Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
File:                     6c1KiX_FldVl32QzGdg49i4pNh4.mft (raw, json)
Hash identifier:          mwJbCVj/9fQoyUTrrWO2HrFcvQBStoeP7dFJcNvrmcI=
Subject key identifier:   A8:FC:54:CA:4C:14:19:C5:EF:57:1E:7D:DF:DE:FC:D7:0F:49:E4:83
Authority key identifier: E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E
Certificate issuer:       /CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
Certificate serial:       0543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
Manifest number:          0540
Signing time:             Fri 22 Nov 2024 23:02:40 +0000
Manifest this update:     Fri 22 Nov 2024 23:02:39 +0000
Manifest next update:     Fri 29 Nov 2024 23:02:39 +0000
Files and hashes:         1: 6c1KiX_FldVl32QzGdg49i4pNh4.crl (hash: zVPN0sYrvdUcpCQi+cR6f6fa8DXU7V3kUzVJNZw1VPg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl
                          rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91575E2/serialNumber=E9CD4A897FC595D565DF643319D838F62E29361E
        Validity
            Not Before: Nov 22 23:02:39 2024 GMT
            Not After : Nov 29 23:02:39 2024 GMT
        Subject: CN=67410d8f-02b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:64:c0:91:41:a2:7b:15:3a:58:9c:68:19:
                    90:4d:71:67:fe:5e:db:f8:af:7e:8c:d3:05:52:90:
                    c1:bc:46:6b:03:7c:1a:4c:3f:bf:dc:20:b6:86:5b:
                    bf:b5:4b:2e:b9:d2:cd:04:95:de:aa:ee:7a:aa:8a:
                    13:ae:e8:4d:9d:50:96:96:12:72:8b:54:30:b3:e3:
                    33:90:29:03:2f:42:94:06:86:6f:99:73:80:c1:0a:
                    98:8a:8c:55:78:a7:ea:14:32:67:58:c9:9f:b5:57:
                    62:03:42:cf:4d:b1:3f:4b:58:32:08:f7:36:44:36:
                    b5:1f:fe:f9:9b:a5:c5:e3:c9:52:f4:90:4c:0f:5f:
                    a3:da:2e:5d:b1:a8:d5:6d:5b:69:2f:8d:98:7c:04:
                    9a:5c:97:77:27:57:3e:d2:ec:cf:de:66:8e:80:6e:
                    e5:43:62:ed:db:71:cd:26:04:5d:71:0d:e5:56:de:
                    bc:2a:70:77:d9:3e:8f:4c:4f:49:d4:81:c1:5f:89:
                    f0:60:31:16:17:e0:9e:f2:02:50:5a:69:27:fb:19:
                    54:30:e1:50:54:5c:93:3d:63:1a:5d:d6:05:21:61:
                    7f:96:b3:db:7e:fe:2f:8b:71:29:22:f8:1e:fc:6b:
                    41:53:11:a5:d9:a0:00:e7:74:93:04:1d:23:27:3c:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:54:CA:4C:14:19:C5:EF:57:1E:7D:DF:DE:FC:D7:0F:49:E4:83
            X509v3 Authority Key Identifier:
