Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          DfQradGIbeNX/IahOoFjPQ/1RnMQTrhnQhOqtYp83R4=
Subject key identifier:   B6:9F:0C:05:64:85:78:07:8A:C2:B6:AA:E1:8E:D5:A5:B9:FF:EB:E7
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          E6
Signing time:             Wed 20 Nov 2024 15:27:34 +0000
Manifest this update:     Wed 20 Nov 2024 15:27:33 +0000
Manifest next update:     Wed 27 Nov 2024 15:27:33 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: Tt/nSMYLUyqQ5mka/4O4srmEufjgsRL7QjzeQSEY6T8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Nov 20 15:27:33 2024 GMT
            Not After : Nov 27 15:27:33 2024 GMT
        Subject: CN=673dffe6-a586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:c7:33:3a:87:5d:56:f6:c7:82:0d:ca:85:
                    1f:e3:6a:3a:b9:28:74:6a:05:ec:dd:8a:33:47:86:
                    47:0e:b6:e0:e0:78:67:95:19:48:eb:0d:e7:67:74:
                    c4:52:3b:51:8e:25:56:f1:70:cc:6c:c4:3f:76:4a:
                    f4:9f:c7:e3:76:f5:cf:01:bc:c6:91:b1:ba:96:e8:
                    c3:24:f4:74:08:0c:3a:e7:89:97:96:94:50:b5:bc:
                    e7:61:c0:f6:e2:61:22:b4:ed:2b:80:d0:0f:7f:c3:
                    ac:5d:17:3d:d9:05:cb:5c:7f:df:4f:33:bb:b9:59:
                    8f:95:b0:bd:0d:b0:42:13:34:dc:8b:72:06:14:19:
                    07:06:94:d1:d2:7e:23:1a:30:c1:b2:f1:b5:68:38:
                    08:7f:28:de:2d:36:e2:90:60:05:55:2d:b1:7e:8d:
                    05:e9:ab:71:5e:46:de:7d:99:66:14:b3:46:c4:01:
                    ee:0e:f7:83:14:22:90:22:fe:dd:bd:7d:56:b6:53:
                    19:a1:17:0b:fd:25:7d:1f:de:3a:09:0c:48:3c:dc:
                    c3:57:c7:55:fb:84:de:30:11:12:9d:ee:d2:65:6d:
                    c4:46:b7:74:0b:10:ed:d5:4d:d5:32:bc:e8:4c:0a:
                    ca:07:42:ab:e0:e6:4b:76:f1:ed:d2:34:6e:e2:c6:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:0C:05:64:85:78:07:8A:C2:B6:AA:E1:8E:D5:A5:B9:FF:EB:E7
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:bd:d8:fd:a3:c5:07:ca:f2:3b:da:25:20:5a:2a:c9:47:
         38:84:da:c0:8e:a8:7b:14:30:0c:d4:0d:ba:c1:62:98:55:0b:
         9b:cd:f5:0c:7d:d1:08:61:e3:24:9c:b7:b0:0c:65:7c:da:3d:
         b2:68:dc:dd:f0:97:70:0a:29:27:44:dc:9c:df:e3:d7:b6:70:
         ed:60:38:df:2d:58:cb:20:6c:e1:82:0d:92:7e:39:61:31:00:
         1e:46:fb:6c:ba:09:ca:c4:e3:44:5a:24:16:28:5b:3e:7a:04:
         6b:61:0e:04:46:d3:0a:f9:f9:36:46:2e:f7:38:ca:d9:2c:4a:
         b2:33:67:bf:15:3f:5f:a6:16:2b:a4:81:52:97:76:37:da:64:
         8c:36:45:55:e0:9c:d3:eb:cd:e4:e2:17:05:72:32:94:c1:df:
         39:7b:cf:3b:de:dc:4b:b0:e1:97:38:8e:4a:2b:f0:e3:21:fb:
         65:61:06:2a:37:55:50:79:31:cf:d4:a8:98:8d:85:96:eb:65:
         92:b8:bc:1d:a5:11:28:ac:f5:d8:9e:10:f9:7e:62:42:70:f2:
         e1:0b:46:52:6c:ae:55:62:2a:e3:83:cc:c2:f2:bf:ae:2c:18:
         24:8a:3b:53:19:71:84:c3:9a:85:e4:6c:1a:07:d8:d6:57:fb:
         fd:ff:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org