Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft
File:                     k8Etg9u4jyF3q1jjn66KyjEjnZE.mft (raw, json)
Hash identifier:          6Bge2pI1fx+RO+jG+kFqOu5SjN4bTW2j6U9T6H19kfc=
Subject key identifier:   A8:1C:20:1D:7D:9F:52:F7:ED:52:A3:3D:62:3D:7B:36:2F:9F:E3:EB
Authority key identifier: 93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91
Certificate issuer:       /CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft
Manifest number:          025E
Signing time:             Sat 23 Nov 2024 01:15:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:15:49 +0000
Manifest next update:     Sat 30 Nov 2024 01:15:49 +0000
Files and hashes:         1: k8Etg9u4jyF3q1jjn66KyjEjnZE.crl (hash: wv6/QGJdjQwCTl6536isTCJX2YOjUqFByYol2gVgiCo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.crl
                          rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91
        Validity
            Not Before: Nov 23 01:15:49 2024 GMT
            Not After : Nov 30 01:15:49 2024 GMT
        Subject: CN=67412cc5-349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:ab:00:3b:94:25:43:40:2f:36:51:b6:63:
                    40:f5:c2:0a:ca:63:7b:dc:cd:d8:3a:c8:c6:36:ee:
                    2b:9e:0a:4b:38:79:4d:a3:b2:82:f2:9a:db:8b:18:
                    ac:73:bd:21:50:c5:ce:99:fb:1b:ef:06:b6:40:eb:
                    af:82:cd:52:d5:b3:b6:75:c0:29:2e:d6:a1:14:c2:
                    16:bf:eb:b5:80:3b:b6:ba:8f:d8:1c:36:7c:41:a6:
                    98:9d:43:22:25:76:34:c8:6a:73:fa:11:b6:74:0d:
                    14:cd:31:a0:34:c3:69:fb:64:1f:2b:99:52:1a:73:
                    74:ba:8f:88:26:cf:3d:ec:6f:67:9a:9c:3d:22:c9:
                    9a:be:8a:44:9f:7b:e5:21:98:9c:12:de:28:78:22:
                    82:12:f6:eb:37:b1:eb:8f:5f:51:f5:5c:82:93:1e:
                    1a:87:3b:c4:e2:f8:b0:8c:59:33:f2:9f:c4:13:bc:
                    43:cf:2d:a6:ee:7e:76:59:60:0a:fa:6c:41:ce:ec:
                    8c:81:ff:c9:c5:bc:9c:6f:b4:70:bf:8d:9a:50:26:
                    5a:52:49:3c:64:93:de:28:c3:bd:e5:10:60:bd:06:
                    5d:0c:57:ad:c9:ac:8f:51:47:4f:e9:4c:a2:07:bc:
                    52:42:7b:9f:ed:1a:69:fc:e2:99:b9:b7:3e:c1:ae:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1C:20:1D:7D:9F:52:F7:ED:52:A3:3D:62:3D:7B:36:2F:9F:E3:EB
            X509v3 Authority Key Identifier:
                keyid:93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:76:39:a7:81:51:3b:03:62:e9:10:f0:54:a0:a3:aa:33:aa:
         30:20:e2:36:9b:77:8f:d7:67:a8:66:fc:3d:15:63:82:74:b2:
         08:0f:df:30:ae:81:ff:50:6c:2c:a9:67:19:e2:e2:e6:91:35:
         82:90:a4:2c:60:13:bc:7e:5e:fd:a7:de:83:2a:ac:86:0e:2b:
         98:1b:27:1f:d0:9f:b6:ce:07:18:8a:3d:c1:52:b1:f7:7d:56:
         23:a5:fa:8d:18:2f:c9:9a:54:8e:87:c8:56:82:15:45:24:9e:
         47:de:da:79:d2:1b:e8:fa:bd:d1:3f:9d:8b:8d:f1:92:47:67:
         1a:b5:78:89:8d:79:36:10:62:64:dd:35:dc:de:41:6f:d8:38:
         36:35:4a:7a:6e:30:4f:1d:d0:54:d1:73:5d:dc:f2:98:f0:4c:
         e0:59:1b:98:dd:06:cb:76:43:71:f9:c7:95:f8:d9:a0:d8:f4:
         f6:79:2a:cc:47:db:d4:a2:89:67:9a:75:aa:34:9c:6b:d1:a8:
         2e:07:4c:d5:a9:2d:94:67:ae:9a:39:c6:63:69:6c:a0:d4:d9:
         1e:2b:e0:41:b0:be:94:8c:c0:a3:b0:75:b3:2b:0e:ab:1e:12:
         12:63:d6:4a:29:41:18:ba:45:b6:6d:0d:4a:50:b6:a8:56:2c:
         9f:74:76:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCMDAxMTAvBgNVBAUTKDkzQzEyRDgzREJCODhGMjE3N0FCNThFMzlGQUU4QUNB
MzEyMzlEOTEwHhcNMjQxMTIzMDExNTQ5WhcNMjQxMTMwMDExNTQ5WjAYMRYwFAYD
VQQDEw02NzQxMmNjNS0zNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wWrADuUJUNALzZRtmNA9cIKymN73M3YOsjGNu4rngpLOHlNo7KC8prbixis
c70hUMXOmfsb7wa2QOuvgs1S1bO2dcApLtahFMIWv+u1gDu2uo/YHDZ8QaaYnUMi
JXY0yGpz+hG2dA0UzTGgNMNp+2QfK5lSGnN0uo+IJs897G9nmpw9IsmavopEn3vl
IZicEt4oeCKCEvbrN7Hrj19R9VyCkx4ahzvE4viwjFkz8p/EE7xDzy2m7n52WWAK
+mxBzuyMgf/Jxbycb7Rwv42aUCZaUkk8ZJPeKMO95RBgvQZdDFetyayPUUdP6Uyi
B7xSQnuf7Rpp/OKZubc+wa4XZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgcIB19
n1L37VKjPWI9ezYvn+PrMB8GA1UdIwQYMBaAFJPBLYPbuI8hd6tY45+uisoxI52R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwMC8xNEMyODA4MkYx
QUExMUVDQkYzNTVDMjlDNEY5QUUwMi9rOEV0Zzl1NGp5RjNxMWpqbjY2S3lqRWpu
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s4RXRnOXU0anlGM3ExampuNjZLeWpFam5aRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkIwMC8xNEMyODA4MkYxQUExMUVDQkYzNTVDMjlDNEY5QUUwMi9rOEV0Zzl1NGp5
RjNxMWpqbjY2S3lqRWpuWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0djmngVE7A2LpEPBUoKOqM6owIOI2m3eP12eoZvw9FWOCdLIID98w
roH/UGwsqWcZ4uLmkTWCkKQsYBO8fl79p96DKqyGDiuYGycf0J+2zgcYij3BUrH3
fVYjpfqNGC/JmlSOh8hWghVFJJ5H3tp50hvo+r3RP52LjfGSR2catXiJjXk2EGJk
3TXc3kFv2Dg2NUp6bjBPHdBU0XNd3PKY8EzgWRuY3QbLdkNx+ceV+Nmg2PT2eSrM
R9vUoolnmnWqNJxr0aguB0zVqS2UZ66aOcZjaWyg1NkeK+BBsL6UjMCjsHWzKw6r
HhISY9ZKKUEYukW2bQ1KULaoViyfdHah
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org