Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
File:                     VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft (raw, json)
Hash identifier:          lY00gIhXJSV+ExrJiKxlxudkdkud5XJO6dU8/CdnUTA=
Subject key identifier:   27:E4:51:EA:B6:65:8C:46:CE:64:F5:E0:3A:5C:34:E4:91:EC:4F:D7
Authority key identifier: 54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3
Certificate issuer:       /CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
Manifest number:          2B
Signing time:             Sat 23 Nov 2024 05:39:33 +0000
Manifest this update:     Sat 23 Nov 2024 05:39:33 +0000
Manifest next update:     Sat 30 Nov 2024 05:39:33 +0000
Files and hashes:         1: VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl (hash: 40r9yzWvNWOfny1xwl8AMVg9pY9ZqMpxLQ5XPFOnacE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl
                          rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F653/serialNumber=549093D2C161749E8C6F0E885627541089A54DC3
        Validity
            Not Before: Nov 23 05:39:33 2024 GMT
            Not After : Nov 30 05:39:33 2024 GMT
        Subject: CN=67416a95-18df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:1a:7f:44:d3:70:2d:52:9f:84:96:87:c2:
                    d6:8e:a1:03:b9:54:35:59:30:cc:c7:44:87:55:9c:
                    ae:70:c9:f5:af:34:de:8f:f9:af:6b:3a:e5:a7:43:
                    dc:73:eb:17:e6:f5:f9:96:b2:62:f6:68:ba:50:83:
                    53:38:bc:c3:db:cd:2d:5e:94:b2:7e:25:29:a9:3f:
                    f6:4d:e2:3f:fa:c4:a5:c7:db:99:b8:21:4e:ba:95:
                    ac:18:c2:b4:a6:53:ff:cf:36:a3:58:59:4a:80:ca:
                    f6:7b:40:65:e3:14:50:52:64:5a:23:7a:2a:bb:ca:
                    67:d2:b7:bc:f4:5c:b4:ab:c0:43:2c:6d:84:1a:9b:
                    ef:43:0a:52:fd:9b:2c:3a:3c:4a:f5:30:51:3d:e3:
                    db:60:cc:e7:86:fc:54:bc:c9:f4:a6:76:e3:98:e7:
                    43:e1:8c:a5:ed:7d:c6:a2:30:58:2b:4c:01:9d:ed:
                    35:67:7a:a8:0e:d3:b7:a4:ad:1b:82:c9:6c:b4:7a:
                    4b:4e:26:d9:92:28:14:a2:45:98:6e:de:4f:e5:45:
                    e0:cd:5c:79:e6:b4:c5:e9:e5:62:40:c7:9f:51:84:
                    72:d4:0e:c8:3a:34:de:ee:d2:9a:a9:34:24:2e:2b:
                    d0:ee:f6:4a:6c:8f:e7:15:f0:5f:a2:9f:6c:06:d2:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:51:EA:B6:65:8C:46:CE:64:F5:E0:3A:5C:34:E4:91:EC:4F:D7
            X509v3 Authority Key Identifier:
                keyid:54:90:93:D2:C1:61:74:9E:8C:6F:0E:88:56:27:54:10:89:A5:4D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJCT0sFhdJ6Mbw6IVidUEImlTcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F653/0D944B846A6011EF831D1878C4F9AE02/VJCT0sFhdJ6Mbw6IVidUEImlTcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:7b:af:fe:08:e3:f9:50:70:40:25:00:3d:56:a2:3b:3e:
         da:ed:02:b4:b4:c4:b3:37:8c:75:55:25:04:11:7b:c6:6c:ca:
         47:94:f8:33:f5:99:5b:dd:04:dc:c0:08:6c:a1:dc:57:aa:dc:
         4f:9e:e1:82:88:3d:e9:1b:18:c3:bc:00:a0:03:15:13:ef:04:
         4a:9d:6a:04:c3:1b:04:3b:a2:f6:a4:44:d1:c1:a3:3d:ba:8c:
         04:77:8a:14:61:1b:0f:ac:af:0d:2a:f9:76:38:eb:35:2f:0f:
         0c:f6:db:19:d3:9c:45:b8:b7:4d:26:f8:d5:d6:dc:d6:d4:88:
         56:b4:89:93:a2:2e:c2:d6:5b:1b:a7:3e:ad:f7:0a:45:f0:c6:
         94:fd:b9:e4:3a:62:e1:57:de:81:0b:03:b1:c7:38:b2:42:de:
         1c:62:92:d8:91:2f:5b:e7:c1:35:d2:37:6a:60:a1:9b:7b:9e:
         88:6c:00:d4:41:3e:8a:81:ce:23:e4:1a:8e:05:0b:7c:f7:f6:
         97:50:49:af:d1:d0:b8:13:22:7c:cb:7b:5c:b5:36:48:85:cb:
         db:82:a6:b8:5d:ce:1a:57:c0:ae:29:f0:20:39:00:f2:70:bf:
         06:ff:5a:61:84:8e:68:ea:e9:08:a8:17:16:d7:db:74:db:2c:
         b0:10:76:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org