Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          982Qiw6jtcw8qpuUzCoUKONFTND8u/gYgUrCldnCFOU=
Subject key identifier:   C3:D8:A1:92:AA:4E:5A:AD:07:2E:49:06:34:34:42:58:4B:5F:54:43
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          1258
Signing time:             Fri 22 Nov 2024 19:26:41 +0000
Manifest this update:     Fri 22 Nov 2024 19:26:41 +0000
Manifest next update:     Fri 29 Nov 2024 19:26:41 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: Z1sNlpBbpqUEKZ3KTT/1VdqTVv7mfH4a9RJtzH07SiU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Nov 22 19:26:41 2024 GMT
            Not After : Nov 29 19:26:41 2024 GMT
        Subject: CN=6740daf1-530b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:1c:9a:ea:da:b5:ac:a6:2a:da:04:2f:b8:
                    4f:f3:0c:50:07:18:8b:1b:b1:73:c5:ae:ca:3c:e9:
                    59:10:4e:be:ef:ae:ab:a2:bb:d7:6d:a6:e6:77:05:
                    93:ea:cc:55:eb:ae:f5:80:29:35:20:2b:02:9c:31:
                    33:9c:d7:fd:da:f8:a7:75:21:46:65:54:f9:19:25:
                    28:9b:92:92:03:3d:8f:70:ac:86:a5:c8:cf:4c:3d:
                    02:75:ba:de:f8:85:5d:9e:fe:5f:08:c6:6d:4d:02:
                    7c:7d:82:22:0f:47:fd:3a:64:d4:12:b3:46:22:10:
                    aa:fd:69:97:2f:48:b5:8f:37:5b:a1:07:b4:1f:79:
                    cd:b4:9e:94:87:ad:62:63:06:15:a5:9f:27:d6:79:
                    54:75:94:22:26:60:7e:ab:f2:6f:2e:7d:78:d4:90:
                    c0:ae:75:c5:44:c4:5a:80:e8:94:da:69:2d:c1:36:
                    8b:6c:dc:8a:27:ff:4a:f9:e8:2f:2f:ac:31:78:26:
                    c0:13:57:08:d3:50:f8:03:c6:7c:77:a7:ef:46:fa:
                    47:9b:ae:57:bb:21:c3:da:1c:c3:c7:e8:64:ab:2d:
                    88:33:91:c3:31:c8:47:83:ca:17:3c:6c:5d:c3:a0:
                    dd:95:4e:fa:b0:99:e3:af:1e:8f:96:8e:0c:81:7d:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:A1:92:AA:4E:5A:AD:07:2E:49:06:34:34:42:58:4B:5F:54:43
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:22:93:bf:03:f8:13:5d:e0:d7:ce:7b:a9:0c:89:69:de:96:
         d3:4a:db:e0:7a:26:79:ed:06:22:99:95:18:4f:07:7f:00:e4:
         0c:a1:f5:38:04:cb:fb:33:22:d4:3f:bf:29:72:fa:70:ae:ce:
         12:f3:16:90:04:b2:6b:0a:f2:bc:98:ce:4d:91:56:a5:ac:d2:
         db:71:f1:61:ee:f4:06:64:ff:b8:1e:01:d9:2d:dd:4a:89:e4:
         35:18:2e:5f:be:f0:58:5a:cf:6a:c1:5d:cd:c7:a9:73:6b:21:
         56:5f:28:8d:82:21:4d:16:91:0b:de:5d:4a:1c:f7:76:1e:6e:
         c3:a4:de:01:3c:60:06:67:60:f7:02:5d:c7:1f:95:4d:10:e2:
         36:ce:b1:5d:5b:89:08:6f:78:90:5f:40:5d:1d:04:36:1b:f6:
         f2:0e:ab:fc:52:fa:e9:76:4d:70:1d:49:cc:cf:d7:66:f9:8f:
         55:85:c6:b5:b4:cd:8a:9e:1e:3b:94:10:54:87:f2:57:fe:91:
         97:dd:9c:12:13:5a:2d:55:03:7e:be:21:85:a1:a1:ac:e1:a0:
         d5:43:d1:4c:ce:01:67:2f:a2:46:87:4a:6c:bd:0c:a1:b9:e5:
         79:e5:fc:42:93:a9:ee:6f:a6:c8:4d:d9:39:86:fb:96:88:e9:
         21:41:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org