Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
File:                     Lvixd2KxkBov3d7v9lAe45ar24w.mft (raw, json)
Hash identifier:          mjRo6SdPIFHZB6S+MZtq41om/qsQ33d70eQxGKgtoGE=
Subject key identifier:   F2:8F:7F:07:F3:83:66:0D:E9:F5:A1:10:0D:5E:2B:DC:E7:21:54:9D
Authority key identifier: 2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C
Certificate issuer:       /CN=A912E92E/serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
Certificate serial:       1FB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
Manifest number:          34ED
Signing time:             Fri 22 Nov 2024 16:00:01 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:01 +0000
Manifest next update:     Fri 29 Nov 2024 16:00:01 +0000
Files and hashes:         1: Lvixd2KxkBov3d7v9lAe45ar24w.crl (hash: hZXlPDCn2cz/F/WDsLNk1+/PRYG81fk+SI07Y3GLK7A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl
                          rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8116 (0x1fb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E92E/serialNumber=2EF8B17762B1901A2FDDDEEFF6501EE396ABDB8C
        Validity
            Not Before: Nov 22 16:00:01 2024 GMT
            Not After : Nov 29 16:00:01 2024 GMT
        Subject: CN=6740aa81-c516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:d4:98:a9:59:2d:4d:bd:44:d1:b7:c4:82:
                    e9:01:0d:bd:37:e8:4d:01:af:2a:99:71:f3:c4:7b:
                    87:bd:db:65:29:f1:c5:d6:10:bb:84:25:be:7f:f1:
                    e6:2e:2e:24:63:b2:58:6b:d7:62:68:d8:6c:c9:18:
                    6d:81:41:78:3d:93:51:08:fc:c9:83:b9:61:5c:28:
                    41:87:83:76:bf:19:e9:b1:68:c8:b7:95:66:ec:90:
                    f5:88:67:89:20:05:9c:9f:a7:e0:57:55:2a:94:55:
                    45:b4:df:5a:4e:13:62:71:44:0a:28:66:a1:1c:b1:
                    17:35:dc:88:1f:4f:e7:f6:7e:3e:27:4d:41:59:4d:
                    e8:9c:a6:e7:a9:91:1a:2b:c2:b9:db:ad:31:3d:08:
                    10:f0:cf:13:f0:d8:86:f3:0d:3c:a5:b4:ee:16:35:
                    d9:9a:e0:87:dc:43:c8:62:2e:3d:8a:f9:a7:1b:3f:
                    a7:7f:81:bf:59:48:63:60:73:99:78:a7:fe:b2:40:
                    ce:ef:d3:de:09:e4:0e:e7:6b:2e:dc:10:84:27:81:
                    00:1d:13:c6:1e:97:7a:02:bd:a2:18:79:fb:4c:7d:
                    02:58:1c:27:a0:8e:56:0b:4f:d6:6b:ee:23:1d:2e:
                    7d:b1:11:3a:b9:6b:b5:a7:bc:45:75:69:16:b9:84:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8F:7F:07:F3:83:66:0D:E9:F5:A1:10:0D:5E:2B:DC:E7:21:54:9D
            X509v3 Authority Key Identifier:
                keyid:2E:F8:B1:77:62:B1:90:1A:2F:DD:DE:EF:F6:50:1E:E3:96:AB:DB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvixd2KxkBov3d7v9lAe45ar24w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/Lvixd2KxkBov3d7v9lAe45ar24w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b3:f8:41:2e:9b:cc:8e:56:10:fd:69:14:92:6b:ab:1b:72:
         0d:db:83:75:e8:ab:5b:ae:ec:a7:97:48:a1:64:88:5c:fa:14:
         34:07:07:d7:3d:24:49:f8:54:0b:70:12:09:51:90:28:5b:60:
         ac:28:7d:4b:96:00:58:ba:64:ea:4a:e2:10:a6:3a:be:15:f2:
         cb:97:b4:14:20:6c:39:48:75:9a:bd:25:55:0d:18:ff:16:56:
         0f:cf:9f:02:53:a6:86:0b:9a:ca:d7:46:cf:a9:0b:e9:c3:92:
         9d:f6:53:23:1a:75:d8:9a:69:da:40:39:15:90:56:4d:a2:01:
         8a:27:a5:5d:c3:e1:cb:fd:39:95:7a:f5:23:16:9e:cd:85:fc:
         3f:94:d9:89:d9:18:7f:4b:c2:09:05:19:68:4b:67:3a:75:fc:
         3b:df:cb:bf:ae:2d:4f:53:62:de:45:ce:df:55:ff:09:1d:24:
         aa:1c:3d:f5:b1:37:31:af:5f:1d:af:42:3f:24:b1:d8:78:eb:
         14:b4:4f:1c:92:a8:15:1f:72:87:f0:57:96:ae:d7:b0:12:fa:
         c0:09:15:7b:c1:b6:84:f5:c8:d8:8f:85:4d:55:be:33:97:00:
         6d:2f:d0:bb:76:64:8f:e1:81:2a:4a:3b:56:c0:87:7d:1a:19:
         6a:f9:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org