Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File:                     KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier:          JQ2eWMciFM+1scnjCxmV70w4RXHzcwK+VxOo42rK6cQ=
Subject key identifier:   D8:B3:EE:AD:13:B2:BF:52:EB:6D:2B:A1:1F:91:A3:AC:55:98:F0:97
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer:       /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number:          03B9
Signing time:             Sat 23 Nov 2024 00:28:32 +0000
Manifest this update:     Sat 23 Nov 2024 00:28:31 +0000
Manifest next update:     Sat 30 Nov 2024 00:28:31 +0000
Files and hashes:         1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: Z/GfucambCZ8bjgOSoJnyQZCbcHrKui766tnvaixOa0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
        Validity
            Not Before: Nov 23 00:28:31 2024 GMT
            Not After : Nov 30 00:28:31 2024 GMT
        Subject: CN=674121af-a23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:ec:00:04:07:97:69:c9:08:d4:94:b1:56:
                    6f:73:68:5b:d9:7b:3c:1d:ba:eb:e9:d3:a1:ff:23:
                    5e:95:61:91:28:8d:72:86:83:1b:3b:b2:82:64:cb:
                    c6:66:c6:03:2a:d1:ff:47:24:b3:2a:c0:cb:2f:c3:
                    f5:a3:ab:fe:b7:22:e0:f4:0c:ec:56:6c:fe:9b:6c:
                    d1:b6:ff:66:ab:4d:3b:b2:d4:16:31:db:3a:d0:fa:
                    cb:0d:a0:31:69:73:27:e3:69:1f:63:10:ea:03:95:
                    1f:de:35:bd:99:15:bd:8e:b4:3a:2c:bc:d1:51:89:
                    cd:e4:d6:f2:bd:22:14:7e:8d:ae:c7:eb:21:50:97:
                    98:46:51:e2:40:80:63:88:4a:b7:1f:88:7d:e9:f3:
                    02:6b:a0:f8:50:85:23:1d:63:27:f7:cc:f5:d7:6f:
                    36:f6:dc:27:b6:86:72:a4:0b:51:e3:bd:b4:cc:e9:
                    ee:07:0d:71:96:07:1b:aa:63:a5:a2:03:22:7b:2f:
                    55:bd:c0:07:37:35:3f:57:fb:fd:4b:95:51:0a:55:
                    e0:a0:26:a3:da:27:38:2a:09:5f:32:e8:39:71:8c:
                    7e:80:94:64:39:f4:ee:52:dc:5b:d7:e9:f7:22:e4:
                    79:97:92:26:b9:13:bb:a4:bb:26:68:c0:6d:f1:af:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:EE:AD:13:B2:BF:52:EB:6D:2B:A1:1F:91:A3:AC:55:98:F0:97
            X509v3 Authority Key Identifier:
                keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ae:3f:51:b7:de:d2:16:70:16:5f:55:0e:e6:eb:4f:49:dc:
         b0:1e:bf:aa:8a:7e:fa:51:57:27:92:2b:12:ac:54:89:00:dd:
         4c:38:1e:97:f6:4b:2e:97:ef:31:c6:a0:82:27:1c:93:0d:87:
         7b:26:29:c4:0c:c7:ff:23:70:15:5a:ed:ff:2e:3a:3d:b9:84:
         c0:f0:60:73:6c:e8:de:e3:a3:03:18:9d:a0:5c:44:1e:ff:2e:
         21:71:fd:06:e1:28:07:6b:0b:bb:6c:7b:74:c3:f0:b0:0f:c5:
         6b:16:64:37:6b:44:fa:2d:f8:cc:d5:b9:a4:ad:0d:04:fc:a4:
         86:b8:c6:4d:61:51:5e:f4:49:85:9e:9e:c7:6e:4b:e1:6c:7e:
         7e:c5:2b:c5:50:c5:36:6a:63:75:a6:20:77:36:9a:a8:15:37:
         f2:e2:03:43:31:d7:50:44:2c:fe:2e:ab:c8:ae:6c:0f:fd:c4:
         5d:06:81:8e:ee:24:31:7b:ea:e0:cf:83:b5:e6:eb:ef:10:68:
         ea:08:eb:17:5b:f3:b0:5c:be:90:cc:41:8a:10:50:6d:a1:e9:
         d6:c7:6f:b6:89:20:d3:a8:66:36:08:f4:07:b8:5c:b3:5e:72:
         0f:c7:44:4e:23:49:7e:36:b9:b0:b0:48:3d:5d:74:42:82:40:
         5e:93:d8:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5
NDc0QjMxOUIwHhcNMjQxMTIzMDAyODMxWhcNMjQxMTMwMDAyODMxWjAYMRYwFAYD
VQQDEw02NzQxMjFhZi1hMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IbsAAQHl2nJCNSUsVZvc2hb2Xs8Hbrr6dOh/yNelWGRKI1yhoMbO7KCZMvG
ZsYDKtH/RySzKsDLL8P1o6v+tyLg9AzsVmz+m2zRtv9mq007stQWMds60PrLDaAx
aXMn42kfYxDqA5Uf3jW9mRW9jrQ6LLzRUYnN5NbyvSIUfo2ux+shUJeYRlHiQIBj
iEq3H4h96fMCa6D4UIUjHWMn98z112829twntoZypAtR4720zOnuBw1xlgcbqmOl
ogMiey9VvcAHNzU/V/v9S5VRClXgoCaj2ic4KglfMug5cYx+gJRkOfTuUtxb1+n3
IuR5l5ImuRO7pLsmaMBt8a9jqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiz7q0T
sr9S620roR+Ro6xVmPCXMB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4
MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL
T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKrj9Rt97SFnAWX1UO5utPSdywHr+qin76UVcnkisSrFSJAN1MOB6X
9ksul+8xxqCCJxyTDYd7JinEDMf/I3AVWu3/Ljo9uYTA8GBzbOje46MDGJ2gXEQe
/y4hcf0G4SgHawu7bHt0w/CwD8VrFmQ3a0T6LfjM1bmkrQ0E/KSGuMZNYVFe9EmF
np7HbkvhbH5+xSvFUMU2amN1piB3NpqoFTfy4gNDMddQRCz+LqvIrmwP/cRdBoGO
7iQxe+rgz4O15uvvEGjqCOsXW/OwXL6QzEGKEFBtoenWx2+2iSDTqGY2CPQHuFyz
XnIPx0ROI0l+NrmwsEg9XXRCgkBek9gI
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org