Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
File:                     dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json)
Hash identifier:          p6sLcBslXezltXvPw8Hjif45SB9ksu/jVTIII4EkpEo=
Subject key identifier:   81:5E:6F:84:E2:74:A2:19:A6:98:98:FC:D1:E6:CE:28:18:B7:D4:4B
Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6
Certificate issuer:       /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
Manifest number:          49
Signing time:             Sat 23 Nov 2024 05:16:30 +0000
Manifest this update:     Sat 23 Nov 2024 05:16:30 +0000
Manifest next update:     Sat 30 Nov 2024 05:16:30 +0000
Files and hashes:         1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: 4qofYADF/52yDs5spI6qTAD69gKc+8V62RBQ8eVNxzc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl
                          rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6
        Validity
            Not Before: Nov 23 05:16:30 2024 GMT
            Not After : Nov 30 05:16:30 2024 GMT
        Subject: CN=6741652e-efe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:a0:33:fa:61:0e:fb:76:7d:9e:42:61:b5:
                    b1:65:70:a0:75:b4:9f:c5:0c:95:b7:16:a1:02:60:
                    02:d7:66:77:a5:b2:99:0f:c2:46:92:94:92:59:7c:
                    4c:cf:9e:4e:3d:4c:c5:e4:de:06:22:dc:46:cc:da:
                    eb:39:85:66:8f:ba:e7:bf:ee:88:cb:02:f4:e5:70:
                    23:a7:1f:72:16:90:b4:51:b5:54:dc:fc:36:c1:53:
                    47:20:b1:a3:1b:e8:af:7c:5b:31:fb:72:1f:6b:cb:
                    c0:3d:b5:75:a4:bb:7f:7e:c9:56:e9:1a:c9:5a:87:
                    4c:e2:16:6b:8d:c5:3a:c3:81:26:21:8a:be:a5:fe:
                    45:4a:b2:59:87:89:a5:25:6c:9b:8a:56:ca:e3:9a:
                    19:71:86:b2:eb:4b:f0:24:6f:90:ef:b6:bc:bb:17:
                    70:dd:4c:29:36:bc:0d:5c:e0:ae:fd:aa:54:1c:ce:
                    78:a8:bc:f3:a0:27:b0:b1:50:ec:f4:b5:cb:40:21:
                    2f:a8:36:ab:a0:76:47:2e:d3:54:30:1b:df:a1:7d:
                    ba:be:d2:71:40:5e:9d:b8:3f:fb:e8:0c:24:80:29:
                    e5:16:bb:38:a8:84:ea:04:12:96:64:64:4f:ad:2a:
                    8e:d4:c7:62:64:78:ec:ba:e8:3e:eb:3b:b0:75:55:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:6F:84:E2:74:A2:19:A6:98:98:FC:D1:E6:CE:28:18:B7:D4:4B
            X509v3 Authority Key Identifier:
                keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:b7:55:a5:7b:a1:de:39:39:9b:c1:cf:66:8b:92:1d:99:
         52:0c:b4:b6:be:3d:13:0b:c1:e6:46:cd:c5:1f:e4:c4:5c:20:
         d9:fd:b9:70:16:57:0c:0a:d3:2d:81:a2:cd:69:72:33:f4:da:
         5d:b1:53:0a:70:20:b6:bd:f3:ea:34:5b:c0:b9:06:f5:27:3c:
         da:d1:58:28:48:53:7e:82:5c:2b:92:e4:db:3f:1f:11:33:c8:
         14:79:7f:ae:74:5e:5f:9a:08:88:1c:34:60:0d:ad:f0:cd:63:
         9f:2b:a8:af:bc:23:11:6f:f0:1f:4e:c6:36:82:60:4a:a7:75:
         13:2d:6b:53:12:e8:e5:30:fa:a4:07:e7:77:fa:e4:ce:c2:db:
         b4:c6:fe:35:53:e6:2d:f1:4a:31:1d:46:d6:43:21:82:ff:37:
         18:84:7c:50:08:4b:a0:eb:9a:44:49:83:f7:f2:8b:30:b8:a0:
         3a:fa:77:35:6b:12:1d:c0:a8:01:9b:6a:96:80:6f:6f:6f:97:
         3e:31:cc:8b:d0:1c:99:ce:ee:93:b5:f6:af:fd:ac:30:ed:5e:
         17:34:07:6c:7e:a0:a1:71:a5:f3:cb:f0:bd:76:a4:ff:b0:d5:
         45:37:b1:78:83:b1:dc:c6:36:13:7b:2d:cd:a8:6a:c6:54:a7:
         13:8c:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org