Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
File:                     voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json)
Hash identifier:          ynkAjoY+bqQJFfLBYPGgct8STzXseExaHjqimC0ekP8=
Subject key identifier:   47:36:1A:FF:D5:20:32:A0:9F:B4:AC:62:85:38:85:B0:5D:4C:7B:BD
Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F
Certificate issuer:       /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
Manifest number:          0737
Signing time:             Fri 22 Nov 2024 15:19:35 +0000
Manifest this update:     Fri 22 Nov 2024 15:19:34 +0000
Manifest next update:     Fri 29 Nov 2024 15:19:34 +0000
Files and hashes:         1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: QLavjnssjtW/OfLG/PhoisSM/2Mlf55h1Vs4aJy7Zs4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
        Validity
            Not Before: Nov 22 15:19:34 2024 GMT
            Not After : Nov 29 15:19:34 2024 GMT
        Subject: CN=6740a106-9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:08:da:d5:07:f6:1c:7b:75:73:ca:9a:59:
                    c9:26:41:08:9e:a0:13:1a:14:e4:45:52:46:24:42:
                    d1:c3:94:cf:b4:1c:60:72:37:7d:a8:8f:53:2a:34:
                    28:97:b9:a9:2e:1d:e1:36:f5:52:db:0a:4c:90:a5:
                    86:5c:01:5a:ff:2a:2f:8d:ad:5d:70:6c:01:bf:fd:
                    60:b6:ba:2c:5e:0a:9c:b5:26:07:b3:ae:83:49:ee:
                    31:7f:fd:64:f5:76:f9:b3:99:f8:13:4f:4c:20:d5:
                    e4:ec:f6:f3:85:4b:2e:78:6d:5f:26:9c:0f:9e:1f:
                    48:c5:cf:1e:13:62:a9:87:1c:e4:f4:a7:6c:02:29:
                    68:26:0d:19:ca:a3:12:bc:54:04:ae:ed:45:19:60:
                    40:43:fa:0a:53:13:98:01:75:ab:53:4b:4a:aa:6a:
                    9b:ed:49:2e:aa:33:01:a5:80:35:1e:5f:7d:f5:b3:
                    8a:57:f9:2f:e5:24:1f:e2:f5:c5:e0:d1:ac:17:16:
                    c6:d9:59:8f:e1:b5:48:8c:c8:a5:cd:cf:29:14:55:
                    1b:82:75:45:a3:9a:e7:e4:11:01:f8:5d:eb:a9:9c:
                    55:f2:aa:58:68:88:8b:75:e4:dc:9d:df:07:21:2d:
                    11:61:00:2c:d9:28:ef:f7:89:d5:2a:c3:29:e1:36:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:36:1A:FF:D5:20:32:A0:9F:B4:AC:62:85:38:85:B0:5D:4C:7B:BD
            X509v3 Authority Key Identifier:
                keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:e1:f5:2d:56:72:8f:d6:71:24:06:72:e8:02:80:6f:ef:
         3f:82:b8:6f:ec:4b:df:e6:8e:6c:9b:f9:64:6e:75:51:68:db:
         72:78:16:2e:7c:62:e1:c6:be:33:38:fb:5b:3a:a3:87:fe:75:
         9b:fb:55:38:df:71:53:27:d0:7c:87:b9:c4:77:ac:56:84:bb:
         80:74:5d:5a:fa:5c:fa:df:88:cc:8f:45:72:24:b7:55:64:02:
         ed:36:89:38:83:e6:96:6b:c8:0e:2a:25:76:7f:ff:79:d9:20:
         ea:8d:8b:85:4d:91:c7:17:fa:4f:32:f2:0e:1e:f8:63:e7:80:
         f4:6f:f9:ba:a9:4d:5e:85:57:cd:3a:22:d0:28:d4:88:6c:04:
         c4:f9:cb:61:57:d4:0b:e1:b1:34:eb:2f:a0:7d:e2:1f:f2:42:
         c1:39:88:dd:fe:7d:a8:4c:03:fc:27:d7:1d:e0:bc:6f:4e:30:
         30:e4:2f:bb:3e:9d:77:2e:cc:23:ec:12:dd:97:1c:a1:a4:ad:
         ab:0f:74:cd:8f:a9:2e:cc:80:74:c0:cb:1f:e4:49:f1:e6:d9:
         21:ae:fe:84:89:35:ba:83:1b:a1:28:e5:21:ac:38:e3:c1:95:
         58:b3:39:a3:7f:44:6c:3a:74:71:fa:40:43:63:86:d9:f7:f2:
         9e:a1:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org