Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
File:                     jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json)
Hash identifier:          0irtM9fQARZAPXchnlYSOHy7PjSMzyzoBk6gWuRo4qU=
Subject key identifier:   A4:25:4F:CE:6B:08:58:F0:61:FD:3F:24:D0:5A:A4:93:AE:57:0A:B9
Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48
Certificate issuer:       /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
Manifest number:          017D
Signing time:             Mon 25 Nov 2024 01:53:19 +0000
Manifest this update:     Mon 25 Nov 2024 01:53:18 +0000
Manifest next update:     Mon 02 Dec 2024 01:53:18 +0000
Files and hashes:         1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: zq5uWexrD/IvZAk8d8+ghnlSl+rWRWQf3bHIVCe4gvo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
        Validity
            Not Before: Nov 25 01:53:18 2024 GMT
            Not After : Dec  2 01:53:18 2024 GMT
        Subject: CN=6743d88f-f4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:f7:73:ba:0a:15:22:7d:08:fb:11:57:7f:
                    a9:7b:ee:fd:1b:94:d4:5f:65:8f:36:64:68:9c:a2:
                    85:0d:7b:8a:fb:1b:a9:2c:ac:05:fa:5e:af:a0:2d:
                    6c:26:44:fe:76:c2:0c:23:8b:24:f0:f0:9c:a0:a8:
                    d7:8a:d2:17:43:19:92:47:84:d6:bd:14:0e:25:db:
                    5a:c9:f3:45:25:3f:f2:a7:bd:6a:55:9f:c0:47:47:
                    c9:63:b1:b4:df:e0:fa:fa:a9:7d:ef:15:1a:b3:cd:
                    9a:03:c8:9d:b3:f6:2a:ac:40:64:b9:6e:64:40:9a:
                    c2:5e:51:70:39:69:46:23:3e:04:67:08:e4:73:7f:
                    f7:1e:cf:23:6f:6d:68:07:74:82:32:dc:93:29:85:
                    e5:13:3f:92:d5:06:77:7b:6e:dc:3a:37:c7:78:1f:
                    99:32:01:8a:5d:87:56:88:a6:00:57:51:d8:fd:ec:
                    5f:a1:50:32:f6:73:3d:64:c8:d4:47:2b:d5:8c:6a:
                    fd:04:40:c8:11:cd:76:53:c6:08:38:a9:34:ca:b4:
                    0f:c7:ce:05:1d:86:17:a0:b2:b1:b2:b9:f3:3e:31:
                    44:8e:5a:17:65:e2:55:ee:80:c7:be:8e:bd:52:0b:
                    46:fb:09:45:93:ef:8f:35:ac:ec:43:54:89:2e:9a:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:4F:CE:6B:08:58:F0:61:FD:3F:24:D0:5A:A4:93:AE:57:0A:B9
            X509v3 Authority Key Identifier:
                keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:f5:11:49:d7:b5:36:7a:59:07:77:11:b4:be:2c:49:4f:
         eb:16:68:2a:09:af:51:f0:44:a7:d3:a7:7c:75:22:79:bb:12:
         d4:d7:98:ff:02:e3:77:4b:ca:32:6f:b7:15:b5:10:68:68:fc:
         f4:0d:cd:91:4b:9c:f8:38:8f:34:08:81:ce:19:ce:47:2c:9c:
         39:55:c7:bc:17:bb:c9:2f:0e:82:01:ee:1e:c3:c5:f4:6d:e8:
         70:ac:5f:3e:b5:a6:9a:09:4f:98:64:ef:24:46:e8:5d:f0:0b:
         1e:95:84:98:60:3c:3f:e1:57:c5:6f:e2:9a:62:b9:6b:18:6f:
         bf:da:32:f6:60:f2:26:78:ae:8b:1f:8a:41:5e:51:cf:ab:ab:
         7e:04:1c:90:04:c7:61:3b:7c:a6:13:a9:3f:d7:7d:92:60:7c:
         ff:f2:e0:14:d1:ed:b7:96:2c:85:3b:16:a7:78:89:18:b9:2a:
         87:f9:fb:56:e6:45:25:a6:3f:5f:97:33:c9:71:22:a2:87:f5:
         20:02:46:21:4a:5c:1e:6c:c4:71:d9:1e:21:e7:9d:82:79:09:
         03:26:8a:99:a0:98:29:ed:ce:bc:af:78:10:55:23:03:29:a6:
         dc:13:6c:a9:15:be:55:bc:60:30:7c:22:4b:fd:89:8f:44:39:
         8b:73:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:48:57 2024 by rpki-client on console-ams.rpki-client.org