                keyid:E9:CD:4A:89:7F:C5:95:D5:65:DF:64:33:19:D8:38:F6:2E:29:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6c1KiX_FldVl32QzGdg49i4pNh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91575E2/B0B8C616CED511EBB695941BC4F9AE02/6c1KiX_FldVl32QzGdg49i4pNh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:89:29:9d:65:d9:bc:8f:fb:9d:a4:98:52:1b:9a:9e:1e:09:
         3c:80:14:f9:b6:68:bb:b9:1f:65:2e:90:69:51:41:12:dd:88:
         26:9c:b9:86:d0:1e:91:18:32:25:ce:55:39:b6:59:1d:ae:22:
         a5:16:57:9b:e1:fc:d9:25:cb:e3:df:b8:b4:b8:24:5e:32:fd:
         78:17:af:47:72:ae:d9:a7:ea:8d:21:a3:0e:90:19:90:ca:93:
         a3:46:be:04:0a:2d:f7:dc:9c:38:33:b4:bf:d8:8f:c7:8a:ab:
         52:b8:f5:e8:f4:03:96:e1:f8:36:db:89:6e:35:c8:82:2c:96:
         da:97:02:98:06:d9:3d:c2:ba:9d:a0:9e:9d:77:b5:98:08:e7:
         84:06:ff:68:79:72:c4:b9:cb:02:97:d5:df:20:68:c9:ff:d1:
         bf:24:f4:b0:77:e1:e1:f5:23:be:39:89:44:35:d0:3c:dc:42:
         1a:a0:06:bb:e6:28:44:2d:aa:57:aa:e4:ae:17:9b:a8:10:27:
         d4:f7:71:b6:4a:5d:8c:c2:f5:13:ed:df:e3:d3:3d:d5:fd:c6:
         a2:dd:ad:b2:f1:7a:e4:5a:8c:47:e7:61:07:85:7c:02:52:b1:
         98:16:d1:87:b4:80:7c:2d:4b:59:12:c2:df:f3:3d:37:5d:e3:
         94:b4:1b:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc1RTIxMTAvBgNVBAUTKEU5Q0Q0QTg5N0ZDNTk1RDU2NURGNjQzMzE5RDgzOEY2
MkUyOTM2MUUwHhcNMjQxMTIyMjMwMjM5WhcNMjQxMTI5MjMwMjM5WjAYMRYwFAYD
VQQDEw02NzQxMGQ4Zi0wMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt21kwJFBonsVOlicaBmQTXFn/l7b+K9+jNMFUpDBvEZrA3waTD+/3CC2hlu/
tUsuudLNBJXequ56qooTruhNnVCWlhJyi1Qws+MzkCkDL0KUBoZvmXOAwQqYioxV
eKfqFDJnWMmftVdiA0LPTbE/S1gyCPc2RDa1H/75m6XF48lS9JBMD1+j2i5dsajV
bVtpL42YfASaXJd3J1c+0uzP3maOgG7lQ2Lt23HNJgRdcQ3lVt68KnB32T6PTE9J
1IHBX4nwYDEWF+Ce8gJQWmkn+xlUMOFQVFyTPWMaXdYFIWF/lrPbfv4vi3EpIvge
/GtBUxGl2aAA53STBB0jJzxmGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj8VMpM
FBnF71cefd/e/NcPSeSDMB8GA1UdIwQYMBaAFOnNSol/xZXVZd9kMxnYOPYuKTYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzVFMi9CMEI4QzYxNkNF
RDUxMUVCQjY5NTk0MUJDNEY5QUUwMi82YzFLaVhfRmxkVmwzMlF6R2RnNDlpNHBO
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZjMUtpWF9GbGRWbDMyUXpHZGc0OWk0cE5oNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzVFMi9CMEI4QzYxNkNFRDUxMUVCQjY5NTk0MUJDNEY5QUUwMi82YzFLaVhfRmxk
VmwzMlF6R2RnNDlpNHBOaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0iSmdZdm8j/udpJhSG5qeHgk8gBT5tmi7uR9lLpBpUUES3YgmnLmG
0B6RGDIlzlU5tlkdriKlFleb4fzZJcvj37i0uCReMv14F69Hcq7Zp+qNIaMOkBmQ
ypOjRr4ECi333Jw4M7S/2I/HiqtSuPXo9AOW4fg224luNciCLJbalwKYBtk9wrqd
oJ6dd7WYCOeEBv9oeXLEucsCl9XfIGjJ/9G/JPSwd+Hh9SO+OYlENdA83EIaoAa7
5ihELapXquSuF5uoECfU93G2Sl2MwvUT7d/j0z3V/cai3a2y8XrkWoxH52EHhXwC
UrGYFtGHtIB8LUtZEsLf8z03XeOUtBvo
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org