Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
File:                     nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json)
Hash identifier:          eu/S1CSrzauwH4Sk8NvCQCRkix80crNsiARZZPGeqEc=
Subject key identifier:   90:73:9C:C1:C9:C9:1F:1A:ED:40:31:94:6D:A9:85:1F:CB:5C:22:AB
Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE
Certificate issuer:       /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
Manifest number:          84
Signing time:             Sat 23 Nov 2024 04:36:47 +0000
Manifest this update:     Sat 23 Nov 2024 04:36:46 +0000
Manifest next update:     Sat 30 Nov 2024 04:36:46 +0000
Files and hashes:         1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: c5V6iJdN5VoEIaODQtOF8SAdw1GRgHHJbMFDssLW79s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE
        Validity
            Not Before: Nov 23 04:36:46 2024 GMT
            Not After : Nov 30 04:36:46 2024 GMT
        Subject: CN=67415bdf-253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:3e:a7:39:29:ec:78:8b:ce:a0:40:f1:48:
                    c4:58:77:cd:9f:0b:52:f0:6b:d8:b3:b4:e9:47:5c:
                    7d:3c:b2:d5:8c:78:47:52:85:5c:6d:5a:6c:bf:56:
                    cb:66:8f:e5:73:6c:25:f6:48:db:97:0b:3a:e8:59:
                    57:8f:62:70:49:8e:05:42:9e:c8:eb:b5:0a:16:67:
                    b7:80:b9:ca:5a:16:4c:b6:a6:17:e0:9e:82:d5:c8:
                    91:3c:3a:87:23:73:e5:ed:7c:54:6e:25:86:48:7b:
                    33:a1:ba:30:75:60:aa:71:0f:0a:54:98:3b:f9:e4:
                    eb:1d:91:69:67:58:8e:81:5c:fd:3e:ae:5b:1f:42:
                    08:0a:c7:56:11:3a:7f:32:d4:44:75:1f:bf:5f:c2:
                    4a:73:32:60:55:88:ff:44:10:2f:1e:4c:25:df:6c:
                    e2:02:c6:07:8a:17:aa:62:bb:c6:bb:bb:d5:82:ab:
                    08:a9:e5:12:2c:89:80:3d:18:e9:3f:84:62:f0:e8:
                    27:ef:d8:94:25:1d:95:01:77:55:3b:4d:5b:f4:bc:
                    82:6b:77:09:98:7c:7a:64:7c:6c:7b:bf:c6:8a:35:
                    ef:a2:73:9c:d4:10:7d:5a:07:55:8a:71:e1:1b:d5:
                    44:7b:b1:82:e4:ef:45:3c:8b:c2:f5:9f:1b:4a:3a:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:9C:C1:C9:C9:1F:1A:ED:40:31:94:6D:A9:85:1F:CB:5C:22:AB
            X509v3 Authority Key Identifier:
                keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:87:e8:5f:9e:93:70:53:9d:e5:08:bb:54:73:61:17:d9:59:
         3a:d6:fd:8e:1d:83:f1:4c:01:28:ac:87:2f:a1:f1:be:40:a8:
         4a:99:c9:00:1d:52:55:17:7f:b3:02:11:ef:b4:6c:e6:2f:47:
         33:02:a7:6d:b6:70:9c:1c:50:0c:af:5e:ca:2a:76:f5:10:29:
         3d:ad:00:80:ea:ed:29:8c:c4:ce:43:0d:df:83:23:1a:ad:fd:
         e6:8e:cd:34:ab:3a:73:5c:ad:8a:cc:db:a1:bf:28:e2:6d:13:
         2b:f3:23:a4:19:62:4f:1a:79:15:db:6e:72:d7:d1:de:91:c3:
         10:a3:26:bb:60:a7:b3:b7:f4:c2:f9:8d:ce:69:f0:f5:ab:cd:
         fd:e9:cd:56:c3:bf:bf:55:05:c6:e0:33:d5:ac:12:2b:24:36:
         f6:61:b9:cb:26:c1:81:63:68:8f:bf:63:ad:e8:a7:cc:24:b6:
         e3:bf:d6:4b:65:85:63:65:c5:65:d0:18:3f:e0:72:7e:fe:83:
         ff:a7:26:41:0d:25:06:e7:50:3d:5a:d3:4f:f7:ce:4d:6f:85:
         eb:08:01:b3:1e:7c:4b:6c:68:7a:74:c2:99:05:ab:45:f8:70:
         23:3d:9a:40:f5:49:3d:56:f0:4d:8d:16:99:7b:e4:60:34:52:
         5b:66:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org