Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File:                     PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier:          88zjDo9FK1g/owAA7v3SQeqsj8RSyTPAIqSWn5fKwAU=
Subject key identifier:   75:5F:03:4E:13:EA:B0:23:9B:87:86:2B:6C:B2:9B:AF:B9:3C:30:DC
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer:       /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number:          0216
Signing time:             Thu 21 Nov 2024 01:30:11 +0000
Manifest this update:     Thu 21 Nov 2024 01:30:10 +0000
Manifest next update:     Thu 28 Nov 2024 01:30:10 +0000
Files and hashes:         1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: cW32sCIKV1mUsohg/CgmyOonb8A427mJLHZoZ0Z6Nkg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
        Validity
            Not Before: Nov 21 01:30:10 2024 GMT
            Not After : Nov 28 01:30:10 2024 GMT
        Subject: CN=673e8d23-7c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:e6:3c:d0:ed:6b:cf:8c:ed:34:fb:cc:0c:
                    4f:c0:c0:cc:4d:79:3c:f5:44:9e:11:f3:44:aa:8d:
                    fc:c7:fe:77:a6:0a:6c:7d:46:e1:85:8a:a0:01:2e:
                    34:c8:86:e1:1d:08:58:38:9e:08:6c:5a:9b:03:6a:
                    68:75:21:a0:90:4e:dd:ef:52:57:c4:1b:b9:e6:6e:
                    f7:73:91:ad:ff:9f:5a:59:84:1c:b4:14:fd:82:56:
                    aa:b9:75:99:ff:c3:62:c8:c3:35:ac:49:fb:8d:b0:
                    d1:a8:8f:a4:b8:ec:90:8e:a5:db:0d:fb:e6:0a:76:
                    7c:a6:ff:f7:4a:f1:66:ee:8a:f9:04:68:ff:1d:fe:
                    1a:0e:50:8c:d9:40:25:4b:f3:6a:ea:a0:9e:12:ea:
                    8f:bf:f4:c8:cc:88:3b:3c:63:ad:9e:75:82:59:0d:
                    0b:67:f2:90:85:dd:46:4f:36:9a:67:b6:dc:8a:35:
                    5d:70:5d:b8:3f:e2:75:68:43:db:5e:bc:be:0d:f9:
                    f8:cf:d1:de:41:4c:fe:22:2f:7b:d5:b6:d6:c0:cb:
                    74:06:87:8f:17:08:85:fc:89:ec:ea:3b:dc:3a:66:
                    fd:65:a0:45:70:f7:44:0f:3b:e1:14:01:b5:7a:24:
                    09:3a:b4:9f:7b:bb:d7:a7:64:aa:20:48:81:e7:0d:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5F:03:4E:13:EA:B0:23:9B:87:86:2B:6C:B2:9B:AF:B9:3C:30:DC
            X509v3 Authority Key Identifier:
                keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:9e:52:ff:02:88:91:c1:34:80:80:04:41:d8:d7:b6:2c:
         04:4c:85:3e:bd:6a:6b:9e:21:09:c0:1d:53:bd:71:b2:3c:c8:
         ce:62:d6:96:eb:de:51:f6:4e:fe:e7:31:0a:a1:7d:99:75:56:
         8e:14:df:75:69:e8:7b:1e:c0:3b:50:3b:00:33:da:64:3a:b5:
         1e:de:6d:f2:c2:d8:af:15:34:ff:97:e6:a1:22:62:e7:6a:d7:
         a2:d4:d4:03:36:3d:4f:44:1f:3b:53:63:cb:f6:e0:7e:12:5a:
         e8:2d:7e:41:30:4f:9a:eb:c3:b2:b8:78:2b:39:88:da:ec:ff:
         ee:10:b7:95:d3:d5:b8:71:54:06:1b:c0:00:87:54:be:c1:a1:
         f7:02:e0:bc:7a:e0:7c:92:77:f7:85:e0:16:68:9e:62:c1:75:
         1c:ef:89:8a:dc:90:d3:dd:42:3b:c1:c1:01:ab:26:ff:da:40:
         59:2e:f1:a5:c2:34:13:1c:58:aa:13:d2:12:b6:ef:91:ec:bb:
         18:31:6a:b6:b1:03:ed:2d:68:d6:71:e9:4a:d5:b9:8f:ff:af:
         e8:1f:71:a6:61:f7:e6:1a:71:02:13:53:a8:28:a3:79:a6:f8:
         8f:7b:5b:e1:bf:ec:49:4f:96:69:84:90:c1:7d:43:c8:65:a5:
         18:e3:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:38 2024 by rpki-client on console-ams.rpki-client.org