Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
File:                     RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json)
Hash identifier:          zQzS2N6H+VeciiLxFNJSdju4TQZTznNFJXMB6KMEI6w=
Subject key identifier:   20:BF:C6:4F:8D:44:E9:83:17:13:CD:78:09:C6:DA:33:48:A7:FE:F1
Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
Certificate issuer:       /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
Manifest number:          21
Signing time:             Thu 19 Sep 2024 06:07:07 +0000
Manifest this update:     Thu 19 Sep 2024 06:07:07 +0000
Manifest next update:     Thu 26 Sep 2024 06:07:07 +0000
Files and hashes:         1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: KNlxaAfPPkWOZft00bmuijcUSqG8c9NKDKiVDjmWOCA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
        Validity
            Not Before: Sep 19 06:07:07 2024 GMT
            Not After : Sep 26 06:07:07 2024 GMT
        Subject: CN=66ebbf8b-1828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:92:ee:6d:5e:be:59:bc:a7:88:0d:e1:47:
                    8b:ef:36:7a:03:18:e9:f7:ea:eb:28:3b:09:ab:ef:
                    61:2d:89:3f:c0:26:5a:9c:0a:cb:94:c5:0c:78:8d:
                    29:85:99:59:33:e1:87:d3:21:43:5e:5b:3c:89:7e:
                    dd:d8:14:73:f6:ad:15:73:e1:f5:67:86:59:da:cd:
                    f1:a9:d8:ea:ac:12:e6:d5:a4:5a:8f:25:46:94:c7:
                    65:a1:7e:65:6a:ee:f4:79:ea:0a:85:e9:69:da:7b:
                    f6:92:38:de:22:64:32:91:ed:a3:87:ca:36:eb:5c:
                    63:86:58:d5:a7:79:4e:bf:2a:73:cb:6a:de:c0:59:
                    08:83:49:e1:33:02:77:f2:f0:55:70:09:f1:6f:27:
                    6a:08:18:36:e7:de:7a:b0:53:7f:1d:24:a2:2a:14:
                    bd:a1:71:8c:b4:ea:82:8f:2e:0c:d3:99:76:21:72:
                    ff:2c:86:ce:15:0e:c2:b0:d1:a6:4a:f0:1a:ec:b8:
                    7c:6e:33:a0:04:08:1a:41:82:ca:8e:29:d7:7f:ae:
                    b1:d6:dc:67:63:b4:f0:1e:c6:67:07:a6:52:f2:f6:
                    98:49:21:cd:8e:2a:84:cc:87:3f:22:e3:b1:40:01:
                    4b:2a:93:6e:73:59:5b:eb:35:fc:86:08:cd:dc:cb:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BF:C6:4F:8D:44:E9:83:17:13:CD:78:09:C6:DA:33:48:A7:FE:F1
            X509v3 Authority Key Identifier:
                keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:b1:f7:d7:78:6e:58:a1:37:5a:98:85:1f:36:34:5d:d6:
         c4:d9:99:dd:bc:9e:b4:0f:48:11:c2:10:ca:5a:d0:5f:7a:03:
         ea:ed:73:f8:a3:44:13:3c:a5:60:5f:a2:a0:16:34:4d:54:18:
         db:ec:6f:ba:ef:0b:07:0e:82:aa:ec:10:d5:38:48:79:7d:ef:
         aa:7a:c2:cf:85:7c:75:e6:4f:41:95:20:6b:24:78:cb:9b:69:
         79:82:59:ce:07:7a:97:24:f7:85:5f:43:12:8b:6a:4a:fc:51:
         63:63:32:86:e6:93:13:ae:d4:24:61:56:c5:c5:1a:bb:00:ee:
         c6:7f:76:14:d0:00:02:74:22:96:85:09:cf:4e:9d:91:23:40:
         ea:ec:30:98:59:a7:cd:ba:0a:76:70:72:e0:dd:f9:af:6c:1a:
         ca:93:1b:98:1e:e3:ea:0c:e0:ec:46:ff:61:cc:58:66:78:af:
         da:2e:4d:1b:7f:ae:ae:ab:23:97:74:37:20:f8:24:34:14:c6:
         83:35:2d:f3:16:30:9b:fb:3c:96:6e:ce:40:c2:40:a4:e4:5b:
         77:4a:0e:23:b7:39:a1:0d:19:f1:d4:f4:ef:69:de:a0:58:0c:
         63:a0:7b:3f:1b:dd:88:2d:09:b5:73:53:5b:b3:f9:4f:e8:f7:
         72:78:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:13 2024 by rpki-client on console-ams.rpki-client.org