Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
File:                     RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json)
Hash identifier:          SESEYyWL/dA+NJploFPK3SAeU13V4IWLWnqQNp9QprE=
Subject key identifier:   13:4E:95:56:2D:37:9A:01:19:FF:0C:1B:A3:CF:4F:2D:6C:24:7B:64
Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED
Certificate issuer:       /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
Manifest number:          41
Signing time:             Thu 21 Nov 2024 05:29:12 +0000
Manifest this update:     Thu 21 Nov 2024 05:29:11 +0000
Manifest next update:     Thu 28 Nov 2024 05:29:11 +0000
Files and hashes:         1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: 23BnvNa54clitj9lbEctuByJs7/q7s9UV+RtJ29/+2Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED
        Validity
            Not Before: Nov 21 05:29:11 2024 GMT
            Not After : Nov 28 05:29:11 2024 GMT
        Subject: CN=673ec527-577e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:41:6b:b3:e7:0e:26:99:82:81:85:c3:78:
                    97:97:e5:13:c6:75:0a:ec:e1:87:66:6a:89:18:79:
                    21:8b:70:f5:bf:18:f4:51:d9:54:85:1b:a1:8a:fd:
                    94:1f:11:fa:c3:8f:13:eb:55:79:05:bb:e7:95:a9:
                    29:1f:8c:5c:f5:1c:25:3a:a6:c5:a6:0e:c2:17:44:
                    b5:e8:88:4d:ce:25:cf:43:6c:82:d8:83:b1:cd:ee:
                    9c:f3:cf:dd:d9:9a:7a:38:fb:95:da:a5:e2:9c:0d:
                    84:ef:ad:f6:7e:1f:3c:52:b7:2b:9b:32:5d:7d:7c:
                    58:39:d8:6d:1e:40:a6:af:4b:fe:24:bb:be:d3:b5:
                    55:c9:84:93:d2:c4:61:a5:f9:0e:be:7c:a8:0f:4d:
                    96:52:4f:1f:2a:5d:c0:c6:da:fc:2d:4a:6c:b5:4e:
                    2a:2d:11:75:6e:2f:4f:49:7d:21:95:a0:e1:9d:21:
                    e0:13:ec:cb:18:d7:ef:61:34:d0:7e:03:92:3f:2a:
                    0e:0c:bc:c5:a9:9d:7c:9b:ba:90:fa:00:57:0e:ac:
                    88:87:03:c4:8f:90:93:16:42:b8:b5:87:3e:81:fa:
                    15:f2:ed:fa:60:cc:2f:43:46:e0:da:9a:db:3a:a7:
                    58:a1:88:bd:cc:dd:73:6a:28:1b:6f:73:f2:ca:d3:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:95:56:2D:37:9A:01:19:FF:0C:1B:A3:CF:4F:2D:6C:24:7B:64
            X509v3 Authority Key Identifier:
                keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:df:bc:fc:34:37:42:7e:97:58:cd:5f:71:64:05:4e:17:
         d7:20:bb:bf:9d:f1:a8:94:f0:f8:ed:c4:b9:ed:10:73:8c:45:
         e8:b1:02:3c:90:6c:1d:b8:1d:96:3c:f1:c1:bd:4b:ca:dd:3b:
         b3:d7:d6:b9:2a:72:6a:64:ea:07:b5:f0:b1:c4:17:8e:49:e9:
         5c:f4:1d:97:e6:73:92:56:e7:a5:06:6f:90:ce:a2:3c:f3:01:
         1d:bd:e1:31:0d:10:9c:6d:9f:07:7c:14:db:30:0d:dd:df:09:
         60:51:ab:4d:40:56:7e:ad:5c:a9:7a:ef:fb:90:f3:6a:e7:16:
         a6:04:01:87:d5:fc:53:a1:53:a3:f6:d9:ca:31:98:c2:00:44:
         f8:4c:14:b4:28:cc:2a:16:5b:51:5a:20:ae:bd:ae:9d:db:31:
         83:6a:6f:90:ee:22:50:e3:c9:88:df:ee:64:42:c6:21:ae:04:
         a6:58:10:2d:f3:64:c3:1d:5f:66:18:47:5d:38:b7:a8:79:2c:
         65:77:96:2e:72:b5:ae:0f:cb:8e:62:3b:7b:7f:ea:06:b0:19:
         67:82:0f:66:3a:24:42:86:06:0b:c5:82:3f:35:51:7a:70:77:
         26:c6:a9:13:45:23:ff:19:2f:55:52:21:1a:a4:df:7a:94:a5:
         93:12:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org