Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          yBnMoJ8lBbHpnNOxkZIMFi6pNA1qTKk2WGGTxqxq5ZA=
Subject key identifier:   81:75:3D:19:9F:B4:98:56:BD:82:B5:93:44:E8:55:D3:B2:D1:41:9C
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          05
Signing time:             Wed 23 Oct 2024 06:53:01 +0000
Manifest this update:     Wed 23 Oct 2024 06:53:00 +0000
Manifest next update:     Wed 30 Oct 2024 06:53:00 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: +yrQCz/Dt9FQQIsaJyMoIGXZSKtuhY008Q0/7vcEUKM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Oct 23 06:53:00 2024 GMT
            Not After : Oct 30 06:53:00 2024 GMT
        Subject: CN=67189d4c-0729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:55:5d:92:04:b0:33:d7:85:87:97:94:32:
                    f6:2a:f6:14:74:d5:3a:f3:fd:b6:92:bc:24:65:6e:
                    eb:71:f9:ec:bb:b6:4b:ea:6a:53:c6:ec:9f:08:88:
                    d5:a3:c0:46:fa:c1:aa:49:4d:ca:90:82:03:24:6f:
                    4e:0f:ca:b5:c6:da:69:4e:a7:0c:0d:e3:4f:ad:c7:
                    3e:1d:70:eb:7b:76:df:d5:87:af:e7:12:1f:e9:f3:
                    23:a4:55:c3:cf:b5:c6:68:a7:14:59:de:0c:1c:9e:
                    f4:d5:cc:f9:99:6f:d3:38:ed:8a:bf:e1:c4:2c:da:
                    e6:73:e4:ac:ef:11:5a:65:c6:cc:63:b3:1c:e4:00:
                    e7:12:c9:73:c1:3e:a2:4b:67:73:4e:7c:ab:f2:46:
                    6f:a2:82:c9:75:76:b4:a5:e6:40:3b:9f:83:94:ea:
                    a3:56:3c:ad:5c:af:d2:f9:86:e4:da:69:dd:29:99:
                    b8:66:45:f0:c8:a5:44:7b:8e:95:ac:54:6d:ba:60:
                    51:c7:66:fa:13:65:f5:b8:42:f9:33:df:99:ec:6a:
                    f8:8c:44:79:22:73:d4:13:7e:53:74:2c:90:47:3c:
                    89:d5:b1:25:30:c3:d9:cc:c2:f7:4a:d5:11:b7:ac:
                    61:c4:63:20:20:e3:2c:48:35:e3:93:63:8c:2a:63:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:3D:19:9F:B4:98:56:BD:82:B5:93:44:E8:55:D3:B2:D1:41:9C
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:60:0e:bb:b8:40:1c:80:e8:8d:4a:09:d6:7e:5e:f4:f2:0a:
         4d:c8:f7:3e:0a:a6:1e:0b:13:46:a0:73:4c:0e:58:e5:f7:51:
         ff:f0:fe:d6:f6:98:cf:48:19:97:63:7e:96:fd:fd:8c:69:02:
         c2:18:1c:6e:bc:00:ee:72:90:b0:0b:9b:a6:d6:4c:4c:a6:bc:
         4e:b8:40:1c:9b:d2:00:23:6a:a7:38:97:96:c7:31:d0:27:79:
         e0:b3:8e:8b:6d:02:87:b5:28:3e:fc:3d:30:29:d4:81:b0:b1:
         08:2e:d6:72:53:33:bc:64:af:ee:75:15:22:03:5b:cb:76:e0:
         6e:f2:ea:b1:ca:83:ae:6c:e5:0d:49:d1:1e:f6:f9:47:9f:ba:
         41:f5:59:a4:be:b8:b4:ae:15:06:b6:39:07:7f:77:04:6e:3a:
         14:76:eb:b2:03:28:e4:76:63:9f:95:49:2d:5d:a9:b1:bf:67:
         e2:16:be:fe:e2:d4:40:22:53:60:c0:dd:11:c7:ed:77:40:17:
         16:13:18:13:d2:02:8f:4e:67:3d:8d:2b:14:86:1a:8d:42:72:
         45:bb:41:e4:6d:f2:8f:9c:11:17:68:a1:8e:7b:d2:44:fa:46:
         40:26:91:d0:23:63:ee:7e:ec:c4:36:60:94:9a:0a:59:75:18:
         e0:76:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org