Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
File:                     QqvQ9dysTQxkACUczEnW_9l1Q78.mft (raw, json)
Hash identifier:          qrfo5xEDOuaqffa1S+xUzPlWtNhh9G66AGk6O1bGKpA=
Subject key identifier:   57:1C:54:0C:CB:A0:F1:B7:56:C4:A5:DB:F2:E7:11:6E:7D:8A:12:00
Authority key identifier: 42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF
Certificate issuer:       /CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
Certificate serial:       14D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
Manifest number:          1C86
Signing time:             Fri 22 Nov 2024 16:50:49 +0000
Manifest this update:     Fri 22 Nov 2024 16:50:48 +0000
Manifest next update:     Fri 29 Nov 2024 16:50:48 +0000
Files and hashes:         1: QqvQ9dysTQxkACUczEnW_9l1Q78.crl (hash: CrDxbeS5CtodtpnAMoJ2ZbN0RM6IKy2+zfoM+13VfYw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5331 (0x14d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
        Validity
            Not Before: Nov 22 16:50:48 2024 GMT
            Not After : Nov 29 16:50:48 2024 GMT
        Subject: CN=6740b668-d3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:59:3e:f4:51:8c:58:cf:73:0e:d1:2d:b1:
                    3d:4a:56:3a:51:d4:7c:fd:3e:91:5a:1f:06:1c:ae:
                    23:45:e9:48:48:4a:26:d9:ce:2e:15:e3:eb:99:86:
                    d8:ca:35:7f:4f:c0:ff:9a:24:47:eb:6b:12:14:9f:
                    78:52:ba:ea:36:f1:a0:44:ee:85:69:a3:dd:06:5d:
                    99:17:f1:08:a6:36:53:bd:ca:58:33:84:2b:c0:bf:
                    be:e9:ad:cd:2e:6e:eb:8a:51:72:44:9b:45:ca:e6:
                    1b:c7:4f:e5:50:ba:7d:a9:b3:94:d7:66:0d:ed:a9:
                    51:7a:d1:2a:70:ca:3e:a9:a0:0d:04:25:5a:01:5e:
                    ea:39:c6:0d:ed:5c:45:6b:60:6e:b3:23:dc:ab:92:
                    5f:ad:88:89:dd:4b:e3:67:1b:fd:33:3b:03:a9:75:
                    f2:7a:63:f5:75:b5:a4:08:ad:35:8f:75:83:87:0c:
                    52:b6:88:2f:54:bf:63:df:a2:72:41:d8:2b:5d:cb:
                    1e:91:56:68:9d:3c:82:5d:d1:f0:76:ef:c0:09:4b:
                    e3:f7:42:55:39:f5:0e:f0:33:50:10:e5:b2:cd:8a:
                    9f:d2:24:0e:8b:9f:3a:5c:dc:87:41:ef:34:86:ad:
                    5f:5d:cc:92:a9:be:bb:86:1a:a0:d0:b0:1a:8a:e6:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1C:54:0C:CB:A0:F1:B7:56:C4:A5:DB:F2:E7:11:6E:7D:8A:12:00
            X509v3 Authority Key Identifier:
                keyid:42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:62:d0:71:1a:7c:12:f0:54:19:be:95:89:63:bb:ce:64:5e:
         90:e0:13:e8:8e:29:58:76:02:e5:71:2a:7a:c3:a9:f8:ae:92:
         ca:69:30:dc:12:af:fe:35:06:af:91:66:5d:d9:7d:48:28:b1:
         e9:ff:60:ea:f7:a8:a3:46:17:18:8f:97:d2:ec:64:7a:87:d2:
         96:c3:47:fc:55:74:e7:f2:48:7c:35:f9:eb:12:83:f7:85:49:
         01:25:6b:4d:e0:e9:37:06:0f:b8:02:8b:d2:9a:e8:6d:8f:95:
         6a:d8:e9:60:3d:5b:3a:b9:d9:73:75:9f:44:7a:b3:b0:cf:ec:
         bc:64:aa:ab:d7:8d:50:8b:c2:33:3d:51:93:11:2c:61:da:4a:
         0a:37:e9:cd:63:c1:fe:27:73:b8:d4:16:ad:ba:0d:24:65:24:
         ea:6c:36:32:7b:f3:a7:8b:cd:a5:91:31:37:43:a8:85:f7:ba:
         28:57:2c:f3:36:a3:61:e8:d4:91:be:af:a5:46:22:62:24:cc:
         c0:0c:bc:a3:17:01:c9:ea:6d:2c:c6:07:bc:2b:dc:a4:43:b4:
         51:8c:d3:f3:c6:cb:fc:e8:f1:6d:84:21:92:b1:97:76:87:45:
         a5:b3:7f:cd:58:f1:77:16:cf:ec:08:2d:e0:67:08:b2:2e:51:
         71:98:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org