Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
File:                     E3xUsCE1C4OHmX0BWUrINodrRGw.mft (raw, json)
Hash identifier:          gLcce5ILyNV1D/lKAAT08xdA3oHduy99USHOEjq4Gns=
Subject key identifier:   47:E1:E0:F5:AB:8D:55:D1:24:D6:8B:30:04:93:02:D6:2F:50:0F:B3
Authority key identifier: 13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C
Certificate issuer:       /CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
Manifest number:          068D
Signing time:             Fri 22 Nov 2024 22:40:13 +0000
Manifest this update:     Fri 22 Nov 2024 22:40:13 +0000
Manifest next update:     Fri 29 Nov 2024 22:40:13 +0000
Files and hashes:         1: E3xUsCE1C4OHmX0BWUrINodrRGw.crl (hash: dsWtKqxingk3ZeUyd2bRbnT8fA3ED1Y4x1ix3P9gB7M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C
        Validity
            Not Before: Nov 22 22:40:13 2024 GMT
            Not After : Nov 29 22:40:13 2024 GMT
        Subject: CN=6741084d-ebc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:d2:73:8b:47:65:b3:08:3e:4b:42:4e:91:
                    09:65:9d:32:4a:e5:af:d5:76:17:e6:75:5e:92:54:
                    91:be:7f:3e:52:0c:b9:5b:88:38:4a:70:45:6d:d0:
                    ab:3a:1b:71:47:13:68:b7:4b:3a:bf:68:c0:9a:e1:
                    38:20:bf:3b:0a:d7:f1:a4:d3:20:ea:0f:42:be:4c:
                    c5:6b:b8:61:43:b5:d2:72:f0:18:a2:5b:41:67:b6:
                    5f:1d:e1:d6:6c:83:f9:38:b6:a8:d4:e1:61:95:9f:
                    b1:d8:59:e7:7b:1c:12:ab:97:59:30:33:ac:26:55:
                    39:c5:d4:c5:a8:f0:63:93:d2:84:52:c3:19:2d:06:
                    da:49:66:5e:3d:d7:16:b5:98:1e:dc:c8:d1:1e:0e:
                    06:ff:bb:ed:68:ca:e4:a7:fd:59:11:14:36:a5:0f:
                    1e:1e:28:39:c1:76:71:56:ca:3f:e2:4e:8d:75:c7:
                    a7:71:4a:09:d3:1f:22:70:f0:39:23:7b:4e:46:ff:
                    e6:80:2c:25:0e:c8:77:71:32:42:81:4f:b9:02:0f:
                    8b:21:77:4e:0a:d7:99:39:b0:b3:9e:cc:c2:01:13:
                    8e:8b:bb:2c:48:39:ae:11:fc:89:10:4a:76:ca:d2:
                    29:93:2a:fc:97:50:35:88:dc:90:06:0b:18:c1:47:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:E0:F5:AB:8D:55:D1:24:D6:8B:30:04:93:02:D6:2F:50:0F:B3
            X509v3 Authority Key Identifier:
                keyid:13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:fd:ca:97:29:3f:2e:1a:49:65:9b:0d:e0:46:fe:6a:4e:
         13:d7:fc:7b:d3:ff:28:5f:6b:34:e8:90:19:28:79:9d:d8:43:
         d4:6d:1a:16:b7:a2:16:ed:c7:c9:f2:d9:0a:8d:37:63:7e:27:
         1c:f6:18:d0:84:1e:c6:dd:45:e9:36:96:8e:72:3b:fa:6e:d1:
         5f:b1:b3:bd:f7:2a:b7:09:3a:f2:fc:97:97:1c:5c:99:d7:9f:
         2f:1a:d6:25:3e:92:66:86:66:0c:78:06:f0:60:f8:09:c4:62:
         2e:97:94:11:f2:ea:11:91:ae:c8:67:a0:ee:34:45:dd:d8:66:
         85:9a:01:ab:fd:15:23:5f:6b:98:51:6e:a3:07:49:07:61:0d:
         7a:40:cf:74:2a:ee:88:20:0e:5a:40:85:d2:bc:c4:75:13:92:
         c2:92:cc:fe:45:76:c5:4f:81:0f:91:ed:3f:ae:0f:f3:d3:bb:
         80:4b:ff:49:40:19:65:e0:27:07:bb:74:16:89:75:5d:a1:ee:
         9d:49:77:b5:da:44:59:e3:8d:77:ed:2e:f9:42:57:d5:cf:b1:
         cc:1c:a5:b3:c5:49:01:7b:8a:fe:5d:a3:32:b8:33:63:0a:c0:
         bd:22:15:30:f3:c8:99:66:42:c2:8b:a4:d6:bd:d0:cb:33:31:
         fd:28:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org