2a:77:91:72:33:74:82:34:b3:bf:51:f7:38:
         96:26:c4:a0:9a:2b:32:f9:2d:2c:76:51:ca:8b:78:ee:7a:84:
         43:44:35:67:ad:55:a2:6c:22:ce:92:d0:13:b9:ef:c5:81:7a:
         be:f2:ad:20:f4:6d:d1:6f:2a:c4:60:4c:09:0f:6e:82:84:7e:
         f4:50:41:19:ef:5f:fd:3b:ba:0c:32:ab:06:ab:b6:9c:2f:28:
         e3:dc:35:19:f3:08:25:63:af:52:cc:d0:69:5f:0b:41:22:4b:
         a1:70:05:06:c9:64:bd:56:54:3b:f3:c0:71:4d:a2:85:0a:86:
         bd:b8:86:ea:17:e5:52:8d:f9:9c:f9:e2:ad:1d:4f:c9:35:a1:
         30:a4:e8:e6:a7:ab:52:79:65:a0:05:05:95:c6:af:98:7d:75:
         c3:54:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org