Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File:                     cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier:          CLpZdPDw5XzIyl244JD5V+0+julzjo/yqwz0/P3sTEs=
Subject key identifier:   25:4F:11:44:18:EE:3C:A2:98:9A:C2:04:55:43:7F:BB:20:95:7B:C9
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer:       /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number:          05D2
Signing time:             Fri 22 Nov 2024 22:31:34 +0000
Manifest this update:     Fri 22 Nov 2024 22:31:34 +0000
Manifest next update:     Fri 29 Nov 2024 22:31:34 +0000
Files and hashes:         1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: jxMIS6N0hvNv4wHVir2VairuDVC2NIS7pTAjgcb3BJU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
        Validity
            Not Before: Nov 22 22:31:34 2024 GMT
            Not After : Nov 29 22:31:34 2024 GMT
        Subject: CN=67410646-e2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:62:41:18:60:70:a0:47:de:fa:2c:4c:f8:
                    fa:07:3c:d5:81:e9:55:c5:5a:30:a0:f4:77:38:7f:
                    9c:23:00:fe:e9:9a:e7:88:38:9d:0c:b6:2a:88:f0:
                    65:68:0a:5e:44:e4:63:a6:4a:5f:ac:4e:29:a6:45:
                    5d:ed:76:04:02:71:ea:91:fb:86:b6:87:95:d2:8c:
                    e2:86:41:2c:df:13:50:e3:e5:9c:53:79:4a:3a:9a:
                    c6:59:cc:0d:7e:58:36:f1:f0:e8:47:07:3c:6a:16:
                    a6:cb:89:1d:eb:3c:f3:5d:12:94:59:ca:04:5d:61:
                    07:ab:cd:0e:69:8e:d1:52:8b:2a:d1:08:21:94:ca:
                    ab:e0:ac:6a:56:83:c8:20:dc:57:d8:65:48:a9:b8:
                    ee:75:83:c0:00:13:18:ad:89:23:f9:fd:a5:8c:14:
                    f7:d5:80:26:db:db:f5:f1:c7:a1:d0:11:ec:3e:63:
                    85:7c:91:22:98:3d:34:51:13:48:7a:98:ff:c7:24:
                    45:6e:0f:7a:0e:48:e6:33:5b:16:70:b5:aa:35:fd:
                    a3:ac:32:ff:7c:a6:c9:a3:4d:9a:e2:63:91:3c:d7:
                    15:4a:fe:ad:3c:b0:87:cf:d2:fd:0c:72:e2:98:0e:
                    31:ad:5f:16:6b:5b:9f:c2:19:53:c1:3d:bf:8d:45:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4F:11:44:18:EE:3C:A2:98:9A:C2:04:55:43:7F:BB:20:95:7B:C9
            X509v3 Authority Key Identifier:
                keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:f0:96:b6:74:c0:6d:51:b5:c1:d4:5f:11:1e:1d:d4:88:
         c2:76:28:48:67:f0:85:53:06:ce:41:f4:34:45:ce:09:f5:8b:
         c2:f3:c4:03:e7:35:40:5b:de:9a:de:c5:b7:58:68:17:90:89:
         b0:c7:1d:e4:f4:57:20:e8:08:fd:03:26:63:03:7f:a1:be:f5:
         e9:0d:e1:d9:d7:c3:ae:f7:02:b3:65:5c:de:49:24:70:13:d5:
         ba:a8:23:47:34:cb:d7:a6:31:9f:f7:c8:8a:ef:94:00:f1:11:
         06:bf:72:e4:dd:fd:3b:eb:fb:36:29:9d:d4:ad:30:7b:d6:d9:
         dd:9f:54:2e:a7:f7:df:a1:56:a4:9b:ae:f0:52:f4:28:dd:f6:
         bd:d9:c7:c1:e9:a6:2f:22:aa:29:3c:00:72:73:02:50:08:41:
         a0:71:8f:9f:7b:01:cc:f1:29:31:0f:da:50:de:87:4d:c2:87:
         f8:e3:f7:86:04:ef:e3:3e:9c:62:1e:e5:9d:ae:da:ad:74:f0:
         09:44:76:bb:8f:73:dd:96:64:e1:0b:d1:82:3b:e2:9a:12:8c:
         72:51:14:89:f5:a9:83:7c:0e:94:db:2f:d2:f4:3c:f9:17:a2:
         33:33:f3:a2:49:00:3c:ab:ec:c7:fc:d5:86:c9:b3:ac:f4:21:
         21:0f:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org