Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File:                     zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier:          4CufzbKIQ0kPgB7QKKsmkx9ulmuUuz1p7n2GAgekoJQ=
Subject key identifier:   2F:FE:17:B5:20:B8:BF:43:22:58:A2:7B:83:07:0A:BF:33:F9:1E:29
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer:       /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number:          2E
Signing time:             Sun 15 Sep 2024 10:04:59 +0000
Manifest this update:     Sun 15 Sep 2024 10:04:58 +0000
Manifest next update:     Sun 22 Sep 2024 10:04:58 +0000
Files and hashes:         1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: M7Hs4phDx0mf+3ViQYOqjxryS4nzfcM84Weh1erww2s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
        Validity
            Not Before: Sep 15 10:04:58 2024 GMT
            Not After : Sep 22 10:04:58 2024 GMT
        Subject: CN=66e6b14a-6a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:16:89:8f:cb:57:df:18:9c:38:3c:ca:d3:
                    52:aa:d6:41:34:30:4a:4f:c5:0c:10:58:73:c0:50:
                    2e:a4:a6:75:88:ce:88:b7:57:32:03:56:a4:8b:49:
                    36:90:57:42:8a:13:ff:58:4f:77:62:b5:89:93:6e:
                    f6:4e:49:3d:65:75:e3:a0:5f:47:a0:b5:7f:a9:aa:
                    24:7b:6d:be:da:ed:6c:85:0d:ee:c7:16:ab:63:0a:
                    83:52:25:00:89:a1:a5:30:25:59:13:5b:53:04:2b:
                    9e:31:37:6a:fb:de:40:7a:39:bd:ba:22:06:32:1d:
                    bc:02:48:78:8f:3b:4c:64:91:72:75:11:5c:f3:bd:
                    8d:8e:1a:96:ce:e4:4c:6d:cb:bd:e5:0c:3b:01:c1:
                    79:15:18:cf:5c:a1:ba:dc:22:2c:65:fa:a0:b3:0c:
                    f9:c7:3a:a1:66:e7:78:c0:45:20:64:7a:27:d1:38:
                    e6:1a:21:d4:90:e4:0c:26:f1:4a:6c:45:5d:eb:1c:
                    cf:02:7e:60:19:0f:5c:e1:ee:4c:e1:83:c1:cb:a0:
                    92:79:4f:9e:ad:08:6b:55:cd:8e:fc:a4:7c:f8:7d:
                    d4:bb:2f:eb:29:52:8a:69:6a:33:53:0d:a4:41:76:
                    28:39:d7:cd:f0:e7:08:ad:17:fc:db:a8:06:b0:c2:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FE:17:B5:20:B8:BF:43:22:58:A2:7B:83:07:0A:BF:33:F9:1E:29
            X509v3 Authority Key Identifier:
                keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:b4:b8:45:08:cb:5e:2a:b2:a4:cf:f8:d3:32:82:26:3f:
         6b:d7:f8:cf:3c:6e:1e:21:54:df:b9:5b:67:88:82:7e:05:6d:
         ef:76:cf:37:2c:72:40:bb:16:85:09:48:43:bf:d1:04:7b:38:
         a3:f3:c9:c5:7e:df:1b:c9:23:1d:f3:de:2c:2c:29:00:e7:85:
         24:c2:4d:ee:48:dc:d3:0e:50:50:3f:1e:aa:91:87:e4:13:40:
         6a:ef:1f:cb:49:ce:35:7c:3e:06:b3:d3:79:97:8e:3a:9d:ac:
         c3:52:d4:6a:07:45:51:44:ad:87:13:bf:b8:7d:c0:13:40:13:
         a4:4f:de:e9:52:95:2a:89:f6:d0:06:6a:39:22:64:12:4e:30:
         45:0b:bd:3a:93:1d:68:2b:28:5c:d7:e7:0b:20:25:94:f2:2d:
         1e:be:74:d8:67:04:4a:57:6a:b5:c2:e1:28:2c:3d:f0:c6:9a:
         f7:87:d8:da:f6:1e:4f:1e:50:6c:6d:0c:fb:0c:e4:10:06:7c:
         df:c8:12:67:bd:ca:fc:c5:2d:81:a3:d7:d6:57:57:23:f7:b8:
         e2:ab:92:62:b5:6a:a7:96:78:52:a3:43:db:a4:05:5a:09:3e:
         6b:45:bb:5e:24:a2:e4:6e:59:39:47:b6:c0:78:f4:c5:f4:f2:
         37:94:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org