Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
File:                     O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json)
Hash identifier:          5Zd7U9SoK5lTVZnFnnb+MTwWGxwI2GN8UxRSbNv6uBY=
Subject key identifier:   72:B9:BA:A3:18:98:94:72:CB:38:E7:7B:B2:08:A5:19:00:84:E4:0C
Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7
Certificate issuer:       /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
Manifest number:          90
Signing time:             Thu 21 Nov 2024 02:39:38 +0000
Manifest this update:     Thu 21 Nov 2024 02:39:38 +0000
Manifest next update:     Thu 28 Nov 2024 02:39:38 +0000
Files and hashes:         1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: WfLqdW1JK/Hrdvn7osMLs3VrKg33uR1lh3GsRbollJw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl
                          rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7
        Validity
            Not Before: Nov 21 02:39:38 2024 GMT
            Not After : Nov 28 02:39:38 2024 GMT
        Subject: CN=673e9d6a-6ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:35:ca:2b:54:d9:db:3e:85:e4:1c:15:18:
                    28:b6:70:4c:83:7a:34:43:28:80:78:bb:7d:78:d6:
                    3c:b6:94:c1:8c:37:c6:70:82:e5:9f:f8:ca:90:7c:
                    b5:1d:49:3f:2b:7e:9c:fd:da:e9:cb:87:b1:c5:10:
                    cf:29:32:15:a2:0e:dd:4c:29:e0:69:e5:9a:6a:17:
                    80:d3:b3:55:5c:6d:c8:1f:91:b8:a1:a6:f6:1c:91:
                    15:e5:df:7f:0b:8c:4d:a1:98:05:17:e1:b4:31:24:
                    72:42:ab:3a:3b:25:56:9e:43:18:12:b6:3c:c5:3d:
                    9f:3e:95:a2:dd:65:cb:2a:0e:a5:22:9d:06:44:7b:
                    ff:d9:ad:f8:47:df:bc:3c:d0:e2:0b:20:bd:bf:d9:
                    54:a4:80:63:a6:31:51:ff:25:2d:6a:9b:72:d5:d4:
                    ac:d5:28:e6:a9:24:9b:cc:99:73:49:08:46:af:dd:
                    f8:5a:df:25:af:b4:a2:42:61:d1:66:0c:e3:73:37:
                    7e:da:7b:3a:9c:da:78:9e:19:c4:cf:6e:5f:09:1f:
                    2c:9a:71:9b:e9:a0:1e:c6:12:82:3b:98:bf:7c:22:
                    03:de:f5:d2:95:c2:77:c7:0e:db:0c:2a:10:54:ac:
                    83:e3:cc:66:9a:8d:a9:53:91:e6:9c:2b:81:ff:b1:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:BA:A3:18:98:94:72:CB:38:E7:7B:B2:08:A5:19:00:84:E4:0C
            X509v3 Authority Key Identifier:
                keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:93:56:05:63:c6:ca:81:b3:4f:44:ba:16:41:aa:8a:a0:13:
         5f:25:78:48:fe:20:22:47:f1:9b:a2:20:10:84:11:01:64:eb:
         37:13:41:9f:f3:bd:3a:8c:43:dd:1b:c5:d9:71:66:26:a3:e5:
         e2:e3:82:cd:5d:34:a5:39:00:38:80:ed:f7:58:65:79:91:ff:
         9f:0e:33:0d:aa:40:07:e4:92:15:64:7a:9c:20:5d:8a:be:73:
         21:4b:b4:c1:8d:d1:9d:f4:48:c0:f0:0c:3f:66:57:20:e2:1a:
         8f:02:f4:6c:bb:1d:47:9a:3d:b7:25:c5:2d:76:f6:83:ce:57:
         68:92:9c:c2:68:49:dd:04:76:0b:9d:0f:2b:58:4d:46:ad:6b:
         3f:f3:f9:1d:4e:88:c1:ee:1e:71:61:eb:94:bf:79:ec:91:79:
         e6:6c:b0:88:12:93:23:1b:a5:c5:e4:b6:13:13:5a:cd:99:ce:
         8d:0c:ce:ee:16:b4:2e:f2:1f:58:01:4f:e3:e4:3f:64:0d:0c:
         46:d1:98:52:9c:c1:5a:93:9a:a9:ad:30:29:e7:4f:15:23:0d:
         56:59:57:91:cd:94:7a:e4:07:63:9b:9e:78:a7:eb:12:7b:6a:
         12:2b:34:e7:f4:bc:f1:53:49:b7:6f:2c:dc:9c:fe:23:6a:c1:
         fc:62:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:03 2024 by rpki-client on console-fra.rpki-client.org