Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
File:                     SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json)
Hash identifier:          +cJE9Pa3Q1oSWiyHM6w9omkq8SXQS2d1mnYtGDJX9xI=
Subject key identifier:   E1:54:D6:BF:18:E1:11:B3:D3:18:7C:5E:72:11:0C:E3:1E:19:8B:04
Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Certificate issuer:       /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
Certificate serial:       32C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
Manifest number:          32C8
Signing time:             Sun 24 Nov 2024 15:19:34 +0000
Manifest this update:     Sun 24 Nov 2024 15:19:33 +0000
Manifest next update:     Sun 01 Dec 2024 15:19:33 +0000
Files and hashes:         1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: YcdEnl2r+jB4el8X9FGywN1k0HeYG21dP6xI0D3E2pc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl
                          rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13000 (0x32c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D
        Validity
            Not Before: Nov 24 15:19:33 2024 GMT
            Not After : Dec  1 15:19:33 2024 GMT
        Subject: CN=67434406-a58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:1c:db:e1:39:02:60:bd:7f:22:3a:61:3c:
                    df:54:44:c9:83:31:36:39:6f:47:02:ff:44:a3:6d:
                    25:17:74:99:e1:d4:fb:28:8c:d8:53:74:f9:f3:fe:
                    16:4e:01:05:bd:85:82:52:c5:d4:7c:f1:90:3b:b7:
                    ee:eb:6e:62:27:f0:5d:30:3e:3d:99:1e:5b:42:22:
                    8d:9d:69:21:5f:74:c0:b6:86:31:bb:10:f6:fb:8b:
                    e5:06:69:6d:35:6c:e9:4b:da:50:83:84:9a:aa:9e:
                    e9:9c:0e:62:62:a6:85:27:db:93:70:d3:2e:a2:33:
                    07:f9:97:f9:16:6a:a9:ff:b8:fc:e5:e1:2e:ad:d0:
                    01:11:ba:7c:6a:bc:b9:10:3a:56:82:40:e4:6b:13:
                    dc:43:81:99:30:59:da:15:e2:b4:37:02:f9:4c:bb:
                    58:b7:18:d3:d6:39:e6:c5:32:6c:ff:cb:47:02:5d:
                    ac:d9:db:ff:98:a8:98:4e:0d:e0:f0:35:4e:d5:6c:
                    ed:ce:37:ea:d0:20:00:f6:84:81:18:4a:39:53:54:
                    cc:ff:31:12:31:8e:df:87:45:1c:15:a9:1d:75:28:
                    8d:a3:49:00:88:c4:01:ef:d0:df:ca:9f:c9:0c:85:
                    b8:44:01:86:e7:ed:dd:b1:86:f0:75:9c:c2:1a:a9:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:D6:BF:18:E1:11:B3:D3:18:7C:5E:72:11:0C:E3:1E:19:8B:04
            X509v3 Authority Key Identifier:
                keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:ce:5e:5f:ad:be:56:7e:81:b9:94:f2:cd:46:d2:e1:71:
         30:88:2f:b8:c7:d8:2d:ac:bd:ca:e4:2a:bb:07:9c:b5:1a:b6:
         56:33:46:36:05:b3:42:55:71:08:e6:93:93:53:6c:00:5c:42:
         a0:be:79:40:88:62:24:6f:3a:03:36:1c:58:35:99:85:bd:8a:
         4c:1c:b1:fa:b4:43:f3:7d:22:d5:73:9c:3a:4b:41:4e:24:47:
         97:53:b5:57:cd:81:6a:d3:8d:b9:b3:96:5e:6f:8a:8c:5b:6f:
         31:52:80:8d:43:c2:45:f1:86:b4:e8:a9:73:40:ce:fb:c4:8d:
         f5:af:59:bb:9b:eb:67:e5:20:bd:d9:50:5f:7f:4c:93:df:7b:
         04:71:03:71:99:f2:48:11:52:e1:10:ac:13:90:c6:73:3e:5e:
         3e:9a:d5:2c:36:ad:61:88:69:4a:ce:1a:10:94:2d:ee:5c:37:
         c0:c7:92:4e:e7:56:41:35:54:f7:39:86:90:4d:39:f9:4c:e1:
         a7:38:bc:f7:fe:52:9c:69:5a:04:f4:10:56:34:61:cd:70:1f:
         6a:38:07:56:f6:3c:4c:45:f0:f5:b8:5e:78:b9:8a:0c:16:c7:
         d6:05:28:0e:bd:5a:9d:46:80:37:f9:88:76:a8:c2:ca:e5:40:
         bc:fc:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org