Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
File:                     0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json)
Hash identifier:          +t4bSsv6zlGAB0yj4/Lak99m2pWwGJkK0QKnrYhqaS8=
Subject key identifier:   55:B5:BA:B2:97:9A:93:12:6C:8D:B8:58:29:2A:7B:43:B8:71:70:6A
Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A
Certificate issuer:       /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
Manifest number:          074B
Signing time:             Fri 22 Nov 2024 21:05:03 +0000
Manifest this update:     Fri 22 Nov 2024 21:05:03 +0000
Manifest next update:     Fri 29 Nov 2024 21:05:03 +0000
Files and hashes:         1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: cZm+cieo7eWMqNW1I0iG+p4EKzJMF/gzeo4yZBEDsXQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl
                          rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A
        Validity
            Not Before: Nov 22 21:05:03 2024 GMT
            Not After : Nov 29 21:05:03 2024 GMT
        Subject: CN=6740f1ff-02a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:95:09:53:59:c6:32:a7:22:7d:d0:20:63:
                    83:cf:30:b0:e0:bc:46:54:e5:9a:81:cd:08:c8:47:
                    21:d8:67:8b:cb:b4:8a:bb:41:5b:06:05:4c:63:c8:
                    34:c7:bd:ae:17:20:08:b4:47:ad:a1:db:c1:b4:15:
                    1f:41:a9:75:c5:3b:83:66:1f:cf:bb:3d:29:a0:7a:
                    bb:a4:50:60:48:b4:fd:ba:db:7d:ae:dd:35:91:71:
                    5e:10:f7:c6:a1:1c:21:03:41:14:e7:89:25:84:0e:
                    85:91:a6:6f:b1:79:b2:eb:d0:5c:1e:3d:a8:2d:58:
                    17:f6:5b:b4:1a:f1:53:47:86:64:25:bf:25:73:65:
                    e7:9f:96:42:bf:cc:43:05:00:78:dd:5f:d8:f6:d1:
                    44:59:b7:4a:7c:23:d4:e3:49:ec:ab:00:fd:06:16:
                    1c:27:7b:3c:40:b1:65:9b:ac:3a:db:21:82:f7:9b:
                    1e:91:64:06:18:90:02:7e:ed:a3:b9:e7:15:cf:1f:
                    ed:a2:83:17:08:e4:37:2e:86:a9:21:54:f9:42:d7:
                    78:99:e3:37:cd:3f:0a:d2:79:aa:28:0e:84:e7:04:
                    26:42:84:92:6b:9d:01:3d:05:3b:70:d7:46:31:96:
                    cb:f2:5e:0a:2f:32:2a:a1:81:47:b6:da:2a:92:62:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B5:BA:B2:97:9A:93:12:6C:8D:B8:58:29:2A:7B:43:B8:71:70:6A
            X509v3 Authority Key Identifier:
                keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:d1:31:5d:25:ee:21:c7:02:21:97:c0:42:d4:f3:2e:36:
         82:cd:4e:e8:24:58:32:cd:8d:ef:8f:5d:83:45:e2:e1:a0:cd:
         70:67:e9:bb:1d:b5:b6:25:ae:54:df:b7:83:e8:a7:a1:03:dc:
         94:87:ef:da:08:35:2c:e8:fb:5c:30:f4:9e:e1:c6:80:95:7f:
         fa:89:47:8b:3d:05:6d:28:fa:76:c8:e6:fc:e5:eb:76:20:fa:
         24:6b:89:84:65:d1:5c:3d:e7:75:75:08:c7:95:30:2e:66:4a:
         15:d1:35:2c:43:7a:c6:65:89:9a:2f:75:fd:c8:39:77:01:4b:
         32:f5:5c:26:27:11:6e:46:aa:c9:2d:c5:ac:b8:60:ff:8d:c6:
         2c:d9:06:68:d3:5e:9b:21:79:26:f4:7e:ac:92:26:9b:f2:d1:
         9d:f5:51:f4:6c:dc:90:a2:05:6e:8d:01:3a:9f:c2:5d:86:bf:
         a1:0c:e4:dd:10:ed:31:13:c7:af:86:9d:ae:f0:3b:e9:70:4a:
         b1:2d:b7:fb:59:e6:1b:98:94:0d:51:8f:d8:b3:c4:52:ed:58:
         60:15:08:f8:dc:a2:3d:f7:13:b8:cd:4d:cd:40:67:2d:f0:d9:
         22:1b:c0:e8:0b:56:d8:05:23:7b:c8:49:79:20:96:af:f7:2a:
         91:51:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org