Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
File:                     swdOfJTfh5gMatv0V4ZRQGxcU6k.mft (raw, json)
Hash identifier:          Fei2bu4GhkkDwBoXGDwBT5FtJ0TFj8fDRAlB5Wu6EwI=
Subject key identifier:   06:8F:54:9C:51:D4:B1:3B:89:0A:3F:E8:19:F1:8C:B3:EB:6E:57:8F
Authority key identifier: B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9
Certificate issuer:       /CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
Certificate serial:       0CA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
Manifest number:          0CA3
Signing time:             Fri 22 Nov 2024 18:04:58 +0000
Manifest this update:     Fri 22 Nov 2024 18:04:58 +0000
Manifest next update:     Fri 29 Nov 2024 18:04:58 +0000
Files and hashes:         1: swdOfJTfh5gMatv0V4ZRQGxcU6k.crl (hash: nHCFINr/A1lcTg71rTaSbBUVak6XtLPDN2ywgNMhVi0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl
                          rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3236 (0xca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B16/serialNumber=B3074E7C94DF87980C6ADBF4578651406C5C53A9
        Validity
            Not Before: Nov 22 18:04:58 2024 GMT
            Not After : Nov 29 18:04:58 2024 GMT
        Subject: CN=6740c7ca-5ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:c4:b6:6a:0a:c8:81:61:83:1c:72:a2:5d:
                    e0:5a:20:3f:0f:67:21:7e:51:bc:9f:54:ce:c6:e2:
                    23:71:fe:2a:9e:2d:fe:79:0b:c7:24:65:23:45:4f:
                    b0:fc:50:8d:ae:55:b5:c5:6b:31:5f:0f:19:6e:25:
                    be:43:2b:b4:c0:76:12:2a:b0:72:57:c8:5d:b6:e9:
                    70:ff:59:b1:e1:b4:93:ac:41:17:26:e2:1b:27:8b:
                    51:74:0b:8f:1f:da:67:09:9e:d9:d1:84:85:e6:f5:
                    b8:ba:47:1b:b1:94:d7:be:d4:f1:da:11:a8:2a:36:
                    d1:00:ac:c6:6c:77:2b:52:eb:22:11:20:18:50:e3:
                    a4:cf:ab:fc:69:b1:b3:02:a1:96:8e:8f:72:36:7d:
                    de:11:80:70:da:8f:2b:8b:b4:4c:8c:4f:26:f6:ed:
                    79:3b:db:e5:c0:3e:06:53:a7:dc:3d:ec:fa:0f:c9:
                    be:cc:5d:33:36:6f:c6:bd:39:d6:b0:33:4f:ac:f2:
                    71:87:35:09:e6:f2:44:6d:f9:7d:ad:c8:df:a4:d5:
                    3c:c2:03:29:ec:af:7d:26:db:18:a3:c9:54:1c:19:
                    ea:1a:59:11:61:38:a6:84:a5:1c:30:71:cb:cb:7d:
                    b0:59:4e:b9:82:7c:dd:e2:ce:85:9b:b3:4f:35:59:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:54:9C:51:D4:B1:3B:89:0A:3F:E8:19:F1:8C:B3:EB:6E:57:8F
            X509v3 Authority Key Identifier:
                keyid:B3:07:4E:7C:94:DF:87:98:0C:6A:DB:F4:57:86:51:40:6C:5C:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/swdOfJTfh5gMatv0V4ZRQGxcU6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B16/4CC065E2DDE611E984F56578C4F9AE02/swdOfJTfh5gMatv0V4ZRQGxcU6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:6c:66:70:e6:8d:35:b9:30:8d:94:d9:75:8f:ce:d2:49:
         af:b7:e7:fb:66:f0:d5:fa:42:74:1c:9c:cd:3b:a7:52:0e:4a:
         48:c3:d3:06:11:48:8e:1f:63:7b:ef:40:7c:ff:8a:46:d5:89:
         24:1c:6d:51:10:e5:9b:75:57:cb:31:ea:97:42:15:ad:71:ca:
         70:60:2c:14:43:f2:cb:fe:29:31:a4:36:7a:cd:1a:6c:c0:a6:
         e1:1a:7a:44:a7:de:48:8a:81:a3:87:e7:89:76:91:38:3a:b1:
         ec:6d:3b:59:58:7c:07:db:35:f0:74:da:b4:39:e0:78:41:0f:
         14:49:dd:8c:b5:03:b8:c5:3a:0e:81:a7:80:58:de:e0:b3:51:
         aa:a6:cb:10:26:c5:da:c8:53:3a:fa:4f:ff:f6:5d:5b:1d:16:
         04:4d:41:1c:3e:30:28:8b:6f:59:8e:5c:b8:c2:a6:cd:18:14:
         77:3e:30:0c:e0:7a:24:97:eb:47:cc:e8:cf:0c:e3:25:d2:e1:
         5f:0b:fb:a0:e7:89:ec:c6:53:df:00:51:2f:b3:9d:e6:59:37:
         4d:bf:f5:0c:87:eb:fc:6c:58:65:66:74:3e:30:82:4b:32:e3:
         9d:65:7d:0d:ed:ac:84:83:65:fd:94:47:95:62:f2:fe:ed:93:
         35:b4:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org