Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
File:                     RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json)
Hash identifier:          UYCkrgkMB7vBQNgMRiaOMaRV2TDhfGu0xlLlGNDfWgk=
Subject key identifier:   9F:96:CD:C5:01:08:F7:80:45:F8:DD:56:F5:BB:F7:C9:71:23:47:9E
Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51
Certificate issuer:       /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
Certificate serial:       1A01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
Manifest number:          230E
Signing time:             Fri 22 Nov 2024 16:22:18 +0000
Manifest this update:     Fri 22 Nov 2024 16:22:18 +0000
Manifest next update:     Fri 29 Nov 2024 16:22:18 +0000
Files and hashes:         1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: BSbcHgM6RS0EaQ/rFpKHrjI2guOqS03O953kpX7msCo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6657 (0x1a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
        Validity
            Not Before: Nov 22 16:22:18 2024 GMT
            Not After : Nov 29 16:22:18 2024 GMT
        Subject: CN=6740afba-c6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:4d:d7:3a:4e:08:66:75:c4:11:21:56:31:
                    87:ba:3a:e1:37:08:90:d1:8c:ff:8b:8f:6b:50:12:
                    b0:9d:a0:0c:17:f0:21:4c:31:af:0e:f4:53:9b:93:
                    85:f6:d5:05:47:55:a3:1c:ab:da:b2:7f:57:ac:45:
                    15:49:e8:cb:00:96:b4:57:df:87:d0:a3:e0:84:e1:
                    93:fb:b2:11:99:b8:22:da:b6:a6:21:40:0b:13:8c:
                    e6:61:d5:2e:3e:62:ff:2e:6b:30:2d:3e:2e:25:44:
                    1f:5b:28:6f:d8:f3:9f:8f:7f:50:11:ae:36:e9:2a:
                    6e:6c:15:e4:28:03:64:72:ae:c1:30:55:96:b5:e1:
                    ad:c8:76:74:9b:14:57:0f:10:4c:7b:f5:45:94:a1:
                    9f:d9:16:9d:d7:ce:e2:a1:f1:04:75:17:9d:05:e5:
                    e0:60:af:ed:f9:62:cd:e0:a2:e0:06:55:00:ab:3b:
                    df:39:fc:7f:0a:1a:56:21:41:7d:19:39:f7:95:d0:
                    9c:86:58:36:33:05:7f:19:6e:f6:ca:0b:07:54:e7:
                    d4:0f:07:91:6e:20:37:33:5d:6e:5d:7f:d0:d0:84:
                    56:e5:15:1e:0f:e6:3c:d4:f9:3b:96:c8:70:71:b4:
                    e0:2e:4f:5e:a4:3a:7f:5c:ae:ad:2b:41:07:3b:e0:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:CD:C5:01:08:F7:80:45:F8:DD:56:F5:BB:F7:C9:71:23:47:9E
            X509v3 Authority Key Identifier:
                keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:6a:69:c1:f0:cc:c6:8f:e1:bb:fa:6d:4a:be:24:d4:a2:
         33:ce:28:1a:96:a5:d3:5c:6e:b1:89:04:09:52:47:b3:e1:e0:
         52:6a:a8:f5:be:0e:99:d6:f6:9f:fb:e6:54:1e:f9:52:32:12:
         2d:10:d5:b9:8a:77:b0:0e:67:c0:c4:56:b8:ca:57:9d:99:0d:
         0c:64:fb:3c:f8:1a:fd:59:86:bf:ea:05:61:d4:eb:11:a7:98:
         95:cb:b5:ce:2a:69:6c:af:8a:84:ce:2a:1b:f6:3b:96:7e:4c:
         61:49:14:d0:31:7d:99:c4:1c:9c:cf:29:4c:b4:25:ec:25:f5:
         78:8a:93:af:de:63:cb:05:70:fd:db:45:2d:8e:07:40:95:81:
         ff:3a:88:d5:52:51:e9:e6:09:60:d5:a3:46:6b:51:ae:c9:ee:
         3a:2a:5b:3d:69:5a:8e:21:e7:42:df:aa:36:04:7f:25:e2:57:
         29:a9:c1:8e:19:bd:e6:d3:b4:0c:6b:b1:0e:ad:6b:e8:0b:46:
         f3:40:d7:c9:ba:86:20:85:e0:b3:5b:1b:6e:65:bc:0a:1f:df:
         12:eb:6e:b7:e1:6c:c4:5f:62:12:85:47:3b:1b:3f:2b:1f:d9:
         13:d1:19:26:03:73:62:6c:1d:d6:e3:76:b4:5c:6b:ee:d5:fa:
         fd:04:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org