Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
File:                     YvelRApaUxvswWNB8-4xM5YTfo0.mft (raw, json)
Hash identifier:          9VIUTidTtPfrZ2U/3U1q/cjJmcAyzS8PRFHq8vtQhs0=
Subject key identifier:   42:DC:6F:7C:DB:93:B6:A5:B1:D2:8D:99:F4:2A:C1:44:05:2D:2E:11
Authority key identifier: 62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
Certificate issuer:       /CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
Manifest number:          04
Signing time:             Sat 23 Nov 2024 06:10:57 +0000
Manifest this update:     Sat 23 Nov 2024 06:10:57 +0000
Manifest next update:     Sat 30 Nov 2024 06:10:57 +0000
Files and hashes:         1: YvelRApaUxvswWNB8-4xM5YTfo0.crl (hash: knnpU33F23y/w+fh4NUEVoS27jOfP/qva394GqI96bQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl
                          rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
        Validity
            Not Before: Nov 23 06:10:57 2024 GMT
            Not After : Nov 30 06:10:57 2024 GMT
        Subject: CN=674171f1-49a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:fa:82:c8:02:80:0b:65:5f:5d:92:83:e4:
                    c5:94:a4:06:10:db:10:6b:47:28:a1:b9:a0:fc:0f:
                    a7:af:33:3d:21:52:21:02:b1:8b:a8:68:87:1b:54:
                    49:bb:ef:40:82:66:4a:a1:1f:0f:da:03:8e:24:92:
                    22:a6:84:e0:81:28:3b:8b:6c:d2:bd:da:cd:04:cf:
                    9f:f1:fe:70:29:37:c6:83:3f:98:ac:a5:96:96:af:
                    ce:eb:22:77:cb:cd:e8:76:b0:f6:68:aa:96:29:b1:
                    47:37:e1:61:28:77:22:f9:d2:69:0c:22:fa:16:40:
                    23:06:06:cb:99:1d:99:06:9e:a4:1e:09:8d:f0:d7:
                    1f:72:fb:7f:db:54:5a:7b:9c:24:56:73:d2:28:c1:
                    19:54:08:9e:3c:61:39:89:e1:06:b3:66:b3:60:e2:
                    3e:6c:02:ef:dd:2d:b4:86:f4:79:55:a2:78:db:74:
                    7b:53:f0:6e:71:67:1a:e1:92:60:f8:23:a0:ed:85:
                    36:f2:5c:27:ab:d3:28:79:49:1e:dd:8b:63:24:7e:
                    4e:30:3b:62:5e:22:67:37:80:b8:31:10:11:45:b7:
                    ef:ee:28:33:bb:52:fb:84:5d:ca:da:96:99:39:96:
                    8d:f2:e0:7c:1c:30:cc:96:77:f4:ca:f6:6c:f1:08:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:6F:7C:DB:93:B6:A5:B1:D2:8D:99:F4:2A:C1:44:05:2D:2E:11
            X509v3 Authority Key Identifier:
                keyid:62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:fc:68:46:2e:f6:f3:53:d0:ce:d8:71:e4:22:3c:e4:15:
         89:d7:fd:fc:4c:97:a2:b6:02:1b:42:ff:5e:e6:18:b3:25:d4:
         68:7e:3c:55:25:cb:9f:47:51:3a:82:4f:41:9f:f5:b3:98:48:
         39:e6:35:a2:3c:ab:7c:48:35:4a:a9:a8:16:e0:bd:f6:82:39:
         b1:2b:95:bd:1d:b0:65:55:eb:10:32:2f:a7:d8:0d:58:22:f2:
         2f:9b:df:80:9b:05:8c:b7:d7:dc:b7:86:36:1c:65:99:7a:1f:
         c9:ed:b4:58:c6:0a:d5:ae:b6:09:5d:de:fe:a7:a6:18:a3:92:
         5a:80:b1:dd:cc:1f:a4:b3:af:e3:ba:ed:17:5a:2e:e7:80:54:
         ca:a1:9a:47:e5:d3:83:64:35:f4:d3:fe:12:0e:79:fc:94:ab:
         7d:9d:f1:40:bd:a3:33:ef:a5:f5:7d:9e:f9:11:81:25:03:f4:
         8b:74:e6:e7:a2:6e:01:c7:8e:2c:2d:08:36:a3:88:d2:ec:0b:
         a2:32:bb:bd:d7:0c:85:da:26:bc:e2:81:41:81:de:52:fd:39:
         8d:4c:d5:c4:42:f0:45:1b:b4:3d:11:08:6e:04:e9:29:eb:13:
         12:5e:d8:ed:f9:15:ee:68:c0:b9:78:c1:d0:bf:7b:4d:40:de:
         3c:ab:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org