Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
File:                     6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json)
Hash identifier:          Z9EmWvIfoQsI9rofQBEwwJ5Ir86kD08vL7lNdFqPi+A=
Subject key identifier:   11:90:F2:E2:77:BA:73:3D:DA:A6:3E:14:02:87:48:BD:61:14:58:0A
Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A
Certificate issuer:       /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
Manifest number:          7E
Signing time:             Sat 23 Nov 2024 04:41:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:41:36 +0000
Manifest next update:     Sat 30 Nov 2024 04:41:36 +0000
Files and hashes:         1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: 9lhMi8cofwBnScMyBOOnU/P0UFbaHoPVCQAxNN1W0ko=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
        Validity
            Not Before: Nov 23 04:41:36 2024 GMT
            Not After : Nov 30 04:41:36 2024 GMT
        Subject: CN=67415d01-9df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:57:28:13:9e:cb:02:8d:21:4c:1d:7f:6b:
                    84:be:87:60:ce:8c:3a:91:44:7d:78:c8:ab:ae:29:
                    a6:fc:93:dc:95:1c:73:2e:91:bf:d6:89:02:87:bd:
                    c8:a0:92:7b:f6:3c:37:d7:28:4f:a1:dc:8b:45:93:
                    bb:92:a1:5c:b5:ac:b8:13:56:33:18:61:b1:a5:1c:
                    ed:0b:ca:b9:74:fe:a0:30:d9:23:29:11:bc:ad:63:
                    40:63:a8:37:56:50:cf:12:d2:31:93:59:ce:f6:f6:
                    82:05:74:10:9c:63:d0:87:44:4e:51:cc:da:80:bf:
                    2a:40:36:ff:1a:a6:f5:73:bd:de:d1:38:6d:a9:8a:
                    e5:7c:a6:ba:62:73:61:a5:c0:59:77:8e:fe:71:08:
                    bb:24:28:15:1e:12:01:19:7d:33:f5:bf:b5:1c:88:
                    00:88:0e:a2:45:de:c5:35:c3:83:0a:0c:25:8e:7c:
                    ff:46:b6:22:68:c6:10:97:51:9d:01:89:cd:f7:d9:
                    01:2b:2e:f4:e5:90:91:57:7e:f1:21:98:fd:8f:c6:
                    f6:e2:77:b7:75:65:e5:0c:a4:b4:57:a1:50:84:67:
                    8b:5f:2f:b1:e0:d2:d5:76:ed:48:cf:9c:5a:0d:65:
                    e6:af:aa:b4:59:d7:ca:c8:ca:89:28:14:c3:32:3f:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:F2:E2:77:BA:73:3D:DA:A6:3E:14:02:87:48:BD:61:14:58:0A
            X509v3 Authority Key Identifier:
                keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:2e:c4:41:a1:d2:67:80:2c:9c:6f:20:d8:8f:bd:82:0a:
         d9:f5:6f:da:44:3f:04:65:e5:43:c0:8e:8c:e6:b7:e9:25:52:
         9d:01:6f:7a:f8:80:2e:15:0a:01:2b:41:f2:a5:70:a1:f7:16:
         d8:a7:b4:b5:34:80:85:ac:a5:04:6b:e1:e6:af:36:b8:98:9f:
         c6:48:21:64:71:99:52:5a:4b:c0:2c:39:99:d6:b1:ce:5c:70:
         2a:de:1f:3d:dc:df:0f:46:41:eb:e6:f2:e8:03:01:4f:9c:b4:
         38:2f:b3:e7:01:63:bb:4f:4c:e1:b5:3c:0a:17:6d:2b:68:6f:
         e1:dd:63:cf:84:fd:61:83:fa:2f:39:16:8f:54:64:e3:63:f4:
         3b:5a:b9:8b:0f:df:b9:af:e8:8c:f4:c0:74:1f:c1:a5:4b:a3:
         9c:80:e1:35:22:b8:f9:6e:16:0b:44:c1:00:e4:1f:c7:e1:cb:
         d0:52:f5:93:fa:2a:70:10:c8:5d:0b:85:37:c5:b4:08:18:21:
         c0:a9:de:0f:cf:c3:7f:d6:5b:14:db:72:08:0b:6f:15:39:39:
         f9:c6:29:c2:0c:b8:e9:d2:68:84:2a:bc:f2:05:7d:b3:65:4b:
         b4:30:9d:33:81:85:65:14:c5:98:f9:7f:0f:ae:66:46:b1:e6:
         74:f5:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org