Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          ng4od+GqAJtFRx7dGEt1tDu95QGRCalCTQBvG2wj9Sk=
Subject key identifier:   1E:64:D1:67:C1:30:64:8F:90:37:7B:82:48:7D:E3:15:A1:A5:CE:CC
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          18
Signing time:             Thu 21 Nov 2024 06:00:24 +0000
Manifest this update:     Thu 21 Nov 2024 06:00:23 +0000
Manifest next update:     Thu 28 Nov 2024 06:00:23 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: iKT5U8wkl6Clm9rAcl024pNXUqy5ixkoyoVFkHD+2eY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Nov 21 06:00:23 2024 GMT
            Not After : Nov 28 06:00:23 2024 GMT
        Subject: CN=673ecc77-1838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:ca:97:10:15:da:eb:03:ee:00:dc:26:47:
                    0b:bf:b8:42:92:65:78:a8:6d:e2:06:e3:f4:15:d5:
                    8d:72:02:01:18:94:98:7a:18:da:93:2b:bc:8f:bf:
                    85:d0:b4:0d:c0:2c:08:5d:68:0b:64:af:a4:78:14:
                    fe:cd:5b:49:22:24:17:b8:e9:84:eb:fc:0a:fa:15:
                    e4:72:de:eb:27:93:f3:cb:82:ec:b9:55:57:57:16:
                    5e:4c:5e:55:4f:dc:ee:51:4f:49:3a:aa:ca:4d:59:
                    04:f4:0c:02:6e:8e:8d:ee:ca:55:a4:70:1f:29:3e:
                    93:8c:46:47:4b:e0:8a:21:88:95:86:24:2b:6e:11:
                    3e:5f:a2:ae:b7:be:0d:87:04:f4:dc:53:f1:a5:ed:
                    84:75:1c:7a:0a:e9:8b:0b:28:02:a1:38:f2:55:7f:
                    8b:38:f9:1f:0b:1a:76:7f:d3:ce:b7:a3:f5:9a:f5:
                    4f:52:dd:7e:8a:d6:d1:87:76:b4:db:0a:30:5f:7a:
                    d6:74:96:70:35:1d:a6:81:b4:0a:30:fa:69:9c:a0:
                    6a:e5:d1:86:29:51:39:8c:6a:1f:ed:4a:82:0c:09:
                    18:e8:76:95:fc:53:f5:3e:56:0f:6a:50:f1:cc:0a:
                    6a:c3:43:2a:2f:bd:ee:bd:be:82:6a:4c:c5:8d:5d:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:64:D1:67:C1:30:64:8F:90:37:7B:82:48:7D:E3:15:A1:A5:CE:CC
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:15:03:45:ae:da:e7:2a:6b:10:cf:22:bf:23:ad:5d:78:
         af:e3:ba:a5:10:ee:1b:ea:3e:94:40:41:73:78:10:95:0d:31:
         10:1f:0e:ee:bf:44:3a:85:27:04:3a:d6:9a:83:07:49:15:2d:
         63:b6:4b:26:24:4c:dc:04:0f:9b:55:e7:70:c5:29:60:8b:88:
         1e:91:80:f3:f0:99:46:2e:c8:0f:d6:79:73:5f:8d:b9:9c:91:
         1a:61:cb:5f:95:35:af:e4:27:9a:53:34:82:38:2a:9c:ab:a7:
         1d:19:5b:a7:c3:31:7b:86:76:fa:b6:f6:7a:ef:14:78:98:99:
         92:a5:92:02:04:59:d6:7b:3f:59:37:8f:89:c5:d6:e8:fa:46:
         e0:79:bc:57:97:6b:c2:3a:bf:9d:9d:3a:30:1b:f5:a6:26:19:
         bb:c8:96:0d:fc:eb:09:bb:42:63:60:9f:3f:82:88:3a:f5:59:
         91:5a:f3:eb:98:fb:73:3f:e0:fc:8d:6c:6f:01:92:72:be:a7:
         d6:b6:0b:f1:3a:01:07:4d:70:01:83:34:03:cf:45:af:a9:65:
         84:74:14:e7:3e:ad:93:e9:96:44:70:f3:14:24:e4:1c:a4:70:
         aa:10:6b:d9:33:30:53:ea:ae:a1:08:2e:54:3a:ab:b3:b7:51:
         c0:71:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org