Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
File:                     u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json)
Hash identifier:          +/ecXN0OhIPkMsp3TvM9NQLE8IdDB2wZD+K0k7ORBHQ=
Subject key identifier:   15:1B:91:AF:58:4E:1D:9D:7D:5B:42:05:FF:3F:2F:AA:2A:36:AF:56
Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59
Certificate issuer:       /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
Manifest number:          12
Signing time:             Sat 23 Nov 2024 05:59:37 +0000
Manifest this update:     Sat 23 Nov 2024 05:59:37 +0000
Manifest next update:     Sat 30 Nov 2024 05:59:37 +0000
Files and hashes:         1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: nQY+UDRftBbnGYjWMnRnoi2VfRHu1KR7DummqVDIOZw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59
        Validity
            Not Before: Nov 23 05:59:37 2024 GMT
            Not After : Nov 30 05:59:37 2024 GMT
        Subject: CN=67416f49-9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:38:04:7b:ce:97:78:e5:4c:59:b3:bc:d9:
                    7a:55:ee:7d:1c:76:e8:9b:63:fd:c8:86:a2:dd:a9:
                    9c:6b:2d:65:b5:d3:d9:4f:2c:9b:ca:dd:83:a2:06:
                    ad:6f:31:55:c3:bd:90:84:db:cc:b0:f1:e7:d4:01:
                    b0:29:67:cf:42:0f:c0:92:0e:8f:8b:69:11:68:61:
                    3a:1a:59:0d:83:88:77:bf:d5:c9:0d:ae:c3:8f:cb:
                    a7:56:e3:c1:cd:e0:23:98:0d:46:ac:c9:de:c8:7b:
                    f9:94:a7:b5:95:06:04:dc:0e:69:f3:a7:e5:bc:d4:
                    94:e4:b0:a8:1f:48:97:2b:66:ba:ea:84:f2:69:83:
                    e2:c9:fc:42:84:4c:a6:6f:69:56:8a:94:76:35:ee:
                    6f:75:7e:6e:79:56:19:25:ca:3c:65:fd:a2:f7:06:
                    c6:f1:95:3c:fc:4c:40:68:12:77:a2:9d:d7:09:60:
                    68:b6:ab:75:75:b2:f9:93:80:f3:e4:d2:25:d3:c0:
                    f0:cb:35:dc:ac:c6:f3:00:cb:5a:2b:ea:f7:62:fa:
                    e7:18:8b:cf:b7:d4:40:5d:cc:d8:02:c7:93:d0:a9:
                    74:7d:ae:9e:65:c2:1a:ad:50:f0:fc:64:76:c3:e4:
                    49:e6:8e:fe:2d:36:04:a5:b3:4b:e8:62:16:54:e0:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1B:91:AF:58:4E:1D:9D:7D:5B:42:05:FF:3F:2F:AA:2A:36:AF:56
            X509v3 Authority Key Identifier:
                keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:0f:cd:f9:35:90:09:59:0e:0f:23:56:db:93:29:16:22:
         f1:d6:6f:f9:93:55:4e:6e:74:92:91:a0:65:da:7c:8f:12:b1:
         9c:57:c4:26:62:a6:be:00:9f:80:41:dc:a3:77:ad:3d:1d:9e:
         33:bd:bb:7a:c4:94:78:db:b0:08:ab:e9:d4:52:5d:0d:6e:56:
         78:33:01:be:f6:45:6c:bb:6a:e3:64:31:45:70:c6:57:2d:64:
         92:2d:1a:61:2b:a6:32:a1:a2:dd:11:b4:24:90:55:a2:c0:2b:
         32:95:e3:37:8f:35:11:74:d0:6a:46:ce:7e:6e:ec:32:bd:f6:
         b6:36:f7:43:85:3b:43:46:dd:6b:cb:2c:8d:58:3c:15:59:cd:
         c3:30:7d:72:4b:b0:61:73:67:2a:50:11:1c:7f:e1:f0:0a:f1:
         89:c1:b9:81:0b:29:36:c6:74:09:6a:e9:dc:ef:8d:a8:50:ef:
         21:a9:59:ff:8d:ed:39:b1:77:e5:3f:97:02:29:61:1a:8a:6e:
         c7:94:c0:41:f6:42:d3:d4:70:26:21:ab:63:c5:c6:69:49:6a:
         db:61:be:11:5f:ae:c1:e3:2e:fa:cb:4e:8b:48:e0:cb:03:72:
         82:0d:5c:ac:42:b7:52:6c:ae:74:c4:91:9a:f6:09:8f:00:96:
         20:1a:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org