Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          GN4WBklcj/Hl3NMTHZrhWoplHpM4YI7V/W3T5fjLZ38=
Subject key identifier:   68:C8:FB:A5:9B:77:ED:D1:4C:1A:01:16:22:6D:82:64:AF:CD:99:8C
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          05
Signing time:             Sat 23 Nov 2024 06:08:31 +0000
Manifest this update:     Sat 23 Nov 2024 06:08:30 +0000
Manifest next update:     Sat 30 Nov 2024 06:08:30 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: 6jkEaM2nWp036hi9hXSXm0R6WHUuA3f03VOcXY7QTU8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Nov 23 06:08:30 2024 GMT
            Not After : Nov 30 06:08:30 2024 GMT
        Subject: CN=6741715e-b674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:de:71:b7:65:8a:19:11:8f:15:ba:90:51:
                    e3:ca:5c:89:9b:4e:06:81:58:7d:64:70:47:ed:b0:
                    98:90:b3:dd:72:d3:35:34:f7:6a:1d:aa:0a:03:0c:
                    77:61:e9:f8:26:1a:24:77:ce:49:b1:4f:13:cd:6f:
                    8f:6d:55:8b:8a:54:56:16:c7:fc:eb:85:70:e8:b6:
                    ae:b4:46:ee:30:f7:21:e7:fd:6f:06:c2:88:c2:be:
                    da:90:bc:d9:be:91:2e:da:02:1d:4e:c4:0a:9d:8a:
                    2a:fc:46:c2:5a:dd:f4:2e:59:0b:c2:9e:e4:f9:e0:
                    2a:2d:d7:b3:d5:49:79:0f:90:2f:00:2a:29:47:8b:
                    bf:37:e3:e0:7a:78:da:89:21:27:bb:16:d5:10:73:
                    47:f0:bc:57:e3:d2:00:9c:01:49:3e:dc:67:52:b0:
                    20:2a:be:82:55:f0:e0:e1:a2:7d:32:1c:b4:b4:ca:
                    28:0b:89:cb:1b:04:43:ff:b7:50:fa:49:7c:75:ef:
                    1d:c0:2b:ea:3e:f3:01:d3:c4:53:18:b1:76:ba:fc:
                    97:b2:2c:58:b0:36:66:0c:7d:6c:c8:2e:ca:34:a0:
                    71:b0:c1:33:2e:c7:70:27:d5:a8:5e:3c:1f:f9:b0:
                    42:80:12:a9:a8:f4:c5:df:ec:c7:49:ce:10:d2:1b:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C8:FB:A5:9B:77:ED:D1:4C:1A:01:16:22:6D:82:64:AF:CD:99:8C
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:79:46:be:b5:ac:61:44:2b:9e:7a:bf:65:f4:56:af:86:
         2f:f6:23:26:6f:c4:5c:6f:46:10:ea:d5:8b:39:71:04:1b:3b:
         99:58:18:0e:e9:67:78:88:73:45:fa:8b:04:2d:1c:47:8e:be:
         88:df:5d:27:ff:c5:4b:d5:e2:63:f6:04:b7:4b:bc:bf:0e:c3:
         50:94:29:a2:e8:12:ef:2b:0c:b3:34:4c:ef:b1:fd:21:2e:1f:
         7f:af:99:e4:96:07:e9:7b:9f:e0:79:45:5e:b7:b3:8d:5f:2d:
         ce:d6:98:b2:33:3d:4b:40:d3:4c:ae:eb:23:c0:36:db:9c:d1:
         05:0a:f8:cc:bc:7c:e3:4d:9a:58:81:16:40:cb:1a:39:94:a9:
         ca:76:78:dd:a1:93:5e:9c:e1:46:68:ce:2c:77:b5:d3:dd:82:
         21:e6:d4:a4:6b:5b:08:30:c6:bb:e1:6a:0d:fb:87:ff:3e:05:
         2a:7c:81:ea:6a:39:eb:22:fa:c3:16:a7:52:e1:7f:12:08:69:
         5e:b9:3b:e3:b5:0a:22:1d:8b:41:dd:4d:0d:97:24:25:f8:ff:
         38:c4:7f:76:7f:7d:69:e5:1c:dc:68:3c:23:9b:f7:36:43:08:
         10:09:23:e2:3a:6a:6f:36:10:d8:e6:f3:b9:b0:e3:da:5c:80:
         76:19:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org