Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          fyHfGD9uy4/oB8sg6PW8J3Eof06is5FuFr4myk9aPMs=
Subject key identifier:   11:12:40:AB:64:B5:84:4D:75:3A:1D:7A:15:88:0E:DD:65:7B:F0:CF
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          11
Signing time:             Wed 25 Dec 2024 06:06:49 +0000
Manifest this update:     Wed 25 Dec 2024 06:06:49 +0000
Manifest next update:     Wed 01 Jan 2025 06:06:49 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: Boj8LaUfcywAcjVwM5SHDkqUk5RyskXxASz9yAHjLEc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jan 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: Dec 25 06:06:49 2024 GMT
            Not After : Jan  1 06:06:49 2025 GMT
        Subject: CN=676ba0f9-36bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:7f:80:93:b4:1d:47:96:fc:45:6f:2b:4d:
                    aa:c0:11:59:f7:52:bd:ad:56:c8:0c:6b:2e:c3:88:
                    21:60:f7:d2:0e:ac:e2:12:a4:4c:db:25:76:07:3e:
                    d9:95:0a:3f:0c:71:40:9c:98:69:b8:f7:a6:6b:cc:
                    5d:f5:e2:f3:c4:f2:20:a1:ee:c2:87:ec:f8:32:e8:
                    1d:61:55:9e:10:68:8b:36:af:81:4c:ec:b2:59:c4:
                    90:5c:ae:40:6e:54:30:b0:40:c8:eb:29:7f:da:f1:
                    6d:82:d0:2c:cf:13:1b:e6:9c:0e:53:b1:79:52:b7:
                    9b:f0:3b:46:c2:89:33:11:63:a5:58:69:c1:2b:b6:
                    25:3c:65:e7:77:68:f9:29:7c:26:d8:de:3d:5f:ac:
                    70:e7:2a:59:42:7c:51:e6:71:84:21:17:13:3b:1b:
                    53:6e:d3:82:e2:b9:0b:39:78:f3:54:05:8e:2a:92:
                    37:7d:16:c6:04:01:81:ce:6e:97:f6:30:ab:4f:d7:
                    fe:9c:be:98:9a:90:ef:2f:d8:9e:f4:e0:76:dc:29:
                    f0:4c:a8:29:18:ad:62:55:2d:7a:84:60:4c:13:a8:
                    7a:60:2f:cd:29:26:c8:a3:b7:06:98:e1:bd:41:d6:
                    16:ae:35:56:0c:08:99:4f:a0:56:9c:23:ff:0e:aa:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:40:AB:64:B5:84:4D:75:3A:1D:7A:15:88:0E:DD:65:7B:F0:CF
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:d7:e5:17:b3:a5:98:f8:dc:63:b6:56:f4:df:88:d8:8b:
         0a:bb:fe:33:6a:27:80:12:2a:98:f4:68:41:ec:2a:8a:30:64:
         9a:d0:d5:b1:da:67:96:36:ae:d5:b3:58:31:50:85:ca:41:9e:
         19:7f:87:dc:34:d6:ca:6f:2a:f4:94:a6:1a:68:91:c8:e1:73:
         79:58:ba:4d:b0:28:8c:46:a4:b9:14:02:8e:4d:38:95:6b:78:
         34:95:94:fa:f8:9b:8e:3a:8a:3d:03:04:06:c8:91:2d:94:d9:
         ed:00:71:e2:37:d3:b5:bb:1b:d5:dd:4f:24:58:a9:0f:07:68:
         04:b2:82:de:88:4c:e2:55:ea:3c:04:35:02:0c:21:1b:6d:3c:
         e8:75:91:54:74:ac:a6:85:2f:f5:21:19:f4:f4:4a:42:94:fc:
         7b:7a:f9:57:f9:ac:9e:92:66:f3:16:c4:80:c2:6b:20:b5:3b:
         eb:23:e9:18:8d:09:99:59:09:1e:14:dc:c7:67:27:ef:a5:f5:
         fa:e7:5d:e5:d2:62:b0:d9:e3:a8:61:df:82:7b:65:ea:62:84:
         15:93:51:20:6f:9e:05:3d:70:14:db:23:a5:f7:18:a8:4a:1f:
         8a:3e:b8:e8:0d:ac:45:ba:2c:0d:bb:39:f6:a4:aa:fb:53:46:
         68:a8:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 08:01:21 2024 by rpki-client on console-fra.rpki-client.org