Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
File:                     VM1oEInn9JVSuuxWoHax7PJe_gY.mft (raw, json)
Hash identifier:          9uH1IBQM2fatNifQHutfrzllLohz97X64z9ChMccSgM=
Subject key identifier:   E5:71:AE:E1:8E:58:51:79:79:89:4E:66:CD:FF:3A:C5:3B:D8:FD:9D
Authority key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06
Certificate issuer:       /CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
Manifest number:          168B
Signing time:             Fri 22 Nov 2024 17:52:58 +0000
Manifest this update:     Fri 22 Nov 2024 17:52:57 +0000
Manifest next update:     Fri 29 Nov 2024 17:52:57 +0000
Files and hashes:         1: VM1oEInn9JVSuuxWoHax7PJe_gY.crl (hash: rIAclqTdOp2x2UXBGwkfJaRCqMv9bT6RAAnAIsOJP0A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl
                          rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06
        Validity
            Not Before: Nov 22 17:52:57 2024 GMT
            Not After : Nov 29 17:52:57 2024 GMT
        Subject: CN=6740c4fa-3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:6d:d6:f7:d6:8a:4a:bf:48:b5:dc:d3:bf:
                    91:06:f9:db:0a:bd:d5:c6:39:8f:b8:47:51:9f:02:
                    5f:da:dd:bb:21:5a:6b:5d:44:e4:9b:74:86:72:3c:
                    03:12:56:8e:81:c6:ef:b8:22:8a:1c:cc:ab:97:d5:
                    be:fb:1f:43:ec:e8:98:44:35:0e:e6:e6:d3:5d:5b:
                    17:b7:c4:c1:0e:ae:77:60:73:93:3e:5d:9f:cf:05:
                    27:ef:f9:f4:10:79:fe:21:1b:fa:49:d3:94:9d:51:
                    ae:32:b4:63:12:d6:be:bb:c3:3c:ac:cf:91:c0:93:
                    6e:9b:ab:9f:24:8f:52:1f:58:1d:7c:3c:60:23:02:
                    04:2e:21:fc:da:bc:2d:55:14:a2:fe:a1:c4:d1:93:
                    07:26:cf:76:85:89:95:74:ac:ce:7c:e1:60:ed:4d:
                    ca:78:65:9e:1d:2c:28:d9:d0:21:5d:c8:55:64:1f:
                    4f:00:da:0c:13:12:2a:58:a4:f1:98:aa:43:75:2a:
                    84:ef:7c:d9:a3:47:ce:3e:cf:b8:00:f0:b0:65:cd:
                    40:b5:27:d2:ff:3c:d1:db:f0:f8:01:67:3b:24:ad:
                    f4:be:1a:05:85:e5:46:99:27:b2:c3:57:38:d7:f3:
                    16:2a:1f:52:b2:54:fe:ba:37:40:39:eb:ab:b9:72:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:71:AE:E1:8E:58:51:79:79:89:4E:66:CD:FF:3A:C5:3B:D8:FD:9D
            X509v3 Authority Key Identifier:
                keyid:54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:d6:09:d9:35:8a:62:2a:4e:a4:dd:53:5d:c1:c2:0d:d0:
         3d:5e:cd:4d:22:b0:76:3d:fd:e7:f2:d8:c7:3a:64:d4:3b:a0:
         2c:bc:5d:44:5c:28:ae:61:40:7b:53:79:f9:9e:c8:c8:ef:ac:
         65:54:0e:72:aa:78:21:65:84:2c:22:79:89:4d:3b:19:ef:de:
         1e:54:c3:8b:c4:a6:95:10:20:af:22:81:21:6b:e1:58:85:17:
         1c:26:b9:84:d2:f7:22:12:c0:7b:00:ac:5c:ee:85:e6:6c:81:
         51:e8:ce:d6:70:09:e6:d0:02:d6:4c:44:c7:af:01:95:31:b8:
         e8:3a:67:d3:6a:df:60:16:bd:eb:14:5a:b2:94:27:8c:7a:05:
         f2:ea:0e:2a:46:dc:1f:4a:9e:a4:6b:e3:f6:3b:2e:5a:fd:1f:
         cf:84:dc:e9:e0:e0:44:27:38:90:38:51:64:62:c5:6d:54:11:
         83:c0:4c:99:63:a8:66:b5:f7:5c:34:f3:45:a6:c7:0a:77:23:
         b4:81:e1:d5:2d:b6:76:ec:9b:eb:94:19:a4:3b:4c:5e:9e:ef:
         77:22:48:93:fd:79:f7:9b:3e:e1:4d:12:32:c9:c3:92:a2:2a:
         3a:bc:c8:30:42:d9:68:24:03:fc:0b:16:85:50:4e:8b:79:eb:
         cb:bd:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org