Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File:                     BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier:          4UwAa6PQpgZtLbfcwe+nbGaCtTFRdT2qBqk9jZ1QxYI=
Subject key identifier:   41:1F:C6:B0:7C:98:0A:27:D5:5E:BF:6B:83:DF:49:FC:CD:F8:E7:06
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer:       /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number:          F6
Signing time:             Sat 23 Nov 2024 03:23:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:23:38 +0000
Manifest next update:     Sat 30 Nov 2024 03:23:38 +0000
Files and hashes:         1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: Mu6pvJyZyy0t3weVH3wttTnukFJMU7FmH6gejrFs9Ds=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
                          rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
        Validity
            Not Before: Nov 23 03:23:38 2024 GMT
            Not After : Nov 30 03:23:38 2024 GMT
        Subject: CN=67414abb-559f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:af:5e:9f:d5:44:7c:8c:4a:f2:9c:e3:70:
                    98:39:c6:e9:6f:51:71:c4:9b:68:ca:d4:ef:1e:c1:
                    e6:d6:73:58:7f:b7:2d:85:48:72:cb:49:0e:81:0e:
                    37:21:b9:59:19:38:99:f8:68:22:b9:47:9b:f5:24:
                    ac:05:56:68:92:9c:d7:e7:4f:84:e5:96:5f:0b:a8:
                    e7:ef:5a:b1:26:8b:b5:9d:62:f5:a9:ee:a1:32:19:
                    26:5e:60:72:3e:c9:80:06:b6:e2:cd:7c:93:4d:2b:
                    b7:f4:76:b6:fd:41:e9:9f:2a:d4:ec:d0:31:59:aa:
                    ca:5e:de:d7:7b:d9:25:92:90:62:c2:35:f2:29:f6:
                    f8:f2:ee:dd:08:b2:05:99:72:b2:39:80:0f:2a:39:
                    40:3e:7e:27:64:fb:ca:cd:5e:56:ec:bb:6c:b9:5c:
                    75:f6:a6:5b:42:4d:cd:fe:81:0a:23:fc:d9:aa:ae:
                    2d:21:6a:fa:f2:c7:dd:f6:f7:e0:f3:1e:6d:34:08:
                    a7:44:02:18:a8:3b:60:12:91:2d:8d:cf:a9:18:41:
                    4b:69:d3:be:54:c0:86:43:7a:e7:e6:d0:57:3c:81:
                    65:d1:a0:c8:8e:0b:6a:4f:e4:39:1c:cd:e4:93:40:
                    b5:21:99:16:f4:2e:ad:7d:c0:a3:4d:36:9b:37:d9:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:C6:B0:7C:98:0A:27:D5:5E:BF:6B:83:DF:49:FC:CD:F8:E7:06
            X509v3 Authority Key Identifier:
                keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:38:84:21:a2:f2:d1:bb:65:a3:b4:5a:c9:e3:73:0b:d2:04:
         53:64:0c:1a:40:b1:0f:5f:9d:52:6a:a7:fc:ff:79:2a:a0:ac:
         8b:6a:78:b8:5a:d5:9b:6a:12:5a:d9:f4:7c:a4:df:da:0a:5e:
         e9:dc:84:4d:14:a4:0b:09:cf:1d:6d:58:11:ae:d0:e7:20:fd:
         24:2a:44:59:24:1f:14:b7:7b:2a:61:2b:70:08:77:f6:e9:ba:
         3f:48:20:d9:ba:2c:89:ca:55:38:7c:84:fa:2e:e8:76:54:18:
         33:26:90:41:b3:aa:c8:05:09:c2:43:04:07:8f:f9:3e:44:7d:
         50:b2:f2:98:4a:02:4d:8e:12:ec:a9:00:34:d2:ff:1f:3b:ee:
         04:ab:b2:d3:eb:28:fd:aa:27:4e:65:a1:f8:df:8d:3e:77:6d:
         90:42:3e:58:60:68:93:51:54:96:4d:57:e9:68:72:c7:5c:9b:
         be:49:83:04:0c:3d:40:2e:4d:af:ff:88:d1:23:4f:2b:c4:ce:
         b2:2b:6b:af:49:78:2a:75:52:5f:bb:38:ba:e2:ae:3f:4e:f1:
         46:c7:2e:d7:27:10:f4:61:6e:76:e2:2b:34:ab:a6:62:e8:ad:
         fb:65:54:da:68:cb:48:c3:35:3b:6e:b9:07:69:bd:0e:35:c8:
         85:a6:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org