Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
File:                     ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json)
Hash identifier:          IMkAWoiJGffoL+u+Rx5wdKJjz3VSM0JgTTZQjp6V4kU=
Subject key identifier:   C8:EB:21:09:3C:AE:7B:AE:CD:D7:03:FD:17:D3:D3:3F:9E:76:31:B8
Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90
Certificate issuer:       /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
Manifest number:          1070
Signing time:             Fri 22 Nov 2024 19:47:01 +0000
Manifest this update:     Fri 22 Nov 2024 19:47:01 +0000
Manifest next update:     Fri 29 Nov 2024 19:47:01 +0000
Files and hashes:         1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: T0z9CS0dd3bqL951oOgDAd8qxDjusJMxXslx9jz45Ns=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90
        Validity
            Not Before: Nov 22 19:47:01 2024 GMT
            Not After : Nov 29 19:47:01 2024 GMT
        Subject: CN=6740dfb5-0f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:1b:f8:35:ff:38:86:e9:83:bc:07:12:6f:
                    dc:9b:b7:43:b4:65:53:65:51:69:12:a9:49:bd:5c:
                    81:58:a0:13:b3:77:b7:17:4b:be:3b:e1:10:f7:79:
                    57:ae:45:4b:80:a3:05:e2:5d:42:6c:53:9a:88:13:
                    ae:3b:c8:90:79:4b:f1:5c:86:cc:24:e0:30:88:71:
                    38:c4:2c:67:b8:61:1c:a7:8b:8a:5c:f1:89:1e:55:
                    91:a0:07:c5:7e:59:8f:f7:e2:75:93:9f:60:5a:6b:
                    84:2b:c8:b8:59:0b:34:8e:db:97:fd:ce:2f:3b:90:
                    c6:2b:e1:14:f1:04:8c:9d:d1:82:0b:94:8f:ca:ac:
                    32:7d:91:27:7c:77:39:fe:68:76:dc:c7:59:18:d3:
                    b6:ce:d5:f5:a2:96:95:37:c4:b8:d7:d1:e2:51:38:
                    63:ad:d0:37:4e:16:a7:f0:0e:ad:3a:89:06:2e:ed:
                    bb:06:a3:39:0d:cf:92:70:95:a9:79:73:c4:b5:83:
                    13:5c:e0:b8:12:e5:8b:95:a6:6f:2d:bb:9a:a0:bb:
                    9f:f0:0c:45:25:76:82:40:a6:35:ba:e7:8a:2a:a7:
                    82:08:24:7f:e7:b6:c8:cb:00:9e:20:9e:a2:13:93:
                    34:f3:85:54:74:25:d5:ed:d0:1c:a2:f7:74:7a:56:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EB:21:09:3C:AE:7B:AE:CD:D7:03:FD:17:D3:D3:3F:9E:76:31:B8
            X509v3 Authority Key Identifier:
                keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:50:e0:21:37:65:e9:c3:3c:fa:28:55:35:12:b5:b3:2c:
         82:51:9c:80:4f:60:79:5a:38:d2:2c:b6:eb:48:55:43:a9:f6:
         ea:2d:cf:82:8d:f1:16:29:b5:f6:c6:bb:04:90:70:2d:c4:6d:
         60:8a:be:e9:3d:1b:6e:5a:83:7d:af:03:a7:a5:46:19:12:cf:
         6d:7e:a4:a6:f3:fc:96:78:c7:72:05:39:0b:83:fb:bf:23:04:
         ee:69:ac:3a:38:6b:15:e3:82:60:80:d1:50:b6:4e:58:73:31:
         ab:52:9f:89:c5:51:96:ea:3a:b9:7c:a4:1b:ac:d1:64:c8:b1:
         59:4f:0d:95:c0:5b:91:bf:d4:ac:4d:57:03:2a:8f:9f:b4:84:
         a4:83:82:61:8e:55:01:d9:fd:7c:69:c2:cc:35:9b:30:f4:e1:
         ed:68:0d:b8:71:11:9d:04:96:94:48:1b:27:47:45:d8:1d:8e:
         61:cb:82:3c:b6:d4:59:42:b1:d5:ff:d1:e3:2f:7f:fc:f1:47:
         55:df:f3:17:ea:a5:ce:e9:b6:43:10:bc:a9:44:ff:6c:c4:7d:
         13:e7:04:56:2a:4a:2b:9c:f2:52:7b:b8:a7:4f:4f:79:96:50:
         d1:c6:1a:50:78:39:39:a5:8f:fa:2b:d7:3b:d2:fa:00:74:33:
         9a:71:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:25 2024 by rpki-client on console-fra.rpki-client.org