Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          m9Qkcbpw+0D71Y1YE/2r1C67pHaGzaaRtsx1njw0RSY=
Subject key identifier:   0E:91:42:CC:5F:AA:61:FB:E5:04:A8:27:54:1D:09:19:22:BA:5D:5F
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          043C
Signing time:             Thu 21 Nov 2024 00:51:36 +0000
Manifest this update:     Thu 21 Nov 2024 00:51:35 +0000
Manifest next update:     Thu 28 Nov 2024 00:51:35 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: miNs/lyRwDS0nv8F2It5WSiprg5BrsGKvJgOBxH9teA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Nov 21 00:51:35 2024 GMT
            Not After : Nov 28 00:51:35 2024 GMT
        Subject: CN=673e8418-bc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:c7:9e:c3:5e:31:23:bd:22:e1:de:6c:d7:
                    bd:9a:74:4d:3c:45:fe:38:35:6c:56:7d:99:86:da:
                    34:11:05:68:f4:63:89:c5:59:86:eb:b1:2d:2e:54:
                    b7:d8:eb:f4:cd:a3:03:0e:40:b9:08:d1:dc:96:4c:
                    81:99:0d:36:51:fa:96:b8:bc:d0:1e:5c:f2:e2:60:
                    19:16:f8:b3:b4:1f:79:ec:76:63:20:5e:13:8e:80:
                    18:b5:96:02:47:a6:6a:63:8c:ab:b8:65:1a:6a:55:
                    ff:f7:13:a4:b0:cc:f9:3a:be:54:11:c8:d1:48:39:
                    23:e5:b7:3d:e8:ac:c5:cc:ad:14:ec:d6:12:65:66:
                    fc:1d:d5:e2:4a:65:82:fd:24:c6:c6:d1:8a:db:63:
                    a3:e5:dc:77:52:ed:87:9b:94:55:dd:3c:a8:67:1e:
                    f3:45:83:60:64:52:3a:be:62:e5:36:20:7e:01:43:
                    b6:10:a7:da:95:0c:69:7e:7d:f6:27:0f:f5:a4:c7:
                    3a:5a:3a:67:f6:d4:b5:49:0e:67:00:ac:de:d2:50:
                    d8:a9:4e:eb:e8:0e:35:84:96:70:f1:ea:d0:a9:05:
                    fd:a0:70:0a:77:7c:11:41:79:fd:3b:25:6a:e2:23:
                    f7:f5:1d:94:4b:7f:3b:1b:f7:95:95:d8:37:05:b8:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:91:42:CC:5F:AA:61:FB:E5:04:A8:27:54:1D:09:19:22:BA:5D:5F
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:73:98:74:b1:2f:d7:89:44:f4:fc:10:6c:f6:bc:9f:d7:
         ef:80:dd:3c:d4:98:1c:e0:7f:9d:c3:d6:64:c8:58:bb:dc:c5:
         63:f4:fc:84:fc:1b:14:d7:bb:12:ef:3a:a4:31:7c:fe:3c:02:
         e3:55:0c:c0:a6:9b:e4:99:d8:45:1e:33:4e:d6:7d:b7:b7:d9:
         5c:5f:85:35:27:03:e4:82:92:21:4e:1a:e7:cf:5d:cf:4f:f0:
         fe:4f:0f:4b:0e:80:a7:1a:9e:8e:04:3c:e9:48:21:87:80:fe:
         45:8b:50:fd:7a:39:5f:c1:4b:46:0a:07:81:88:8b:7c:1a:e7:
         32:a6:5a:6f:31:b5:99:d9:a3:86:c4:42:82:65:b5:a5:60:c7:
         8d:af:de:57:28:33:b9:04:76:12:5b:0f:3f:ba:c8:a7:0b:f8:
         8f:0b:4a:04:90:51:a5:c0:a4:d6:8f:c8:38:a2:a3:bb:b9:d6:
         05:c1:1c:2e:c1:e9:07:eb:91:72:ac:7a:26:3b:84:4d:41:68:
         45:01:6b:6f:f5:ce:38:00:c2:4b:84:9c:73:f5:0b:22:f6:57:
         9f:3b:d7:04:5d:60:ff:8c:36:6d:50:01:56:5b:16:61:a5:44:
         62:20:8b:16:39:e2:62:c6:28:fd:93:9f:7e:45:77:14:22:77:
         ba:0f:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org