Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File:                     7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier:          9P/ClKxGyzBj3GGgtHs318Ny6UhgiTsiZFdvSeLmRFU=
Subject key identifier:   AD:D1:64:12:8C:A8:B0:7F:D5:DB:F6:65:88:A9:AD:93:98:ED:A4:CC
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer:       /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial:       32A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number:          3B3E
Signing time:             Fri 22 Nov 2024 15:23:22 +0000
Manifest this update:     Fri 22 Nov 2024 15:23:22 +0000
Manifest next update:     Fri 29 Nov 2024 15:23:22 +0000
Files and hashes:         1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: TFc/pbCtwiL5B+/b6CKUCRua2rFn+QPehNTWw1fbGpw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
                          rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12962 (0x32a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
        Validity
            Not Before: Nov 22 15:23:22 2024 GMT
            Not After : Nov 29 15:23:22 2024 GMT
        Subject: CN=6740a1ea-c3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:9a:66:b4:7c:5d:ae:45:d8:9d:a5:9d:6f:
                    be:3b:76:dc:48:e6:a5:76:63:f6:4a:04:f3:bf:38:
                    3b:b4:b9:f5:0c:e6:1d:9a:42:b5:de:ad:b6:e7:4e:
                    da:c0:aa:6e:f3:3e:42:a5:03:2c:f1:fd:4e:16:ff:
                    46:2e:57:52:b4:1c:bd:e9:18:9b:94:20:87:0d:84:
                    d6:2c:68:8f:3a:4a:c4:d9:27:4e:99:0b:e1:03:35:
                    f0:d3:a2:25:f9:bb:4f:ee:a1:84:89:2e:cd:ed:ef:
                    7f:73:f5:9f:55:4d:50:67:cf:03:3c:b1:4f:40:4b:
                    7d:f5:2d:37:1c:69:b9:98:c7:16:e5:60:60:6e:17:
                    c0:92:49:d7:54:ba:e0:93:fe:ec:60:87:38:e4:ba:
                    9d:9e:97:21:2f:c8:f0:45:68:ce:ef:e4:e6:78:14:
                    5e:ed:e1:52:79:98:0f:f1:96:07:e8:f1:b2:e0:fe:
                    f6:08:e5:ed:e9:55:64:bb:8a:60:09:45:83:0f:da:
                    49:f3:52:52:bb:44:38:19:0d:b1:a7:64:e0:f7:de:
                    0c:c9:06:9f:ea:03:5c:41:2a:dd:f6:d5:78:b1:8a:
                    c3:b3:a0:dc:f9:69:b8:6e:29:e5:ba:b7:ef:04:4c:
                    06:fd:2c:7b:ff:9b:2b:97:26:ff:fa:bb:95:a3:ad:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:64:12:8C:A8:B0:7F:D5:DB:F6:65:88:A9:AD:93:98:ED:A4:CC
            X509v3 Authority Key Identifier:
                keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:01:3a:fb:ad:27:5d:39:00:17:6f:7d:02:27:83:2e:17:
         30:ba:cd:54:04:e2:ca:19:ee:31:d1:70:8a:2c:8c:26:71:62:
         8c:3a:2f:9b:6d:d8:fc:51:80:a0:c4:41:eb:f4:18:c8:c7:2e:
         b4:9a:31:ed:56:7c:a9:c5:f1:2d:bb:98:20:0a:7e:8f:39:e2:
         34:4d:ff:22:65:f4:3f:0a:b7:54:f8:77:aa:fd:87:25:2f:53:
         ae:2c:75:55:a2:12:7a:fd:e3:3f:7e:9a:62:f5:96:82:34:04:
         37:a0:39:66:e2:7e:e6:69:ba:46:a6:ce:35:b2:cf:92:15:a8:
         a7:32:ba:35:2b:8e:ed:33:8b:b4:c4:fb:1d:91:86:e3:48:4e:
         f9:f1:56:0b:67:94:48:2f:c5:c6:15:79:a7:87:e3:1d:ea:b9:
         f3:ee:33:eb:ac:d8:14:bf:13:56:97:63:09:9f:33:10:5c:e5:
         dd:af:0a:82:44:94:f5:41:f1:9e:33:45:84:7b:1f:49:18:88:
         42:b5:7a:ce:85:1a:2a:f7:c8:67:3f:89:50:15:3d:18:1f:75:
         b4:d7:85:a4:19:5b:26:7b:2e:12:e6:f0:81:27:dd:2d:a1:00:
         91:8b:bf:4f:fb:44:cb:f2:c1:b9:5b:88:c5:ba:e9:c1:af:a3:
         e2:3e:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org