Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          GFa8OvT6LRjgfoJVd24lbAunlBUYTZKj2okIf7b9X+4=
Subject key identifier:   0B:BD:6E:05:E2:6F:47:07:0F:5E:CF:64:F4:97:AA:BE:FA:11:53:5A
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          0B
Signing time:             Wed 23 Oct 2024 06:46:56 +0000
Manifest this update:     Wed 23 Oct 2024 06:46:55 +0000
Manifest next update:     Wed 30 Oct 2024 06:46:55 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: TojHApfDIT7SSrbQs0GgoBfk0Dt88/ribzWrzKbLbUc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Oct 23 06:46:55 2024 GMT
            Not After : Oct 30 06:46:55 2024 GMT
        Subject: CN=67189be0-2d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:de:f6:0a:58:7b:fd:c8:3e:93:ac:e2:e3:
                    a8:f2:7b:cc:78:68:cf:81:9c:37:d3:0e:cd:de:90:
                    bf:69:fc:84:ce:46:53:c5:bf:5c:94:88:04:ea:34:
                    db:c9:f7:2a:17:6f:5c:82:a9:f4:6e:4f:31:41:f6:
                    3e:52:fc:db:dd:78:bd:0a:13:43:bb:4d:8e:8d:d2:
                    61:c4:6b:05:0c:5f:fd:1e:d9:85:be:76:24:13:94:
                    ad:43:91:f5:25:5f:0a:11:f8:00:66:81:c8:5b:7c:
                    1d:83:94:19:a7:a3:b0:60:4e:c9:67:ea:7b:bb:35:
                    fd:03:c2:bb:30:3e:31:b4:e5:6f:37:49:f7:42:49:
                    b8:09:89:b2:1e:f7:c5:f4:93:77:59:91:c5:30:5d:
                    b1:45:b6:33:f8:2b:25:28:06:3b:d0:4e:e8:f9:9b:
                    9a:cb:6b:71:be:57:1f:a8:90:65:1a:7f:70:57:b6:
                    60:43:d0:65:dc:77:7e:d9:89:83:25:2f:6b:0a:7e:
                    af:43:17:9f:63:c2:15:2c:46:dc:12:ac:94:81:ba:
                    c9:36:88:66:74:5b:96:5c:5b:fa:60:b6:06:35:df:
                    c2:ae:29:6b:2d:a7:06:c6:63:bb:95:eb:2a:5d:e2:
                    f4:bd:cc:dd:7d:b1:b1:2d:62:99:a2:fc:09:1e:c3:
                    2e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:6E:05:E2:6F:47:07:0F:5E:CF:64:F4:97:AA:BE:FA:11:53:5A
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:ed:ea:e4:61:f1:c5:56:98:34:de:0e:0c:7d:a5:93:b8:
         2b:13:d0:53:9c:23:54:ec:f8:b7:75:70:b3:9a:e0:ea:36:99:
         64:a2:b8:45:3c:f9:1f:98:24:df:87:85:cc:ad:d9:c7:3a:de:
         69:b6:70:08:7d:d2:71:82:3b:db:f2:55:8c:18:df:9f:b3:c0:
         89:a8:79:f8:7c:4f:34:d1:6c:0b:12:df:03:a6:a5:ba:73:31:
         53:9f:21:5a:87:9d:86:08:7c:f5:4a:62:2c:57:5a:49:08:09:
         b0:b2:60:27:3f:79:ef:34:4a:1d:f1:8a:a8:df:3b:a9:cf:86:
         18:14:c8:9a:76:b3:b4:8e:ee:ad:31:17:ff:b7:b1:80:2f:1e:
         3b:71:91:81:2d:67:1a:df:82:6d:cc:66:18:03:24:dd:ef:a6:
         a4:f4:d2:58:95:50:b5:5a:74:5a:8e:6a:be:57:26:15:06:ea:
         75:44:4a:8b:63:2f:04:a0:1e:6b:3a:2a:0c:81:29:1e:d9:34:
         ca:1b:5d:05:1d:cc:1a:63:83:fe:29:88:ef:b0:6f:89:f4:2d:
         54:f8:13:c0:c3:3b:e9:a6:75:2b:ef:9a:5b:26:37:27:a0:d5:
         81:08:92:66:72:4a:0a:e1:84:b1:e1:fb:79:82:16:2d:c0:3c:
         6b:47:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org