Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
File:                     wYD2VoONE4d3oUtu7zRrekx5G10.mft (raw, json)
Hash identifier:          s/G7PwL7eLd2NRl9jaGUqEXuPcNtWfgLr2Bti2UxqG4=
Subject key identifier:   4E:A1:0D:6D:AB:79:27:48:04:5D:76:AA:F5:BA:1B:62:E3:83:E1:C2
Authority key identifier: C1:80:F6:56:83:8D:13:87:77:A1:4B:6E:EF:34:6B:7A:4C:79:1B:5D
Certificate issuer:       /CN=A91ABC49/serialNumber=C180F656838D138777A14B6EEF346B7A4C791B5D
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
Manifest number:          0727
Signing time:             Wed 20 Nov 2024 21:15:08 +0000
Manifest this update:     Wed 20 Nov 2024 21:15:07 +0000
Manifest next update:     Wed 27 Nov 2024 21:15:07 +0000
Files and hashes:         1: wYD2VoONE4d3oUtu7zRrekx5G10.crl (hash: xKWBwzJNiW5PxhEWtDo2baXa0kwbR1dm3rEQi9XfZ+w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.crl
                          rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABC49/serialNumber=C180F656838D138777A14B6EEF346B7A4C791B5D
        Validity
            Not Before: Nov 20 21:15:07 2024 GMT
            Not After : Nov 27 21:15:07 2024 GMT
        Subject: CN=673e515c-4c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:c0:ec:e1:e8:ef:b5:85:f4:5c:d1:20:70:
                    9b:21:3b:f5:b7:e2:e2:78:7c:c2:13:be:26:a2:39:
                    fe:89:ab:ce:82:f8:35:1e:29:b2:8a:87:dc:77:7c:
                    b9:4b:83:ce:0e:3f:75:69:d7:71:c5:60:20:15:cb:
                    b3:a4:0c:63:ad:0e:9c:a6:df:07:4f:09:a7:fc:49:
                    8b:7d:99:e5:95:1b:3a:a4:bb:5c:c3:b6:c8:2d:a4:
                    04:e4:ff:04:26:94:51:3e:58:46:44:2a:cf:25:d2:
                    4c:bc:5d:68:ac:eb:b7:aa:30:22:21:94:65:4e:f4:
                    1a:e3:cc:68:6b:3f:dc:b7:6d:43:5b:fb:56:98:66:
                    fb:fe:9b:c6:9d:33:fc:2a:e2:7d:8a:1c:78:ef:31:
                    50:d6:84:db:a3:e8:1a:5a:ae:ab:ad:8a:c3:a7:21:
                    2d:4e:ca:bc:a0:80:25:46:b6:cd:6d:6b:d3:0e:47:
                    b3:c1:8a:5d:c2:c5:71:5b:3e:08:84:4b:77:e7:23:
                    2b:22:9c:80:70:51:d6:b8:5b:2d:15:a8:a4:63:29:
                    8b:0e:68:06:24:b1:d2:23:c4:3f:cd:c0:16:cd:67:
                    14:08:1b:db:be:ea:9c:b8:57:70:a3:27:29:79:a2:
                    0a:67:71:ae:7c:87:1c:71:2f:22:38:fd:1d:6a:97:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:0D:6D:AB:79:27:48:04:5D:76:AA:F5:BA:1B:62:E3:83:E1:C2
            X509v3 Authority Key Identifier:
                keyid:C1:80:F6:56:83:8D:13:87:77:A1:4B:6E:EF:34:6B:7A:4C:79:1B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wYD2VoONE4d3oUtu7zRrekx5G10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/EC33CF580D7711EBB53AEA40C4F9AE02/wYD2VoONE4d3oUtu7zRrekx5G10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:34:a8:fb:34:5b:bd:86:c7:4d:d2:2e:65:f5:48:64:bc:32:
         e9:ef:de:07:55:87:a1:9a:76:53:aa:36:59:4f:13:8b:a2:ed:
         c8:7b:08:fd:35:e5:ba:bd:07:8c:bd:2f:91:df:78:d0:c9:95:
         c2:f6:9f:16:2b:d5:d5:d6:d9:b1:5d:9e:14:8f:5a:a2:e3:1b:
         2f:63:cf:ec:e9:76:84:42:61:f3:9a:f6:c0:93:54:a0:8d:18:
         88:58:6b:e0:81:ff:1f:a4:0b:7a:0e:c7:07:37:1b:34:43:b8:
         af:cf:34:ed:5b:a1:8b:22:bf:7c:7b:1c:23:1a:b7:81:52:65:
         9c:1c:b3:0a:42:b1:cc:85:28:9a:54:c1:c2:aa:0e:21:d7:50:
         ee:70:37:58:f2:0d:66:2a:67:8d:aa:56:b3:a0:f9:ca:a4:8c:
         b2:18:b9:50:3c:23:47:70:47:53:2c:68:72:77:7f:db:b4:56:
         0b:ca:30:8e:2e:c5:63:ad:5e:bb:f3:db:c9:d8:33:3c:1a:22:
         d8:36:9f:38:f2:8c:7b:a0:68:0b:02:c0:6d:c7:43:ca:63:26:
         c5:fb:3f:b7:76:b1:63:d6:22:17:32:b6:9c:8a:ee:99:53:f1:
         0f:aa:de:fc:18:89:cd:37:21:68:f8:cf:46:1e:53:d8:39:c9:
         a5:c9:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:44 2024 by rpki-client on console-fra.rpki-client.org