Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
File:                     v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json)
Hash identifier:          rc+Dkg94c8Et5El0rrZPG4Qoizo2OCYEPpTd6lnQSUk=
Subject key identifier:   38:AC:FE:3B:AA:AD:C7:80:25:47:7E:60:12:D5:FC:41:11:FA:B1:A4
Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E
Certificate issuer:       /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
Manifest number:          06
Signing time:             Thu 21 Nov 2024 06:15:41 +0000
Manifest this update:     Thu 21 Nov 2024 06:15:41 +0000
Manifest next update:     Thu 28 Nov 2024 06:15:41 +0000
Files and hashes:         1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: ZINLiTu8Y/fd6jQgtAmONip2413sY+BdgkVVvifM1nw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
        Validity
            Not Before: Nov 21 06:15:41 2024 GMT
            Not After : Nov 28 06:15:41 2024 GMT
        Subject: CN=673ed00d-8f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:29:f8:50:f9:e4:a2:d6:3d:20:e4:8f:40:
                    92:3d:0d:fc:32:e6:bb:35:69:20:86:b9:c9:0b:5f:
                    46:96:7c:4b:b0:39:9e:59:75:bf:09:3f:2d:bc:2b:
                    78:db:55:4a:1d:0d:6f:43:21:3f:fb:6d:aa:62:60:
                    76:8c:b7:d5:95:1a:f0:b4:90:96:59:6f:52:1b:64:
                    5d:5d:0e:0c:61:93:46:8b:fa:3a:bd:d0:69:71:5f:
                    1a:b0:a1:17:27:45:3b:b1:58:c5:cb:8b:e5:91:6c:
                    65:e3:f2:16:49:e9:a5:c2:ef:23:1f:08:b0:b7:43:
                    a3:19:7c:1c:17:00:49:50:bf:41:aa:c6:5a:bf:aa:
                    5f:2d:04:d5:12:00:2f:b6:ef:81:2f:90:50:21:d0:
                    61:d0:ef:c9:1b:a0:22:0e:1e:52:e6:55:9a:83:19:
                    dd:70:66:8c:5b:ac:8a:8f:75:00:88:5a:65:54:19:
                    46:1b:e1:d0:96:87:98:72:d6:4f:c1:a8:84:cb:6a:
                    2f:63:0a:c5:2e:be:5b:7c:69:60:61:8d:41:88:4f:
                    08:6d:8c:c0:b1:75:ef:ed:f0:04:dc:9c:59:38:19:
                    9f:70:28:f7:9e:25:f3:ac:9f:da:10:53:12:23:ba:
                    58:91:a3:cc:ec:37:fd:a1:e1:72:6f:ee:81:0b:f8:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:FE:3B:AA:AD:C7:80:25:47:7E:60:12:D5:FC:41:11:FA:B1:A4
            X509v3 Authority Key Identifier:
                keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:82:d1:bc:a8:73:5e:8f:dd:39:6a:30:c2:f9:85:68:66:49:
         15:97:5f:f9:e3:07:fc:39:cd:d2:1e:4a:bb:88:54:f3:c3:5f:
         55:36:93:14:d4:18:5b:63:8c:59:27:65:2e:e4:7a:a0:95:ee:
         8d:de:46:50:8c:7b:d9:ea:ba:91:a7:c1:b3:cf:ce:81:93:e6:
         73:0f:bb:1e:2b:c8:b2:6a:91:ac:5b:a8:eb:06:f1:7e:ac:08:
         4e:37:10:4d:fe:54:b0:2b:11:1a:60:de:f3:db:97:1d:4d:f1:
         5d:aa:e6:c1:1d:30:3e:5b:20:5e:9b:d4:7b:00:dc:92:6c:8d:
         22:dd:6f:ec:8b:e5:e1:f1:33:97:b4:58:8d:15:25:eb:08:f2:
         03:5c:3d:f6:a1:2f:56:0e:93:ae:9e:52:17:47:21:0d:8f:67:
         fc:92:fc:b8:3d:9f:9f:c6:26:34:94:3e:53:ea:cc:9b:1a:6b:
         1c:34:bb:68:f5:51:b9:c8:c7:4d:72:8f:64:68:14:e2:da:5a:
         04:88:d8:cd:b9:f9:e8:ad:96:3f:82:04:90:62:8c:0a:9e:fa:
         64:e2:6a:07:d2:b8:83:2e:b4:5a:eb:99:ef:73:4a:b3:fa:84:
         aa:6f:65:26:3c:39:bb:6c:07:b8:4c:82:b3:0e:e2:fc:1e:fb:
         32:15:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org