Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          cs7/I+/zmaRHQasaqDw131CmDfC/HGLwMgaQQ6yJIp8=
Subject key identifier:   04:50:05:40:4B:6C:D5:1B:77:4E:D6:81:8B:F4:22:FB:C7:7E:21:73
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          A4
Signing time:             Sat 23 Nov 2024 04:16:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:16:19 +0000
Manifest next update:     Sat 30 Nov 2024 04:16:19 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: 11+7NTsy64Dm7BMf33bZr0dA2ost6dYjQY8/eifi7c0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Nov 23 04:16:19 2024 GMT
            Not After : Nov 30 04:16:19 2024 GMT
        Subject: CN=67415713-36ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:c5:cc:f1:53:8f:13:f1:0c:b6:c6:4d:09:
                    3d:af:f6:6c:82:11:75:a8:f0:73:4e:a5:a0:05:bc:
                    f7:8a:93:a5:48:57:63:1b:15:4a:a2:4b:0b:cf:cd:
                    af:3b:02:72:c8:7c:f5:55:2e:5e:9e:09:52:a0:67:
                    f6:41:2e:8a:d6:5e:2c:4a:92:40:05:d7:29:8d:36:
                    67:46:bd:cf:cf:80:d9:0b:53:53:8b:20:78:24:57:
                    84:d0:f3:d9:f9:fe:8a:73:d9:0c:b8:f5:73:93:aa:
                    4a:67:f1:43:1b:b6:ca:1f:42:84:28:91:f2:5e:eb:
                    80:73:7c:0d:7d:fb:c7:a9:89:10:df:ca:5c:22:1e:
                    45:da:b2:ab:6f:84:79:79:65:aa:47:81:34:f4:cb:
                    1a:fc:d7:89:25:9d:e2:d3:80:3d:a4:51:e5:14:fa:
                    2e:10:42:09:70:a8:7b:19:3e:b7:06:75:41:5b:ef:
                    04:0d:ac:9a:00:3d:ea:62:3f:0d:58:e9:d1:b9:86:
                    18:05:76:f1:24:ad:36:77:ec:ae:f2:d5:9b:79:f6:
                    e9:e9:28:60:00:b3:47:2e:5f:6d:8b:0e:62:65:2f:
                    ca:56:20:cb:0b:3f:b7:c1:39:71:fd:fc:60:e2:25:
                    f3:a8:d5:27:86:58:6b:50:88:32:81:13:ec:f4:52:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:05:40:4B:6C:D5:1B:77:4E:D6:81:8B:F4:22:FB:C7:7E:21:73
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:fa:b8:13:79:9b:59:9b:87:9d:a1:c4:85:19:18:67:9c:
         a1:06:04:49:c1:97:c9:4c:ae:23:8c:dc:24:10:70:f2:87:dd:
         87:06:39:50:76:29:4c:a2:01:4d:52:72:0e:8d:fe:dc:97:e8:
         a2:e2:b4:4b:8d:21:19:1c:0e:89:9e:b0:c4:0b:20:0a:07:3d:
         b3:34:a5:dd:01:f4:db:50:01:0b:80:32:31:50:d5:3b:7f:8f:
         6c:ab:d0:00:26:57:dd:7c:7c:8b:8c:ed:c4:26:6e:43:c1:20:
         ac:49:eb:f7:5b:a0:20:87:eb:19:59:25:72:14:8d:2b:19:f0:
         58:df:bc:0e:9e:54:49:8f:fb:1a:10:49:68:41:1f:67:80:27:
         9f:ed:90:dd:f7:77:34:82:08:a9:e8:2f:ca:a7:b6:43:a7:9c:
         24:31:69:c5:b1:0d:2e:29:39:16:0b:b1:16:32:5d:c2:d6:28:
         96:f0:25:80:f0:f6:13:7c:e0:1b:bd:b0:af:29:69:2e:a0:d5:
         98:f2:99:38:85:2d:be:b8:77:60:3a:dc:55:d0:98:40:ed:73:
         25:4f:9e:f8:b4:03:7b:00:e5:fc:cf:18:42:83:67:b1:10:88:
         3d:d4:fe:29:1e:c5:3a:9b:9f:74:55:c5:b0:d6:47:96:f0:b4:
         4a:e0:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org