Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          gIT3zdWNtE9QvQ1ATek63v0eYbymCK/rfjKInqG+sus=
Subject key identifier:   60:9B:6D:A0:03:FB:99:16:74:70:C8:29:20:14:F2:AE:39:4D:18:8B
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          14
Signing time:             Thu 21 Nov 2024 06:04:39 +0000
Manifest this update:     Thu 21 Nov 2024 06:04:39 +0000
Manifest next update:     Thu 28 Nov 2024 06:04:39 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: ZvPMV6K8G+LlNnC1nL5TwQYZmu8USxOAEStN52HCHwQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Nov 21 06:04:39 2024 GMT
            Not After : Nov 28 06:04:39 2024 GMT
        Subject: CN=673ecd77-bba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:21:85:32:b2:85:8d:93:e3:5c:58:61:fe:d5:
                    5f:b6:37:db:03:e3:fa:94:9a:89:01:f6:46:ff:66:
                    d8:1d:a5:d2:87:0c:0e:a9:ee:5e:e7:e6:b9:00:c8:
                    ca:5d:96:03:c3:6e:93:0c:ef:bd:63:09:ea:90:c2:
                    6c:1d:a4:43:41:90:4f:14:53:d8:cc:92:e0:56:da:
                    05:ce:35:4f:83:4a:23:67:b2:0f:b7:75:4c:00:6d:
                    1b:99:58:b6:8d:d2:40:92:00:67:94:a5:e1:73:02:
                    ee:4d:12:68:12:d9:48:26:b5:c5:d7:bc:43:ba:2b:
                    f1:7c:24:c5:f0:5f:6d:f8:3c:90:9e:a5:0c:3c:a4:
                    38:86:c9:b4:a0:f4:12:9c:30:e6:40:fb:a8:a4:16:
                    7e:89:11:72:b6:d8:5c:94:de:b9:c1:9c:3e:6e:34:
                    02:e1:71:70:a3:0e:4d:bc:7f:37:65:ff:fe:01:fe:
                    41:bb:30:61:c8:8b:a4:a2:9a:2e:9c:77:1b:4b:e8:
                    f7:91:37:ed:1e:56:a0:58:0e:e2:5f:10:3b:eb:9b:
                    cf:42:84:6b:4d:83:bd:99:c7:4b:6d:89:1b:bd:31:
                    21:37:46:a3:d0:ff:46:3e:3f:e7:97:18:77:55:79:
                    8e:b5:23:d7:ef:42:a6:c6:12:46:64:1f:e0:65:88:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9B:6D:A0:03:FB:99:16:74:70:C8:29:20:14:F2:AE:39:4D:18:8B
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:89:94:3d:4b:16:74:18:12:2b:ba:e7:ee:f7:3f:fa:42:b5:
         14:bc:0d:c4:79:01:f3:5a:b1:58:46:53:d1:98:f5:7b:b5:c6:
         b1:86:1d:5a:db:74:ca:e9:8f:40:95:7b:f9:98:b4:a9:dd:16:
         b4:7f:4f:ea:24:8a:f9:f7:ce:02:13:04:fb:82:6c:72:2e:59:
         de:a2:81:a6:3c:48:73:ec:4a:f0:43:c1:d8:9f:73:35:1d:65:
         e6:1f:64:9a:12:56:33:04:67:cb:41:fc:1a:35:ad:0c:78:99:
         70:b0:8e:c9:47:ec:73:78:28:1e:73:e1:21:97:58:f0:09:2a:
         43:8b:a5:63:8f:d1:84:1d:79:43:22:b4:24:db:fc:db:bb:0e:
         4a:3e:ed:fc:06:de:ee:84:40:a1:52:29:da:21:f7:64:10:4e:
         b6:af:99:81:e7:84:d5:83:a7:0b:3e:2a:51:c4:d3:d8:86:d6:
         a0:99:52:cc:d4:10:fa:ad:cd:13:2b:db:c1:6c:27:ba:32:1a:
         10:83:bf:be:04:d0:0d:e3:e1:d4:7b:c9:96:75:5b:18:00:a4:
         da:22:e7:5d:98:cf:ff:97:1e:7a:e9:0a:f2:9e:53:bd:d2:26:
         15:74:61:80:9b:70:38:83:e0:b5:24:8a:c1:3e:7f:4d:aa:f0:
         6a:3c:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org