Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
File:                     L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json)
Hash identifier:          92jUQkqAF9oWG0jAu1T+Hw2S7nKCQ9HnOIqLXXwqUxM=
Subject key identifier:   15:C4:FC:4B:DF:EC:31:61:0B:24:D1:94:D3:0D:2E:17:2B:C1:AC:A4
Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0
Certificate issuer:       /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0
Certificate serial:       33BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
Manifest number:          33BA
Signing time:             Tue 30 Apr 2024 15:13:03 +0000
Manifest this update:     Tue 30 Apr 2024 15:13:03 +0000
Manifest next update:     Tue 07 May 2024 15:13:03 +0000
Files and hashes:         1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: V/r1584nGvPUip2ZnEruwDtnDGUz5lXYbKzh2UUyFfA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl
                          rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 15:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13242 (0x33ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0
        Validity
            Not Before: Apr 30 15:13:03 2024 GMT
            Not After : May  7 15:13:03 2024 GMT
        Subject: CN=66310a7f-a142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:dc:24:6c:3e:ed:06:ad:f3:4e:30:71:f3:
                    bf:bd:1f:26:5b:f9:58:84:3d:0d:28:25:2b:28:47:
                    c6:71:30:9b:65:6e:2c:e7:59:1e:75:e2:b1:ea:2a:
                    4f:65:55:56:0e:db:29:50:98:1e:23:ed:77:84:d8:
                    7d:c9:03:1c:4a:6b:f5:66:43:81:57:dd:3d:ee:e3:
                    8e:47:9a:f8:64:77:ac:0d:3a:85:3c:02:2b:0a:20:
                    4a:66:fd:41:47:23:b6:85:b8:89:4b:57:8b:b4:7d:
                    f3:15:80:3a:c5:83:91:5c:7c:fa:71:b3:f3:e5:73:
                    f3:f8:46:47:8f:10:df:d4:99:ec:81:bb:2d:76:88:
                    df:0a:a0:cb:a0:f3:6e:b6:fe:37:5c:5e:5a:8a:8b:
                    d7:76:ea:d2:4a:32:4f:be:a9:ca:64:ff:b5:f3:5b:
                    8e:a9:88:bd:6e:04:9b:bc:51:96:18:06:7c:d2:5a:
                    55:b9:7a:f1:4c:6a:fd:f0:3d:c5:ea:c6:b9:c5:24:
                    ab:71:ff:b6:81:78:52:73:73:2d:50:cb:d8:03:a0:
                    87:89:92:46:46:be:09:ca:de:7e:45:71:a0:80:68:
                    c4:1b:31:4b:d2:38:ec:e3:75:e7:4e:c4:1a:93:0a:
                    a8:b7:ec:df:a3:92:88:ce:f0:52:94:67:10:30:c1:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:FC:4B:DF:EC:31:61:0B:24:D1:94:D3:0D:2E:17:2B:C1:AC:A4
            X509v3 Authority Key Identifier:
                keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:ef:90:c9:92:06:91:8c:8d:5e:f3:06:e3:36:96:2e:b7:
         3c:71:e3:30:a5:7e:de:5d:f3:21:fb:e2:5f:50:c2:2c:1f:be:
         af:95:94:d1:87:4d:31:99:7a:01:dd:65:af:eb:4a:5c:8c:1c:
         c2:65:47:55:c6:15:bb:6e:a4:13:21:2b:08:f6:5c:49:93:73:
         04:40:15:84:79:09:37:b4:ab:5c:f2:77:14:7a:61:69:23:09:
         b3:bb:a1:b4:4a:9b:53:88:b8:c3:47:15:e5:78:f2:6d:3e:6f:
         01:44:74:9e:26:c3:52:1a:0c:46:19:3a:14:d3:02:e1:6d:1c:
         71:8e:a6:4d:97:cd:06:55:19:fe:a6:ea:cd:b4:f5:22:a7:d8:
         eb:a0:8b:a4:96:f0:fa:db:c3:7f:2b:1d:23:35:2e:17:6d:f0:
         1a:2e:66:19:4d:7d:24:c1:ba:94:3d:fb:0f:78:79:4a:02:79:
         ec:95:d1:df:64:13:a2:84:c4:c0:e7:51:5c:50:9f:96:d4:7d:
         19:ec:3d:5c:ad:5d:b7:4f:08:c5:1d:6f:b2:9c:c5:f9:11:bb:
         a3:b9:a4:dc:ce:c4:76:ff:25:f3:59:11:46:dc:7d:6a:4c:e1:
         c6:8f:a2:7b:1d:ee:a6:76:53:8e:da:af:0a:a4:98:5a:25:63:
         29:6a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:52:28 2024 by rpki-client on console-fra.rpki-client.org