Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File:                     FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier:          F0neJBbIIFbYdTCMIO5mQCgaMBbk8G9eWox6LHnNRI0=
Subject key identifier:   D0:D2:2E:DF:31:7D:44:78:C1:E5:C1:3C:61:9D:F1:56:62:B3:A2:59
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer:       /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial:       3228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number:          98FF
Signing time:             Fri 22 Nov 2024 15:18:32 +0000
Manifest this update:     Fri 22 Nov 2024 15:18:32 +0000
Manifest next update:     Fri 29 Nov 2024 15:18:32 +0000
Files and hashes:         1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: cfm9grb8kKuw1cVxFhGb++anFrNqFOd0lliEzx332Do=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12840 (0x3228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
        Validity
            Not Before: Nov 22 15:18:32 2024 GMT
            Not After : Nov 29 15:18:32 2024 GMT
        Subject: CN=6740a0c8-f53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:2d:15:b1:83:d3:d2:12:3e:1c:b4:b6:62:
                    6d:c0:ad:15:fc:e4:92:4d:44:50:10:9a:3c:87:a6:
                    a2:c0:e4:5d:86:14:80:3f:e7:c2:a7:e8:db:3b:fc:
                    d5:c1:ea:41:a4:c3:d3:86:65:e0:32:20:04:38:d2:
                    bd:12:74:19:69:c6:81:43:d0:2a:55:02:06:a1:3d:
                    68:b0:94:e5:ba:cc:52:0a:5c:97:72:ad:70:de:4e:
                    4d:c7:38:18:12:63:c2:b4:db:64:25:e4:35:28:f9:
                    28:b1:5b:74:e3:9d:d6:aa:d2:cc:d4:5f:97:4b:be:
                    37:04:67:9d:a0:ab:f3:c7:3a:83:57:f4:22:3c:40:
                    f2:c6:c6:7e:f9:36:4e:fe:8d:be:db:73:61:f7:6b:
                    35:5b:d4:9f:ca:6b:80:70:1f:25:97:0e:b2:1e:67:
                    5f:72:df:06:cd:45:51:9e:f8:33:f9:03:06:c4:7b:
                    ae:af:fa:e6:5e:52:57:1b:c7:93:ea:c0:91:17:27:
                    d4:33:70:bc:df:9f:60:ea:38:6d:9d:fe:67:1e:2b:
                    6f:f1:11:49:69:7f:fe:f0:54:3f:30:71:5d:95:9b:
                    7a:ae:a0:61:e1:6c:ab:91:9e:fc:06:c3:02:f0:37:
                    ac:26:cf:d7:02:cb:cd:b8:09:52:4f:ff:07:6a:8b:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:2E:DF:31:7D:44:78:C1:E5:C1:3C:61:9D:F1:56:62:B3:A2:59
            X509v3 Authority Key Identifier:
                keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:61:73:8f:98:9a:06:74:76:a7:f3:53:39:ea:34:32:34:
         75:76:5e:e4:93:f3:64:83:bc:f0:57:22:4d:76:42:a1:cc:d3:
         3e:82:b1:88:91:c0:32:56:f8:0b:60:37:d7:06:80:5c:08:0d:
         ef:b8:d2:79:0c:97:ec:67:79:4c:19:67:45:85:0b:41:eb:84:
         48:1c:49:59:5a:98:8b:01:af:5a:e2:4c:e6:47:21:be:15:ed:
         23:9c:d5:69:03:69:9a:50:ab:ea:04:16:11:62:c6:74:66:88:
         39:5e:1e:8a:5a:1a:dc:8d:f2:9f:71:30:49:be:c3:ce:a7:9f:
         80:c3:63:37:80:43:61:2e:30:9a:11:1d:41:44:cc:3e:53:48:
         16:e8:f8:63:0c:28:d4:84:72:ce:6f:90:67:ee:c7:bb:50:ab:
         d7:52:65:2a:c7:ce:18:f5:b5:ce:41:a2:e5:8b:54:31:b9:b0:
         c5:be:78:3e:4f:ff:d4:ae:a7:fe:5f:08:88:cd:fb:2a:96:ba:
         8c:6a:b1:1c:bf:c8:51:a6:63:46:c7:ce:f5:2b:e8:f2:01:ab:
         87:c4:8d:e7:4c:fc:44:93:51:36:e8:8e:fd:34:e1:1c:be:fa:
         da:b1:59:2f:0f:06:b7:db:f8:90:6a:4a:b5:61:54:8e:24:79:
         b9:17:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org