Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File:                     aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier:          ujKh4uTN7AiEKqCPYeOH5QnYlptBINTXIYQgK+eVUuE=
Subject key identifier:   BB:C8:9F:C7:CC:5C:78:A0:99:B8:7D:51:12:A2:1A:91:27:B7:F8:B5
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       341C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number:          341B
Signing time:             Sun 24 Nov 2024 15:06:20 +0000
Manifest this update:     Sun 24 Nov 2024 15:06:19 +0000
Manifest next update:     Sun 01 Dec 2024 15:06:19 +0000
Files and hashes:         1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: s+0DZ7VP6b5lEzXTDaYoGogmR9uVqmscam1bHhlyMbs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13340 (0x341c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: Nov 24 15:06:19 2024 GMT
            Not After : Dec  1 15:06:19 2024 GMT
        Subject: CN=674340ec-880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:39:fe:b1:ee:5b:86:c9:4d:66:a1:08:8e:
                    9b:96:97:35:c9:b5:72:32:99:a6:58:40:4e:32:77:
                    da:66:b9:82:7a:f3:4a:99:2c:4f:be:62:bf:69:db:
                    8f:f8:e4:7a:92:31:63:04:85:18:2d:af:e3:b2:15:
                    6f:10:0d:02:08:bf:79:cc:74:fc:66:ae:a9:81:72:
                    46:0a:fd:10:4b:3c:ff:a1:91:99:dc:81:aa:3e:98:
                    d5:15:8d:55:7d:54:32:3c:b8:81:71:0e:34:14:70:
                    c1:bb:3c:3d:7e:78:0c:46:23:31:c7:e2:62:21:01:
                    60:b9:fd:bc:c8:cf:bb:30:4a:f9:21:b7:ff:d6:b3:
                    da:63:54:21:61:12:ba:89:cb:90:95:5e:fe:b9:81:
                    f1:ab:db:03:dd:47:92:ab:c3:90:38:a7:ef:7d:12:
                    ba:63:1d:0d:ba:2f:49:05:7a:1c:2e:15:9f:60:4c:
                    98:6b:4a:3c:d0:39:2e:e5:5f:89:18:6b:06:52:0e:
                    dc:52:6d:16:67:d5:6f:0e:9a:fb:2a:c0:9e:43:11:
                    39:e1:a3:ad:82:01:20:6b:b0:d9:92:92:e5:c9:ec:
                    b0:88:81:73:d1:76:74:4d:49:e2:64:9a:35:b8:f8:
                    7e:ba:9b:28:df:ef:20:e1:c5:cb:2c:ca:33:fb:f8:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C8:9F:C7:CC:5C:78:A0:99:B8:7D:51:12:A2:1A:91:27:B7:F8:B5
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9c:31:50:c5:6b:48:d6:25:15:bd:02:80:b7:29:7f:18:8e:
         c1:0c:f4:37:43:1e:68:65:60:67:32:7c:21:90:e7:32:9c:d6:
         c8:92:70:3c:0b:8f:b4:17:e9:80:4f:76:37:d6:26:f0:ca:9e:
         54:57:19:06:91:3a:5f:4f:6e:28:ca:76:e7:48:84:04:5c:f9:
         c8:0a:b2:45:4d:85:5a:59:9f:36:1b:eb:b5:53:6f:14:37:21:
         8b:60:4b:98:8b:b4:12:f7:81:d1:42:2c:66:8d:86:1b:62:80:
         38:c5:4d:14:a0:d1:79:84:15:06:cb:d9:49:c7:4f:73:7d:5d:
         46:b5:7d:e6:a0:dc:fe:de:27:7d:2b:99:dd:a1:cf:26:1e:49:
         ea:ce:5d:4a:4c:c2:e7:33:63:9f:4e:48:d4:68:da:f3:c1:8d:
         7b:33:52:61:89:1f:56:d6:f3:7b:06:60:b6:36:d7:b1:5b:3e:
         d0:26:f0:c4:3c:95:4f:0a:84:b7:1e:2b:17:dc:6f:1d:40:a7:
         83:b9:bb:b3:77:59:5e:5e:21:bb:41:0e:6f:c9:0a:15:d1:e7:
         fa:93:3d:c8:2a:e9:c2:0f:5c:6b:28:6a:8c:d7:03:82:20:7e:
         ed:b9:29:27:15:fc:3c:c5:e6:84:bb:63:6b:3d:95:d6:16:1c:
         ff:2e:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org