Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
File:                     BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json)
Hash identifier:          JycAu3fbiFHokEKQTgiSSncBz1iZq1vVqJjY+VSiwTI=
Subject key identifier:   06:14:F9:D5:1D:F5:43:C0:B7:B7:19:C0:61:13:84:58:47:8E:2D:43
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Certificate issuer:       /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
Manifest number:          07
Signing time:             Sat 23 Nov 2024 06:06:34 +0000
Manifest this update:     Sat 23 Nov 2024 06:06:34 +0000
Manifest next update:     Sat 30 Nov 2024 06:06:34 +0000
Files and hashes:         1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: SsVci0ry4vc0kpthJnwKCib6VFFzOYx3Hj0JyWXURDA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
        Validity
            Not Before: Nov 23 06:06:34 2024 GMT
            Not After : Nov 30 06:06:34 2024 GMT
        Subject: CN=674170ea-ecc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e7:01:e2:3e:69:44:97:95:19:d3:d5:04:64:
                    e3:9a:89:19:74:03:d1:50:9f:6c:95:7d:e9:6a:21:
                    27:99:4e:a8:58:8d:5c:59:5f:53:ea:4c:88:2c:95:
                    c2:44:a2:e5:84:c6:dc:01:11:d9:e3:ef:bb:ea:93:
                    c0:0a:6e:5a:39:00:63:fd:14:a3:df:09:8d:01:10:
                    72:1d:92:12:a8:cc:d3:24:c2:fb:4d:73:56:bd:8e:
                    15:75:ee:6c:a1:4d:9e:62:e9:13:99:45:4c:2f:1c:
                    c8:e1:92:4c:5b:6d:ec:1c:d7:62:4c:bd:0a:29:d2:
                    21:f9:89:20:e7:bf:a0:6e:4a:39:3b:12:8d:f7:9c:
                    ad:df:60:5b:2a:c3:c9:3e:76:90:96:5e:a7:4d:42:
                    ca:b5:ba:cc:ed:45:11:de:e3:10:9d:f2:6a:f9:84:
                    ef:1c:ad:0c:a4:bf:ec:8d:dd:56:2c:03:64:1d:2b:
                    26:98:e9:2d:4f:82:80:e5:10:b0:fc:58:d3:74:8c:
                    03:ef:4d:1d:2f:fd:8d:62:59:ea:1f:75:95:c3:74:
                    5b:e3:24:9a:e7:0a:96:17:6e:e3:8e:65:d5:df:bf:
                    33:3b:0f:6b:41:27:80:dc:06:c9:00:a6:e4:95:c8:
                    de:92:8b:cf:a5:83:d9:48:83:59:14:6b:0b:e3:95:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:14:F9:D5:1D:F5:43:C0:B7:B7:19:C0:61:13:84:58:47:8E:2D:43
            X509v3 Authority Key Identifier:
                keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:51:e2:58:ea:4d:36:33:99:64:db:2a:51:61:8e:81:cf:
         9e:5e:46:81:b9:ac:a3:61:94:f2:36:34:a5:c9:2a:19:a7:8b:
         91:13:34:08:34:07:c2:13:fe:3f:ea:41:cd:83:79:0f:06:df:
         47:76:4d:63:c8:d9:a8:fe:22:50:de:a8:a3:3d:35:2c:f2:bb:
         e0:93:a8:e5:6b:34:81:52:74:cd:24:7e:70:88:34:98:69:7b:
         a6:4d:c8:15:ec:09:62:ae:9b:e5:d7:4c:5a:73:dc:06:f5:89:
         49:1b:3e:36:0b:51:ef:75:62:11:71:ac:16:93:57:98:f5:86:
         8e:e4:dd:b9:df:60:2d:63:51:6f:f1:f6:b8:25:34:c0:ea:7d:
         34:7e:eb:a0:76:54:5f:1d:75:b1:eb:49:a3:be:36:0c:4b:13:
         11:c8:d0:20:17:5b:66:51:14:13:b4:75:c2:ec:df:f2:45:05:
         66:56:47:c9:0e:76:e6:9c:fe:33:31:b6:dd:78:c0:92:b2:28:
         d2:5a:84:16:2c:a1:3e:36:97:83:29:a2:08:fb:1a:e2:36:e1:
         0a:de:f4:d7:0d:26:ab:63:a2:57:11:a5:54:41:4e:36:3f:67:
         fe:f0:1c:64:e8:bf:2a:5c:63:37:d7:9c:00:ed:4f:5c:e3:a2:
         56:41:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org