Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          PVJQHXFdK8OCUKTFhX16eCBRwKtXr8nsWHHIxVPz2yw=
Subject key identifier:   C6:3F:CF:CF:28:72:47:24:83:E3:73:02:8D:B9:90:6A:CD:41:0F:89
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          36
Signing time:             Mon 25 Nov 2024 05:29:00 +0000
Manifest this update:     Mon 25 Nov 2024 05:28:59 +0000
Manifest next update:     Mon 02 Dec 2024 05:28:59 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: tSVRW9PSvnbeg9rn2awp0RJ+YBOFVB59ZSj5m6gckuQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 05:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Nov 25 05:28:59 2024 GMT
            Not After : Dec  2 05:28:59 2024 GMT
        Subject: CN=67440b1b-19a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:32:86:77:62:f4:37:ed:dd:0c:c1:b7:ea:
                    18:06:f3:b7:44:5b:f4:37:4e:db:c7:d4:7d:f5:82:
                    fd:4f:39:3a:f6:df:55:14:e6:96:6b:03:a0:45:9d:
                    17:88:36:0c:af:a5:60:ec:13:38:d3:7b:9b:71:30:
                    44:5b:ca:27:f2:fe:cb:70:f7:87:70:ce:a1:86:07:
                    4c:48:92:1c:b4:d8:af:d6:c8:22:ac:8e:67:ea:d3:
                    9c:61:a9:62:36:22:6b:0f:da:6b:56:66:62:ca:20:
                    f7:9b:fc:b0:bc:1e:72:ce:11:1d:05:68:23:ae:29:
                    5a:81:cf:6a:65:8e:9b:47:f1:e9:b1:76:92:e6:4b:
                    c9:cf:a0:43:d2:98:af:25:fa:17:a9:42:0a:a2:a7:
                    51:1d:5f:5f:84:99:36:4a:a7:fc:fe:8d:83:ad:ab:
                    49:fb:fc:6f:da:41:da:cb:c5:d4:ca:f1:a5:0c:ef:
                    a8:52:ab:7e:e3:ee:ba:2e:12:eb:bc:df:ed:37:40:
                    87:9f:0d:4c:59:46:76:47:9a:de:d3:3d:ce:93:4e:
                    85:5c:b6:b7:f0:ae:e1:98:93:f5:38:98:25:71:23:
                    2d:cb:b4:13:ca:3b:f4:3e:f2:85:e6:35:dd:cc:50:
                    f1:53:79:9d:52:c6:c7:2c:65:bd:79:19:ed:d8:61:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:CF:CF:28:72:47:24:83:E3:73:02:8D:B9:90:6A:CD:41:0F:89
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:18:54:4a:e7:70:dc:d6:df:09:3a:37:5b:15:a1:28:46:26:
         a4:68:60:75:71:10:97:7e:38:84:80:7d:16:79:f9:c0:1f:60:
         c8:45:56:c8:86:24:fd:0e:9d:d6:de:b8:98:39:34:33:fe:e5:
         86:0d:95:33:7b:77:37:ec:03:e5:23:c3:d7:b9:4b:f0:ce:2d:
         72:fb:c2:75:c3:a0:7a:f6:59:00:ac:40:e8:0a:78:f0:60:e0:
         ea:65:96:c2:32:a2:02:21:af:53:d2:aa:f4:8e:5f:0b:62:13:
         cc:a2:1b:d7:16:66:f7:e5:f8:ce:c0:f9:1b:15:ab:58:ad:44:
         a0:bf:46:94:9d:8c:75:78:1f:ab:70:26:db:49:04:06:4e:24:
         78:18:37:b6:89:d3:d6:b6:4f:be:0c:f2:7b:56:7c:4d:a2:d4:
         be:05:8b:15:c6:6f:ac:4d:7d:b9:e8:44:4e:79:6d:5e:03:86:
         49:74:d2:f4:2a:45:17:90:80:12:b4:0b:39:0d:33:36:89:53:
         b6:80:5d:0f:da:67:8a:4e:6c:c0:97:47:8f:c2:1d:7d:3b:ed:
         bb:e5:e1:a6:34:5c:1d:00:b5:81:d4:9d:c7:f9:c6:19:9c:61:
         2e:30:aa:af:77:4f:2a:1c:bb:0f:a1:72:c6:42:9d:5f:f2:e8:
         4a:17:5f:2e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTk2NDExMC8GA1UEBRMoODMxQTg5MTM2REUxMjdBMDBBNjlEM0UwNkZEMEQzNzE3
RjdDRTk5QTAeFw0yNDExMjUwNTI4NTlaFw0yNDEyMDIwNTI4NTlaMBgxFjAUBgNV
BAMTDTY3NDQwYjFiLTE5YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr3zKGd2L0N+3dDMG36hgG87dEW/Q3TtvH1H31gv1POTr231UU5pZrA6BFnReI
NgyvpWDsEzjTe5txMERbyify/stw94dwzqGGB0xIkhy02K/WyCKsjmfq05xhqWI2
ImsP2mtWZmLKIPeb/LC8HnLOER0FaCOuKVqBz2pljptH8emxdpLmS8nPoEPSmK8l
+hepQgqip1EdX1+EmTZKp/z+jYOtq0n7/G/aQdrLxdTK8aUM76hSq37j7rouEuu8
3+03QIefDUxZRnZHmt7TPc6TToVctrfwruGYk/U4mCVxIy3LtBPKO/Q+8oXmNd3M
UPFTeZ1SxscsZb15Ge3YYYTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxj/Pzyhy
RySD43MCjbmQas1BD4kwHwYDVR0jBBgwFoAUgxqJE23hJ6AKadPgb9DTcX986Zow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OTY0L0ZEM0UzODlFNUIx
NDExRUZBQzk3NDQ2MUM0RjlBRTAyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZa
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3hxSkUyM2hKNkFLYWRQZ2I5RFRjWDk4NlpvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1
OTY0L0ZEM0UzODlFNUIxNDExRUZBQzk3NDQ2MUM0RjlBRTAyL2d4cUpFMjNoSjZB
S2FkUGdiOURUY1g5ODZaby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAcYVErncNzW3wk6N1sVoShGJqRoYHVxEJd+OISAfRZ5+cAfYMhFVsiG
JP0OndbeuJg5NDP+5YYNlTN7dzfsA+Ujw9e5S/DOLXL7wnXDoHr2WQCsQOgKePBg
4OpllsIyogIhr1PSqvSOXwtiE8yiG9cWZvfl+M7A+RsVq1itRKC/RpSdjHV4H6tw
JttJBAZOJHgYN7aJ09a2T74M8ntWfE2i1L4FixXGb6xNfbnoRE55bV4Dhkl00vQq
RReQgBK0CzkNMzaJU7aAXQ/aZ4pObMCXR4/CHX077bvl4aY0XB0AtYHUncf5xhmc
YS4wqq93Tyocuw+hcsZCnV/y6EoXXy4=
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:19:49 2024 by rpki-client on console-ams.rpki-client.org