Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
File:                     YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft (raw, json)
Hash identifier:          n7ivB1Ohow24ItlpXy7hii/Zil6zpFfB40d9MeGqiRA=
Subject key identifier:   F1:79:40:CC:43:55:B0:65:80:8B:84:DD:62:D3:81:B4:6F:6C:C9:6D
Authority key identifier: 63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12
Certificate issuer:       /CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112
Certificate serial:       04CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
Manifest number:          04CA
Signing time:             Fri 22 Nov 2024 23:21:15 +0000
Manifest this update:     Fri 22 Nov 2024 23:21:14 +0000
Manifest next update:     Fri 29 Nov 2024 23:21:14 +0000
Files and hashes:         1: YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl (hash: 7r62yKCwBw2rhRjuSQC44OQD/8LuLWYkER8BM10k8ac=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl
                          rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298C7/serialNumber=633ACB8D51D2F088699B8A71491CC7553EC0C112
        Validity
            Not Before: Nov 22 23:21:14 2024 GMT
            Not After : Nov 29 23:21:14 2024 GMT
        Subject: CN=674111ea-9236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:51:c6:26:59:d7:76:a1:85:8e:28:1a:59:
                    ae:16:06:cf:e5:8d:20:8c:6e:40:60:84:f5:a8:a7:
                    52:39:7f:a7:ae:e7:9d:95:f5:30:78:24:fd:af:bb:
                    71:de:fa:6b:32:ff:24:c2:f1:fc:8e:9f:d1:71:36:
                    f7:5c:c7:21:d6:be:21:b3:54:b8:77:36:8f:a6:61:
                    85:fe:e7:11:94:9a:de:9b:d9:f6:a5:25:c3:28:fd:
                    2a:13:06:0b:b3:ac:f8:4a:71:33:5d:8d:dd:52:16:
                    25:10:52:fe:de:99:22:68:d5:90:d1:6d:4b:a1:9b:
                    a9:48:cf:73:0c:be:d0:23:3f:71:33:4d:52:ae:d1:
                    eb:18:cd:46:27:33:7f:73:91:55:12:e8:58:92:52:
                    4c:f8:8b:70:9d:1e:ab:ca:cc:a0:68:29:4e:38:79:
                    0d:d3:95:b9:de:87:1f:ab:2b:c5:7f:08:e7:74:70:
                    2b:8d:ab:65:14:5a:27:00:22:05:00:dd:ec:a9:e5:
                    80:06:a4:65:d9:d5:88:5d:7c:ca:ca:6e:19:b5:bd:
                    8d:b9:88:62:ff:c5:18:b6:5e:f9:47:4a:81:06:d2:
                    65:1c:e8:7e:05:4b:5f:90:3b:18:5c:4a:69:9d:4f:
                    64:c6:4e:e9:a9:11:49:f3:9a:ed:08:4c:11:f1:63:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:40:CC:43:55:B0:65:80:8B:84:DD:62:D3:81:B4:6F:6C:C9:6D
            X509v3 Authority Key Identifier:
                keyid:63:3A:CB:8D:51:D2:F0:88:69:9B:8A:71:49:1C:C7:55:3E:C0:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298C7/D494B8EEFA7F11EB99ADD85CC4F9AE02/YzrLjVHS8Ihpm4pxSRzHVT7AwRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:44:1a:cb:97:a7:71:57:4a:6b:29:31:12:dd:e9:9c:90:
         4d:88:74:13:ed:86:44:f8:37:65:81:32:e9:32:1a:7f:fe:6d:
         ae:b0:1f:a8:b4:de:df:2e:08:ba:ab:09:0d:b7:6a:5c:80:35:
         ff:8c:f8:cf:96:5a:b6:d5:90:7b:a4:60:35:52:d9:ec:b2:4b:
         49:1a:bc:6b:d5:c3:5c:85:b7:db:21:8d:8d:57:69:12:d8:00:
         0a:af:be:f6:4f:b8:8b:da:26:5f:bf:94:f7:1a:60:9e:c8:5c:
         aa:54:88:19:47:c1:1d:86:92:88:d5:d5:a5:28:98:59:0d:e6:
         47:d0:8a:36:4c:2d:7a:78:77:3a:d7:19:e8:b3:04:6f:36:89:
         34:0f:5c:91:2f:d1:f6:f4:a3:e5:56:2b:14:6a:63:39:10:1f:
         c8:71:c6:ea:ee:3d:57:fa:02:ad:c2:b9:9e:ac:37:7e:d7:d8:
         ba:20:48:cf:18:a9:e8:04:b8:d1:e0:d9:d3:d8:7a:bb:14:cb:
         e6:03:da:7b:81:66:7c:55:7a:82:ee:f0:88:0c:26:20:e0:74:
         38:10:a0:74:39:b8:ff:9d:64:c1:89:57:6f:c4:c1:99:91:26:
         38:fd:97:26:09:3e:22:80:26:e7:4b:75:ae:a5:93:42:65:e7:
         30:c2:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org