Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
File:                     Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json)
Hash identifier:          2dPL7Wt4L1XrcYR4w/iQe8mqYFi6WxR81jQF3TsoiCc=
Subject key identifier:   BA:93:D4:30:6A:EC:E6:56:DC:FC:A8:DF:68:B5:19:12:79:E9:71:0F
Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74
Certificate issuer:       /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
Manifest number:          71
Signing time:             Sat 23 Nov 2024 00:53:35 +0000
Manifest this update:     Sat 23 Nov 2024 00:53:34 +0000
Manifest next update:     Sat 30 Nov 2024 00:53:34 +0000
Files and hashes:         1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: Y2xF7qrcfB1sVnNzRLM2onsZIHD/U8KBLeeIqrW5fY0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74
        Validity
            Not Before: Nov 23 00:53:34 2024 GMT
            Not After : Nov 30 00:53:34 2024 GMT
        Subject: CN=6741278e-51a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:30:49:bb:ad:38:e2:31:41:f5:a6:e1:fe:
                    ef:3b:45:3e:a1:4f:86:57:7f:5c:04:15:57:5b:41:
                    c8:a1:03:f2:76:24:a8:38:eb:cf:82:b0:c0:90:f1:
                    48:78:62:37:19:0c:26:21:20:d8:8c:7d:83:7d:82:
                    4e:7d:d9:1b:04:10:d1:2a:f2:ae:8e:b5:1b:15:60:
                    ba:5e:78:b8:8d:9d:10:c7:45:51:bc:05:3f:cf:45:
                    17:5a:83:70:04:58:33:6e:83:57:5b:a5:52:e0:a0:
                    c3:eb:4d:50:fb:67:f1:76:c9:12:f5:fe:a7:01:a2:
                    bf:ba:41:a2:b1:06:d6:ec:58:08:ca:a6:bd:c1:d7:
                    43:f1:7d:78:19:71:41:e0:5b:ba:88:ae:b6:ca:1b:
                    40:76:fb:bc:7a:3d:71:88:60:2b:ee:bb:05:bf:4a:
                    a9:ce:ab:cf:c1:34:f4:2b:da:a5:39:d6:6f:f2:91:
                    66:d9:be:80:b5:b5:fe:ad:af:5b:a0:e6:4b:98:99:
                    92:28:3e:80:0e:d8:d1:d4:2f:6c:60:c7:b3:d2:d6:
                    83:75:2b:48:68:79:54:1c:b7:97:fa:de:03:12:08:
                    76:0b:95:46:d4:ea:92:2b:79:af:e8:7b:30:1d:87:
                    f0:f8:63:49:50:13:94:43:1c:46:14:be:3f:16:64:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:D4:30:6A:EC:E6:56:DC:FC:A8:DF:68:B5:19:12:79:E9:71:0F
            X509v3 Authority Key Identifier:
                keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:05:3f:37:53:b1:55:76:10:09:64:58:3f:9d:f2:ae:75:
         2c:66:e1:b9:43:1a:15:0b:6e:97:7c:e1:bf:04:b3:84:50:e3:
         f4:54:fe:ac:15:0c:57:64:71:d4:f0:71:30:be:96:14:c2:c4:
         ea:b7:b2:ed:54:c1:c3:b9:aa:b2:7b:98:b1:eb:18:ed:84:3b:
         ef:43:c7:9e:d2:63:b5:57:8f:5d:58:b1:e8:0c:30:f5:9e:ab:
         06:86:1f:0d:54:e8:cd:8c:c2:d6:97:9b:f1:2a:20:de:45:32:
         9e:61:2d:e4:1b:60:38:1d:5d:2a:22:83:c9:06:af:28:1f:d8:
         6f:39:f3:e2:ff:eb:e4:47:7c:e1:23:19:47:c3:06:d3:f5:2c:
         40:24:64:f5:58:05:83:84:d9:ea:46:71:97:24:3a:0e:cd:d7:
         e0:34:db:43:98:06:92:3d:75:ef:93:4d:b3:83:93:8d:7e:c6:
         9a:e3:8f:ce:fd:17:66:88:f4:17:03:28:a6:e0:c0:02:35:1f:
         77:0d:31:a7:21:44:f3:77:44:39:5b:d5:86:df:5d:62:c2:f4:
         e1:2f:23:31:32:29:f7:65:49:02:d0:ae:b2:97:9e:0a:8f:5b:
         bf:7d:f3:fa:52:43:49:f4:16:00:3f:d4:dd:8f:57:87:14:3f:
         60:6d:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org