Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
File:                     nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json)
Hash identifier:          BG0Bhg2mA+bm1X1kT6CmXKht00/ynwLXr/XEc32A6ew=
Subject key identifier:   0E:36:9F:FB:24:C5:21:52:B4:EA:3E:51:C2:24:10:E4:38:D8:6F:59
Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95
Certificate issuer:       /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
Manifest number:          5F
Signing time:             Sat 23 Nov 2024 05:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:44 +0000
Manifest next update:     Sat 30 Nov 2024 05:00:44 +0000
Files and hashes:         1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: 8jzTiRXD66b0rz2GKQacUdahHc+36e9km0/4h2jvPBY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl
                          rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
        Validity
            Not Before: Nov 23 05:00:44 2024 GMT
            Not After : Nov 30 05:00:44 2024 GMT
        Subject: CN=6741617d-4c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:3f:92:c6:24:8f:f1:02:8f:30:d4:a3:46:
                    99:e2:e4:8e:6a:cf:62:8f:3f:d7:ac:1e:fd:3d:be:
                    a5:a1:eb:87:2c:6e:ea:1a:d9:37:84:72:24:e4:ae:
                    96:a2:22:f9:90:ec:60:18:4b:67:96:7b:6f:b2:29:
                    46:b3:7c:05:9d:97:4b:76:e6:f8:e2:9d:b2:cc:8b:
                    76:73:e5:c4:b5:fb:12:08:8c:3c:88:ff:34:71:c6:
                    fd:47:d0:26:13:5e:f3:4f:67:cc:2e:54:7a:40:f2:
                    e4:60:de:9d:5c:47:8b:f7:05:ee:ba:7e:82:05:11:
                    cd:81:f4:9b:9f:d9:04:6e:bb:b3:28:84:ff:a4:97:
                    4d:28:37:bb:3a:1f:61:f1:71:59:87:51:7a:3a:de:
                    a9:05:68:50:68:e0:45:0e:55:1a:cc:aa:0a:0b:74:
                    b0:24:ab:e6:8b:6a:70:6e:2f:bd:0d:f5:e7:d9:bd:
                    d8:7e:10:8d:49:f2:04:f8:c7:66:20:8b:73:60:40:
                    c7:76:fe:17:86:4b:3c:1e:60:fa:7d:79:60:be:06:
                    95:85:90:97:e3:34:65:9e:af:71:df:b5:96:a2:4f:
                    aa:be:1d:44:4e:8c:05:d2:95:fe:49:58:ae:6d:2f:
                    2d:eb:94:9f:5b:21:09:2a:43:9b:78:b3:b3:ad:bd:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:36:9F:FB:24:C5:21:52:B4:EA:3E:51:C2:24:10:E4:38:D8:6F:59
            X509v3 Authority Key Identifier:
                keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:88:4e:f8:9e:f1:ca:39:a4:e2:e3:33:c3:5b:12:89:41:
         ef:10:55:1d:42:25:36:6b:3a:48:af:b0:64:f9:40:62:b2:76:
         f3:1c:40:6f:00:ea:7c:8a:af:9d:2d:10:7a:f2:e4:66:d2:10:
         57:c0:5b:6f:a0:ee:60:42:62:6b:50:bf:d2:06:23:d6:53:f1:
         ce:c7:57:9c:05:ab:87:73:17:7e:67:2b:57:07:91:f0:e0:02:
         00:36:b2:b3:76:5b:2b:d8:aa:f1:6e:9b:9d:7d:ad:8c:6e:75:
         c7:ae:c2:1d:7b:80:d3:41:0d:46:d9:fb:e6:36:db:cb:fd:28:
         a6:2f:26:49:a1:8d:b3:70:df:79:9c:c5:55:90:60:56:4a:7f:
         c1:c0:a4:5e:b9:0c:c1:c0:52:57:68:b7:1f:3b:ba:0d:4d:da:
         89:c6:18:8b:8a:4b:0a:47:0f:b8:2c:1d:0f:d3:f4:08:7b:d1:
         41:b9:e3:27:10:c2:98:ac:09:20:b4:55:f3:f7:9e:d2:2d:80:
         c9:cb:3a:02:73:23:a9:57:89:3a:39:d1:99:a2:e1:23:03:36:
         68:39:85:7d:63:da:3d:4b:be:7f:f9:06:51:db:9c:d5:dd:58:
         4b:63:af:20:85:b7:68:70:84:ef:10:37:8a:9e:d0:d0:f1:e5:
         df:04:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org