Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
File:                     sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft (raw, json)
Hash identifier:          F7Sa7fw7K7evbWwTr3y0wTPfH2fS/mYhUFFQ49oVqmM=
Subject key identifier:   79:98:0D:C9:92:0B:49:2F:4E:FE:E7:D0:47:E1:CD:5C:70:9D:2E:14
Authority key identifier: B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95
Certificate issuer:       /CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
Manifest number:          02C3
Signing time:             Sat 23 Nov 2024 00:59:17 +0000
Manifest this update:     Sat 23 Nov 2024 00:59:17 +0000
Manifest next update:     Sat 30 Nov 2024 00:59:17 +0000
Files and hashes:         1: sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl (hash: suFTgMFPtxkOu5MXD43ZiL4z9o7WQG34IhiGyrg1Fqk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl
                          rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919456E/serialNumber=B04B7FB20E25D6D7587F26FD757274B9D3EE3E95
        Validity
            Not Before: Nov 23 00:59:17 2024 GMT
            Not After : Nov 30 00:59:17 2024 GMT
        Subject: CN=674128e5-0f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:81:61:53:1f:4e:cf:16:57:c9:8b:98:e7:
                    ba:b9:9f:a3:e3:97:d0:53:f7:f4:94:6d:3d:91:db:
                    c3:32:74:b2:d9:5a:13:d5:04:de:bf:f0:f8:4a:a1:
                    56:86:d5:ae:eb:fa:cb:b6:0d:b2:87:9f:68:0e:ef:
                    6f:c0:2d:80:20:96:ca:85:86:b1:25:28:42:15:67:
                    9d:0e:b3:ac:3d:8c:5a:73:30:df:b9:c2:94:7b:a7:
                    1a:c3:33:3f:25:c4:d0:27:04:e0:bc:3e:89:bb:b6:
                    31:57:6c:47:01:8b:68:7b:d3:c1:7d:51:7c:b9:9c:
                    df:05:9c:b6:5f:fb:46:e2:b1:ad:09:15:85:e8:83:
                    d8:04:e0:ba:51:c6:db:3a:e7:79:7c:82:a9:53:b6:
                    f2:cc:75:a2:f4:50:31:91:17:00:b1:38:7c:83:9a:
                    e6:dc:c2:00:67:0d:a7:56:c0:97:e2:7d:1e:c2:c0:
                    6d:f1:e5:2f:76:06:cd:d3:98:8a:bb:ab:19:56:38:
                    20:44:d8:8f:9c:ec:bb:d0:26:f8:99:ad:5d:77:a4:
                    30:a6:f1:46:4f:32:8a:81:c9:4b:4e:ef:e4:96:ea:
                    70:e6:c4:c4:d0:b2:e4:47:d5:d9:c9:55:f1:e7:2c:
                    02:75:a2:ce:7c:49:06:de:8f:ab:95:aa:94:1c:99:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:98:0D:C9:92:0B:49:2F:4E:FE:E7:D0:47:E1:CD:5C:70:9D:2E:14
            X509v3 Authority Key Identifier:
                keyid:B0:4B:7F:B2:0E:25:D6:D7:58:7F:26:FD:75:72:74:B9:D3:EE:3E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEt_sg4l1tdYfyb9dXJ0udPuPpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919456E/6FC329CCCB6811EC8A3F4582C4F9AE02/sEt_sg4l1tdYfyb9dXJ0udPuPpU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5b:83:c0:c1:75:8e:1b:9e:af:3a:5f:73:b1:32:ac:ba:ed:
         f8:83:22:47:e8:11:1a:3f:05:cb:63:50:3d:bb:7b:30:84:46:
         f3:7d:5b:8b:81:b1:f3:29:c8:b7:a8:be:50:95:30:11:ac:63:
         f2:f2:8b:4a:ad:7a:30:9a:46:8f:46:8a:2a:bb:83:be:d0:c3:
         8c:7b:05:64:2b:2a:f1:76:32:38:d3:7c:28:c0:36:9e:2d:99:
         4d:e4:5e:d5:a9:e5:5d:4e:a4:fe:92:92:9e:f8:cf:05:91:d1:
         06:bc:e5:4a:3c:de:be:04:16:7f:7a:c3:9d:1a:4a:35:dc:e0:
         9c:30:fa:e7:20:15:07:cb:f7:cb:28:62:fd:61:95:9b:16:3b:
         27:06:7e:4c:77:64:dd:6a:e5:7d:b5:0e:87:e7:38:5d:56:34:
         cb:73:98:e0:44:02:44:c2:6d:ae:c5:d6:1b:9d:3a:31:44:75:
         f9:48:84:f0:d9:ad:16:63:49:23:c7:7f:4b:87:35:26:f2:3a:
         3b:85:4e:98:8a:94:cf:4b:36:9d:e4:a3:19:71:d8:42:ff:d4:
         bf:4a:33:f6:34:89:14:d8:e6:f4:50:ef:ac:24:81:e6:00:7e:
         81:39:2d:7d:5c:a8:d4:62:2f:b8:a4:12:5f:ce:6b:c1:ce:3a:
         3b:09:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org