Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
File:                     dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json)
Hash identifier:          YZxCmt9Udujkog6AUf3Fb8g6qIyeft1ARHvqkJrBaYs=
Subject key identifier:   B6:A5:49:1C:48:6A:32:B4:40:EC:7D:7C:15:59:77:7D:12:75:55:87
Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0
Certificate issuer:       /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
Manifest number:          05ED
Signing time:             Fri 22 Nov 2024 14:48:50 +0000
Manifest this update:     Fri 22 Nov 2024 14:48:49 +0000
Manifest next update:     Fri 29 Nov 2024 14:48:49 +0000
Files and hashes:         1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: rS3qiBHVeeGC20oZ7dh94RF0P5swHl94eFl0Ig0NqEQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl
                          rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0
        Validity
            Not Before: Nov 22 14:48:49 2024 GMT
            Not After : Nov 29 14:48:49 2024 GMT
        Subject: CN=674099d1-14c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:b7:cd:12:62:d9:88:a4:9a:d5:e2:a8:09:
                    68:9c:70:09:2e:b7:b2:e3:e2:52:28:e0:79:36:ba:
                    ea:77:70:10:b5:e3:13:48:60:54:79:ce:c3:d1:58:
                    db:a4:bf:a5:d1:25:b2:80:38:09:35:41:57:f6:e3:
                    1d:7a:d7:0b:a6:61:4b:95:25:fe:3e:d8:ee:c1:48:
                    91:f4:e1:70:60:64:de:86:17:bd:f9:8e:5a:2c:18:
                    76:2f:ae:b8:af:0a:6d:34:07:70:93:be:55:a9:6e:
                    e0:6c:76:e5:62:bd:8b:01:bb:8d:8a:7d:26:45:f2:
                    9c:8e:6b:6b:af:15:5b:d2:1e:1d:fe:4d:18:01:d3:
                    1a:37:f6:38:3a:7f:3c:11:a3:7f:45:e6:28:6d:e9:
                    90:e5:73:82:1e:dc:99:59:fa:9d:c9:29:a2:4d:f8:
                    64:74:4d:e5:f4:f1:ab:1a:dc:cc:b4:a9:76:d8:05:
                    66:c2:ae:79:8b:bd:fb:97:76:ba:22:82:b3:ef:8f:
                    30:98:df:90:de:ef:4e:ac:b9:db:ed:e1:31:f2:77:
                    64:11:f8:37:ec:c6:cc:98:40:2e:90:e4:d6:26:fb:
                    67:8c:95:f9:78:8c:36:8c:82:50:04:66:59:30:2f:
                    fa:2c:e7:b7:a3:f7:16:77:f0:41:6e:1f:cb:62:dd:
                    8d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A5:49:1C:48:6A:32:B4:40:EC:7D:7C:15:59:77:7D:12:75:55:87
            X509v3 Authority Key Identifier:
                keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:65:bf:2e:85:65:23:40:ab:74:e9:75:c2:d5:5e:2e:c7:3c:
         37:57:d3:fb:c8:8f:61:c9:bd:e6:33:bb:7f:6e:a9:d6:9e:b3:
         4f:1e:c1:34:5a:fa:77:b1:c9:77:a2:22:48:92:bf:65:d8:4d:
         1d:7e:ad:5e:12:ac:12:6c:83:c0:34:c9:e7:b5:d3:97:9b:b1:
         ef:3d:ac:06:84:7e:4c:86:bd:5c:11:93:5c:5f:20:46:a5:2c:
         cb:d7:78:08:14:6e:b1:05:71:05:90:98:f0:a0:43:98:32:31:
         73:c7:f5:80:76:76:ad:04:3f:4d:04:6a:77:a7:df:78:af:6f:
         a4:81:40:1a:2b:55:d0:f6:1d:44:ab:9d:89:74:17:07:1d:31:
         93:81:29:8e:b4:b8:75:14:35:89:93:3a:0c:6c:60:30:2e:99:
         a8:f2:19:bd:ac:3d:50:5d:42:fd:aa:ce:bc:f4:da:17:a2:3d:
         25:80:22:be:af:33:5d:36:c1:cc:b0:c9:92:22:40:0a:44:a3:
         e8:36:b2:0f:b6:a2:1d:63:80:1d:b0:f8:4b:68:c3:8c:1d:53:
         87:3a:08:be:c3:31:8c:e8:57:1b:60:b7:ca:b4:09:48:33:f3:
         c0:8b:f7:54:0a:ea:68:66:62:54:94:81:96:9b:ae:d0:94:a9:
         70:69:54:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjFFMTMxMTAvBgNVBAUTKDc0RTFDQjgzMzYyNjg3MzQ3ODkzMkNBMjExODhBODhG
REYyRTlERTAwHhcNMjQxMTIyMTQ0ODQ5WhcNMjQxMTI5MTQ0ODQ5WjAYMRYwFAYD
VQQDEw02NzQwOTlkMS0xNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAi3zRJi2YikmtXiqAlonHAJLrey4+JSKOB5Nrrqd3AQteMTSGBUec7D0Vjb
pL+l0SWygDgJNUFX9uMdetcLpmFLlSX+PtjuwUiR9OFwYGTehhe9+Y5aLBh2L664
rwptNAdwk75VqW7gbHblYr2LAbuNin0mRfKcjmtrrxVb0h4d/k0YAdMaN/Y4On88
EaN/ReYobemQ5XOCHtyZWfqdySmiTfhkdE3l9PGrGtzMtKl22AVmwq55i737l3a6
IoKz748wmN+Q3u9OrLnb7eEx8ndkEfg37MbMmEAukOTWJvtnjJX5eIw2jIJQBGZZ
MC/6LOe3o/cWd/BBbh/LYt2NVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLalSRxI
ajK0QOx9fBVZd30SdVWHMB8GA1UdIwQYMBaAFHThy4M2Joc0eJMsohGIqI/fLp3g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUUxMy8xODNGOTlGQThE
N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6UjRreXlpRVlpb2o5OHVu
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RPSExnelltaHpSNGt5eWlFWWlvajk4dW5lQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MUUxMy8xODNGOTlGQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6
UjRreXlpRVlpb2o5OHVuZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwZb8uhWUjQKt06XXC1V4uxzw3V9P7yI9hyb3mM7t/bqnWnrNPHsE0
Wvp3scl3oiJIkr9l2E0dfq1eEqwSbIPANMnntdOXm7HvPawGhH5Mhr1cEZNcXyBG
pSzL13gIFG6xBXEFkJjwoEOYMjFzx/WAdnatBD9NBGp3p994r2+kgUAaK1XQ9h1E
q52JdBcHHTGTgSmOtLh1FDWJkzoMbGAwLpmo8hm9rD1QXUL9qs689NoXoj0lgCK+
rzNdNsHMsMmSIkAKRKPoNrIPtqIdY4AdsPhLaMOMHVOHOgi+wzGM6FcbYLfKtAlI
M/PAi/dUCupoZmJUlIGWm67QlKlwaVQX
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:14 2024 by rpki-client on console-ams.rpki-client.org