Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File:                     BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier:          QOlQMeA+kVZhyfIdcuqmVY+cnXewXYPb+rvP6k8nfqc=
Subject key identifier:   ED:D0:4B:DF:C5:C2:D3:94:58:70:3E:FB:97:A9:A7:53:E3:31:D7:17
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer:       /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial:       3426
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number:          3426
Signing time:             Sun 24 Nov 2024 14:35:41 +0000
Manifest this update:     Sun 24 Nov 2024 14:35:40 +0000
Manifest next update:     Sun 01 Dec 2024 14:35:40 +0000
Files and hashes:         1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: ICNbkceIR8WHlMiluNtS0uVmXhiumCLk6e4yfAAZWhs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
                          rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
        Validity
            Not Before: Nov 24 14:35:40 2024 GMT
            Not After : Dec  1 14:35:40 2024 GMT
        Subject: CN=674339bd-71b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2e:a5:62:54:e7:a3:01:ef:a4:ea:71:ce:a4:
                    5b:9c:ca:a4:90:ee:73:a3:e1:5e:f1:e6:ac:8f:66:
                    74:00:39:88:7a:7f:58:b9:a2:8a:23:e1:e4:42:af:
                    a4:ac:64:60:50:94:4b:9a:c4:66:83:86:fe:d7:68:
                    70:79:a6:f9:85:a3:98:b0:10:fa:ca:47:bb:3d:c5:
                    03:4f:7e:01:4e:eb:c3:96:a2:b2:eb:00:b4:2c:8e:
                    17:d5:50:a9:02:31:53:30:56:05:26:a1:a4:d2:26:
                    e7:5d:ac:79:58:5e:e0:02:8e:d8:30:73:e9:72:34:
                    db:a5:7e:99:bd:9b:72:12:da:00:9b:43:78:02:1c:
                    ac:1d:d4:ca:ce:54:06:a6:1c:3d:d2:fe:8d:20:6d:
                    04:b4:4d:11:c8:69:9d:8b:19:13:0c:ad:d7:1e:95:
                    7e:fc:84:bd:d7:9b:2e:b2:70:51:37:7d:b5:3a:52:
                    ac:5a:c3:ad:f3:a2:41:4e:7c:a9:9f:19:fc:f4:6b:
                    1f:5b:16:6e:68:5b:88:6f:13:0e:c6:9b:8e:1b:76:
                    4e:eb:5a:7c:38:da:32:48:11:d4:3c:13:ff:4f:2f:
                    da:68:c0:48:5d:29:44:de:d6:06:7d:da:b7:82:65:
                    52:50:0e:80:4e:6c:1a:32:60:22:1b:03:75:54:67:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:4B:DF:C5:C2:D3:94:58:70:3E:FB:97:A9:A7:53:E3:31:D7:17
            X509v3 Authority Key Identifier:
                keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:8b:d8:10:a6:8f:2f:37:c0:72:25:bd:07:9f:52:65:3d:
         a7:65:98:62:c7:00:17:ce:1b:a8:15:de:37:b9:01:62:cb:0e:
         50:88:92:d1:2c:b7:a2:4b:cb:74:84:ae:76:18:9e:2c:3d:2b:
         09:bd:36:83:d3:98:40:17:bf:cd:33:50:fb:39:4a:48:1d:e1:
         f5:0c:f0:f1:18:1e:54:9e:18:f4:68:d3:84:92:aa:c4:e4:1f:
         b5:2e:16:cf:8f:c9:78:a0:d9:38:52:77:81:f8:6e:5e:62:98:
         18:88:3f:5f:e6:a4:98:8a:c5:15:6c:44:3e:ff:9f:93:20:03:
         58:cd:36:c1:a7:1a:c9:fa:91:4a:1d:4f:39:c7:2e:4a:4d:da:
         1d:ca:ee:a0:b0:93:d6:1b:3f:e6:0c:bb:b6:75:a4:c0:61:b7:
         07:b2:7e:f0:fd:29:06:ea:85:c8:12:01:ab:35:23:6e:f7:7d:
         b6:c2:a0:96:01:5e:ff:16:8a:b4:1c:70:94:88:b2:c2:bc:12:
         8b:2e:02:cc:ce:31:a5:3a:b9:3b:d7:0f:d3:86:d6:e4:3a:76:
         17:4a:a6:eb:53:69:dd:e1:de:f3:05:45:25:65:df:4b:9b:e9:
         cc:ee:7d:b1:3e:46:38:92:99:9c:48:27:0e:a1:6e:ac:48:65:
         86:0a:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:17 2024 by rpki-client on console-ams.rpki-client.org