Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File:                     MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier:          wLtolaQC2fc19OWn9Fz1kUS1OFQj7jXfaoeqreR/qak=
Subject key identifier:   D8:4F:7B:53:32:E1:C5:8F:06:13:2D:06:38:D4:0C:81:3F:D8:37:E5
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer:       /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number:          31
Signing time:             Sat 23 Nov 2024 05:35:42 +0000
Manifest this update:     Sat 23 Nov 2024 05:35:41 +0000
Manifest next update:     Sat 30 Nov 2024 05:35:41 +0000
Files and hashes:         1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 0IPYi1TvoduDvOFm0eNmoOsdEK12YzpMdX4LDJHzzg0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
        Validity
            Not Before: Nov 23 05:35:41 2024 GMT
            Not After : Nov 30 05:35:41 2024 GMT
        Subject: CN=674169ae-8101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:d7:5c:66:dd:82:28:b2:78:ea:a7:a5:3e:
                    07:f8:9d:70:51:4d:21:14:a2:13:f1:14:a1:9b:91:
                    02:70:98:3f:7a:a8:95:a4:3f:68:b5:7a:53:15:04:
                    d1:f5:e0:9a:39:f5:5f:9b:cd:d2:7c:7d:28:03:94:
                    1e:0e:d9:6e:3b:ef:d2:20:37:34:99:fb:62:7b:8c:
                    df:9e:12:5a:67:04:ce:25:8e:22:23:e6:6c:f3:ce:
                    88:6a:9a:f3:09:d5:ab:0d:b0:84:75:4f:af:54:78:
                    30:0a:77:ea:5b:4f:b0:a8:87:5a:4b:35:7a:16:a4:
                    e5:c5:a5:5b:9b:a6:b7:15:f6:fe:a0:e2:80:22:b7:
                    b8:2b:97:66:1c:5e:af:aa:3e:a9:2e:8f:d8:47:ec:
                    ad:a4:d3:a7:ac:47:c4:f8:58:11:ac:93:59:8f:96:
                    c8:7d:5b:cf:d2:fc:30:25:36:6c:56:dc:f7:ad:de:
                    19:b1:09:1a:3d:c3:ab:98:d7:1c:71:d9:48:a6:31:
                    e2:aa:2d:93:20:01:f0:64:9c:21:81:57:6f:31:8a:
                    1e:15:e1:e5:de:52:26:c1:e2:7f:48:62:db:5f:be:
                    d3:c5:b8:4d:27:79:d1:b2:52:52:ec:b5:99:b4:c0:
                    4d:e1:ec:bb:59:0c:6e:07:c8:24:1a:5c:a3:68:83:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:7B:53:32:E1:C5:8F:06:13:2D:06:38:D4:0C:81:3F:D8:37:E5
            X509v3 Authority Key Identifier:
                keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:99:ec:19:9d:26:56:34:82:f6:34:6d:72:e4:3f:77:d5:51:
         95:8d:80:29:8f:2d:bf:50:b7:99:f6:2d:4e:ac:94:41:5e:53:
         16:8e:b9:6d:01:a1:81:20:3b:6f:3b:27:a7:cd:d4:e9:06:20:
         18:2e:a5:81:32:9e:22:17:54:74:40:a3:29:20:1e:b5:55:87:
         9d:a0:01:50:54:13:53:36:c3:79:25:b4:64:b5:0a:92:67:ff:
         1f:d1:52:01:e4:49:e3:20:db:51:a8:49:58:cf:16:c3:d0:d6:
         a5:9c:fb:1c:95:a9:1e:69:25:0b:97:b9:81:48:19:86:24:15:
         a8:50:a8:4c:c3:62:f1:be:fd:34:38:45:d5:2e:06:f2:aa:a1:
         03:8f:19:b8:06:21:57:cb:4a:ef:1a:ce:fb:07:37:cb:95:cf:
         6a:7f:2a:a3:c6:98:97:1c:a8:6c:30:d3:b1:27:69:b1:2c:14:
         e8:dd:35:6c:63:77:13:bb:2c:fd:6f:ef:b4:46:df:31:85:25:
         20:85:6b:d4:e0:5a:eb:68:54:55:b0:18:40:bb:55:71:74:3e:
         49:ab:0b:7c:28:b3:34:26:7f:e8:1a:95:6f:4d:69:18:33:6c:
         9b:49:3e:8c:4c:ce:72:23:04:90:d4:a4:24:ef:bc:1a:de:74:
         99:64:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org