Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
File:                     Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft (raw, json)
Hash identifier:          j/ObbiVQd6upvIaE8ng4Wc/rO0hxJLaNjwGQzdIaJ7s=
Subject key identifier:   6F:C1:A9:4D:C8:57:DB:81:E3:DB:40:42:22:FD:F1:9A:3A:34:5A:C1
Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A
Certificate issuer:       /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
Certificate serial:       343B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
Manifest number:          3431
Signing time:             Fri 22 Nov 2024 14:55:33 +0000
Manifest this update:     Fri 22 Nov 2024 14:55:32 +0000
Manifest next update:     Fri 29 Nov 2024 14:55:32 +0000
Files and hashes:         1: Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl (hash: dY8/uqB2SYcXQdQnqh+6Nv3FWzZx81KvfisvpCnbgVg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl
                          rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13371 (0x343b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A
        Validity
            Not Before: Nov 22 14:55:32 2024 GMT
            Not After : Nov 29 14:55:32 2024 GMT
        Subject: CN=67409b65-346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:28:10:51:8a:9b:f1:a6:de:92:dd:6b:8f:
                    3d:38:72:c5:fb:08:01:c2:94:6b:60:c8:b7:b2:05:
                    7a:be:ba:65:31:fc:8a:68:da:c2:5a:c3:11:f3:d2:
                    18:9c:9c:8f:d9:45:be:21:db:1d:97:39:f9:11:6a:
                    70:8c:eb:00:db:c0:f4:a7:e1:cc:01:d6:14:1d:03:
                    b0:ec:7d:5f:c3:37:d8:a6:ed:35:c8:48:5e:ee:3c:
                    b9:9f:36:fa:25:fb:d8:1f:64:eb:5b:60:5d:dc:31:
                    ee:5e:5d:83:2c:66:26:ae:01:4f:1e:e9:14:23:03:
                    c8:d3:bd:c6:3b:d4:47:b9:e7:37:c9:3d:6d:ad:c2:
                    cb:ac:cb:9e:c1:70:8f:92:7a:a9:28:3e:55:83:4f:
                    81:db:37:5b:14:b6:26:71:58:88:e2:e3:dc:a2:36:
                    74:66:6f:6a:39:95:d1:60:10:e4:65:41:11:5a:85:
                    83:94:a7:6d:c4:0d:66:6c:91:7c:c4:04:df:a9:6c:
                    d4:ea:ea:c1:40:65:22:f7:68:49:6f:ac:21:ec:05:
                    90:1a:9f:15:68:b2:20:b5:02:9f:2c:11:b1:e8:b5:
                    47:6e:92:02:d9:6d:30:21:56:7a:77:94:92:70:ab:
                    7a:bc:2f:e1:45:a8:61:ea:45:7a:f6:8c:b0:b0:cb:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:A9:4D:C8:57:DB:81:E3:DB:40:42:22:FD:F1:9A:3A:34:5A:C1
            X509v3 Authority Key Identifier:
                keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:90:69:af:5e:71:f8:d2:7d:a2:68:06:b4:bf:30:48:6d:
         ac:60:e7:c7:13:32:dd:92:c4:56:3e:d3:6c:20:88:8b:90:e7:
         41:d2:14:e7:35:dc:71:75:08:b1:b8:4b:73:a4:be:9b:a6:fb:
         fc:eb:d5:af:86:5c:9f:68:94:98:22:18:bb:b9:43:dc:b1:22:
         4c:42:32:82:40:c8:2e:a0:cf:f9:e0:ca:27:b4:be:25:61:4a:
         d6:34:2b:3c:a5:54:e9:ab:5a:14:98:87:2f:2e:4c:8a:cf:0e:
         3d:61:e5:06:b6:58:7f:64:a3:28:3c:8b:ee:49:df:4d:2a:3c:
         17:71:a6:22:38:d6:ee:df:19:c6:27:9e:c1:28:d7:f6:42:da:
         53:fc:da:87:00:a1:2c:77:06:66:57:7e:04:8a:41:2a:73:19:
         e1:ae:cf:22:65:ee:26:ec:47:fe:44:9c:f3:90:19:ca:79:be:
         c7:7f:2d:1d:5c:ae:cb:c9:cf:67:f6:6d:6d:fe:61:1f:82:ab:
         c7:3e:4e:cd:b2:af:8f:87:86:8b:a5:6f:c9:46:b5:35:37:c3:
         a3:62:61:c6:58:a0:ef:1c:39:ec:12:f4:a1:f9:38:46:34:58:
         4b:9f:1f:e7:31:07:03:73:e8:ef:eb:69:4b:f4:5c:15:7f:2d:
         17:72:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org