Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
File:                     Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json)
Hash identifier:          4/t8oVYq90Cb0KYXa+q8cR9cq68w46TLcgUaQO19tp8=
Subject key identifier:   10:A8:67:13:CC:03:21:05:9F:25:88:06:01:8B:3A:DA:B5:E7:67:B9
Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F
Certificate issuer:       /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
Certificate serial:       3431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
Manifest number:          3431
Signing time:             Fri 22 Nov 2024 15:19:37 +0000
Manifest this update:     Fri 22 Nov 2024 15:19:36 +0000
Manifest next update:     Fri 29 Nov 2024 15:19:36 +0000
Files and hashes:         1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: OI5cz4Z2bonbhpCONX0HB2vXtSHfEdtUl2JH+Kj4Hiw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13361 (0x3431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F
        Validity
            Not Before: Nov 22 15:19:36 2024 GMT
            Not After : Nov 29 15:19:36 2024 GMT
        Subject: CN=6740a109-6d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:ec:ce:96:56:4e:81:5b:39:32:47:1f:59:
                    c9:97:4a:db:26:3d:94:86:9a:5a:0c:89:77:da:d7:
                    13:01:4c:99:d0:44:6b:5c:4c:66:7e:b8:4a:ea:9e:
                    a8:2d:c1:65:db:a4:6b:ca:b4:50:f8:6c:8b:a0:e6:
                    83:f6:5c:d2:46:5e:54:e9:53:6c:15:31:af:6e:86:
                    ef:a7:fe:29:2f:52:1c:e1:27:20:29:5d:d3:58:b9:
                    9f:53:3a:2a:3d:42:66:76:d6:98:d7:05:3a:6d:6b:
                    2f:0e:e6:22:b8:10:8d:ff:d8:d4:53:7a:37:68:29:
                    fb:74:b7:34:50:7e:38:2f:b2:d9:39:d9:61:cc:38:
                    73:3d:7b:69:7f:c9:10:6b:1e:e1:3e:14:d2:aa:41:
                    69:36:5a:b6:e1:21:7a:b2:7e:e3:80:04:be:27:aa:
                    4c:ea:6f:65:05:dc:f1:4a:ed:63:d5:63:ee:9a:e2:
                    94:50:95:59:a3:73:3d:0e:1d:3d:d6:4a:cd:f4:bd:
                    bc:4a:a4:44:d3:d5:e2:ae:79:2d:4d:cd:5c:95:c4:
                    d9:4c:f8:7c:e8:d6:4a:55:dc:4b:07:b5:5e:76:34:
                    ac:6f:01:f9:4d:07:b5:ad:81:63:25:53:3e:2d:21:
                    29:ba:e9:51:d1:a2:bb:10:5a:bb:5b:2a:06:01:f1:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A8:67:13:CC:03:21:05:9F:25:88:06:01:8B:3A:DA:B5:E7:67:B9
            X509v3 Authority Key Identifier:
                keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:55:7e:6a:93:84:ae:ed:30:2e:06:2b:7f:98:e8:e7:20:da:
         b2:be:10:0a:a6:42:49:6c:ea:3d:92:49:38:d8:de:25:ae:54:
         86:9c:78:d8:63:82:0b:d4:67:af:35:85:18:24:77:86:9d:11:
         b8:51:73:cd:e6:94:b1:28:88:e3:66:44:00:cf:79:17:43:01:
         1a:09:41:9e:56:69:b0:0b:7c:90:10:b1:9d:a6:96:d6:9a:b8:
         b2:2a:28:01:29:87:d1:db:38:b1:be:81:79:dc:86:9c:29:6e:
         72:de:13:fe:74:f0:ce:48:f6:76:53:9a:9c:ef:10:ae:e9:9e:
         6f:c4:dc:73:e1:a8:bf:29:11:33:d3:df:5e:81:ea:ab:30:71:
         3e:f1:32:33:e3:12:ab:e2:dd:af:e7:75:76:a8:98:03:94:01:
         f7:9f:8e:93:45:b7:af:34:19:0f:48:82:e7:74:7b:4f:53:71:
         28:ff:d0:12:34:a4:d3:52:1a:39:23:85:b2:d8:f8:a7:10:96:
         8c:64:af:c5:0a:77:d0:78:f8:f5:29:8d:1f:0a:88:dc:15:01:
         a5:3e:15:a3:b4:7e:c5:71:91:f8:37:8c:18:38:8d:60:ae:88:
         09:a3:27:ae:86:6f:a6:31:f7:8c:e6:b7:69:e2:50:bc:d7:7e:
         cb:14:49:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex
QjBGODlCNkYwHhcNMjQxMTIyMTUxOTM2WhcNMjQxMTI5MTUxOTM2WjAYMRYwFAYD
VQQDEw02NzQwYTEwOS02ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujbszpZWToFbOTJHH1nJl0rbJj2UhppaDIl32tcTAUyZ0ERrXExmfrhK6p6o
LcFl26RryrRQ+GyLoOaD9lzSRl5U6VNsFTGvbobvp/4pL1Ic4ScgKV3TWLmfUzoq
PUJmdtaY1wU6bWsvDuYiuBCN/9jUU3o3aCn7dLc0UH44L7LZOdlhzDhzPXtpf8kQ
ax7hPhTSqkFpNlq24SF6sn7jgAS+J6pM6m9lBdzxSu1j1WPumuKUUJVZo3M9Dh09
1krN9L28SqRE09XirnktTc1clcTZTPh86NZKVdxLB7VedjSsbwH5TQe1rYFjJVM+
LSEpuulR0aK7EFq7WyoGAfFAMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCoZxPM
AyEFnyWIBgGLOtq152e5MB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE
QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG
QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSVX5qk4Su7TAuBit/mOjnINqyvhAKpkJJbOo9kkk42N4lrlSGnHjY
Y4IL1GevNYUYJHeGnRG4UXPN5pSxKIjjZkQAz3kXQwEaCUGeVmmwC3yQELGdppbW
mriyKigBKYfR2zixvoF53IacKW5y3hP+dPDOSPZ2U5qc7xCu6Z5vxNxz4ai/KREz
099egeqrMHE+8TIz4xKr4t2v53V2qJgDlAH3n46TRbevNBkPSILndHtPU3Eo/9AS
NKTTUho5I4Wy2PinEJaMZK/FCnfQePj1KY0fCojcFQGlPhWjtH7FcZH4N4wYOI1g
rogJoyeuhm+mMfeM5rdp4lC8137LFEna
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org