Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
File:                     _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json)
Hash identifier:          10GhVm2n06Kmj5c+KoIwQLRV8AG54bxcE+DLufMjSUQ=
Subject key identifier:   B5:FA:6D:1A:A3:D3:95:27:C4:9D:EA:0F:ED:7D:FA:57:8D:30:C9:6E
Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55
Certificate issuer:       /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
Certificate serial:       0728
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
Manifest number:          0727
Signing time:             Fri 22 Nov 2024 21:15:08 +0000
Manifest this update:     Fri 22 Nov 2024 21:15:07 +0000
Manifest next update:     Fri 29 Nov 2024 21:15:07 +0000
Files and hashes:         1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: vM1oR3R3Lz45uJp1l/ndIZYSHPaBvbnbuawmaAvzmKU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl
                          rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955
        Validity
            Not Before: Nov 22 21:15:07 2024 GMT
            Not After : Nov 29 21:15:07 2024 GMT
        Subject: CN=6740f45c-6d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:de:2e:47:37:8b:09:6c:16:57:df:36:dd:
                    2e:46:e5:80:cf:e7:b3:ba:d5:95:4d:12:c9:86:5f:
                    b1:26:59:15:df:c7:0d:54:1f:c2:92:23:ca:6c:9b:
                    77:b3:55:63:7b:03:17:73:5b:78:92:f3:14:63:26:
                    bb:c9:72:8c:ca:e7:58:9b:76:8f:9b:1d:92:ea:81:
                    7a:05:6e:22:e9:f2:1b:3a:ac:36:4a:aa:07:3a:fd:
                    dc:12:bb:f8:0d:8b:67:c2:b9:53:b0:b5:21:64:23:
                    fb:02:d7:d0:3a:c2:4e:8d:7d:c2:1f:fa:40:d4:96:
                    77:e0:de:b8:2e:f4:10:2d:bd:60:db:d1:1e:cf:a0:
                    f1:bc:f9:af:bb:7f:31:72:eb:08:d3:13:42:f5:b5:
                    d5:39:7b:56:25:48:55:05:d0:4f:6d:1f:79:7b:21:
                    aa:d6:e6:e8:ad:c3:50:34:9e:23:f3:41:43:6f:8c:
                    df:81:d2:96:40:d1:f1:de:2f:03:80:01:40:0d:24:
                    9f:59:39:39:6d:e2:5e:8d:f4:1c:4e:0e:06:6f:7d:
                    6e:6c:f1:95:0d:a1:97:6e:21:04:7b:90:7e:34:48:
                    2c:b4:af:2f:fa:e0:56:2f:26:be:38:e1:c2:9a:21:
                    97:60:92:18:d9:3f:94:fc:c4:f6:ec:5a:40:65:4f:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FA:6D:1A:A3:D3:95:27:C4:9D:EA:0F:ED:7D:FA:57:8D:30:C9:6E
            X509v3 Authority Key Identifier:
                keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3b:a8:25:4e:a5:96:20:84:d0:c7:c1:5d:c7:30:9e:bd:41:
         be:32:f1:0e:39:52:ec:1a:4c:c7:7b:81:6b:f1:70:42:2a:39:
         23:65:6e:0b:91:c0:86:a7:67:cf:9c:0a:fb:d3:19:71:40:45:
         b0:be:9d:c5:3f:94:68:4b:7a:e3:1e:08:f1:30:2d:0c:c5:cc:
         8f:f9:7a:f2:c6:5a:5a:be:e5:bf:b7:3f:b6:78:b6:49:41:e8:
         7f:48:f2:d6:0c:2d:47:1c:d7:a5:4b:0a:b4:dc:5d:45:1c:c3:
         bc:2a:46:74:8b:cd:47:d2:01:cb:b6:31:ce:0d:f5:de:26:f6:
         01:5e:95:88:64:b7:26:a7:4f:fc:67:37:dd:1d:62:07:b4:e2:
         18:76:44:bd:ff:f4:66:9e:56:8f:cc:da:09:2a:2a:36:84:28:
         b8:cc:b8:2e:6d:36:aa:c2:c2:3f:74:e9:56:91:aa:bc:78:44:
         6b:5e:4e:51:08:a0:10:50:53:7f:a9:97:ce:49:6d:32:ea:b3:
         f3:5c:be:f0:39:ec:bd:e3:37:a8:17:aa:4b:26:73:2e:65:e7:
         91:16:db:77:46:1f:7e:ba:49:e1:03:10:58:ad:a6:d0:db:d0:
         44:93:2d:6c:cd:0c:fe:0d:b3:7e:84:83:f8:5c:85:09:8c:a2:
         2c:e1:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org