Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
File:                     MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json)
Hash identifier:          S8cgy6jeKyB5Pay0BkGgE0uGXtDJDDlT90tWbVr+BCY=
Subject key identifier:   3E:7F:E8:63:41:10:BF:F4:60:E9:9F:80:EF:C2:0E:42:47:B9:F7:EC
Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2
Certificate issuer:       /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
Certificate serial:       0332
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
Manifest number:          0331
Signing time:             Sat 23 Nov 2024 00:39:40 +0000
Manifest this update:     Sat 23 Nov 2024 00:39:40 +0000
Manifest next update:     Sat 30 Nov 2024 00:39:40 +0000
Files and hashes:         1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: lgBfQEnyKSosdJxa0btV7wcBsGTyrVEzHcrW0i0QtuA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl
                          rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
        Validity
            Not Before: Nov 23 00:39:40 2024 GMT
            Not After : Nov 30 00:39:40 2024 GMT
        Subject: CN=6741244c-ea77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:84:da:f9:9a:35:20:7b:b0:93:aa:ce:0f:
                    f3:60:fc:ff:4e:57:af:c1:78:11:c5:d7:17:37:4b:
                    f1:cd:14:32:30:38:1e:6f:19:d9:29:f0:3d:ac:37:
                    d2:6d:78:0c:15:5c:56:39:e8:de:5f:13:1b:b2:89:
                    55:96:c8:b2:10:b6:7c:93:c0:cd:be:44:ee:a4:4a:
                    42:de:3e:60:22:e7:f7:41:45:63:d8:7b:c2:2a:3b:
                    07:79:84:57:c4:76:09:de:fe:90:11:58:8e:9f:35:
                    d4:70:11:3e:87:f1:c8:24:84:20:fc:60:cc:48:28:
                    03:3c:29:98:1f:24:ec:a4:ac:bb:7c:bb:8b:02:be:
                    42:d3:ad:66:c7:d2:3c:47:6a:4f:bc:63:8d:cd:7e:
                    1b:23:6e:2a:0b:d1:b4:cd:f2:4e:a8:83:a1:0d:97:
                    30:4b:b4:c6:20:4c:28:62:f0:dd:ea:67:de:7d:c7:
                    ac:7c:df:4e:0e:e9:7a:7f:f1:7b:cf:0d:fe:ca:e8:
                    61:d7:28:f3:61:f6:ca:cc:e7:ae:09:bd:b7:37:d4:
                    5e:23:ee:2d:f8:e6:ed:af:72:f2:ea:56:b5:0e:cd:
                    20:84:14:3c:19:2d:51:42:ee:b1:b5:c1:7c:03:0b:
                    86:31:ec:ea:5d:a7:33:a2:26:5e:d0:22:9e:c2:57:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:E8:63:41:10:BF:F4:60:E9:9F:80:EF:C2:0E:42:47:B9:F7:EC
            X509v3 Authority Key Identifier:
                keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:05:7a:27:e5:14:18:01:bc:2e:b3:f0:9c:16:06:0d:5c:ce:
         88:a5:ca:58:ea:90:9e:03:a9:06:48:b5:08:f6:0e:42:0b:47:
         1f:c6:8c:82:73:71:75:a9:c8:02:4a:45:7e:96:c7:81:9e:11:
         e7:23:d4:3d:17:a8:f6:f7:a1:37:33:65:63:be:b5:de:8d:79:
         a3:7e:21:09:c4:a1:a4:62:55:6c:fb:d7:87:46:ac:85:1d:99:
         37:40:94:cc:21:a8:9d:a3:c6:52:d4:da:eb:e1:d5:d5:68:74:
         91:8d:b7:63:37:93:c1:c1:9b:0c:bd:76:b6:5d:ae:3e:1e:4b:
         ac:8a:4a:d0:4f:7f:04:a9:5a:ef:92:e5:bb:8a:03:4d:f4:fb:
         26:fd:01:ad:d2:3e:a1:28:b0:ac:62:3c:ae:c7:7e:ae:71:c0:
         86:64:60:5e:b0:6c:5f:82:74:4e:bf:37:2b:60:fb:88:fb:72:
         b2:26:c4:6c:17:99:17:c9:05:cf:58:7a:5f:04:0d:6d:72:26:
         1c:53:88:4c:5f:93:dc:be:a2:56:15:de:21:b0:7b:51:ab:3c:
         5e:59:18:28:c2:54:e4:40:c3:2f:fa:81:38:59:90:90:83:9e:
         98:e5:d5:ed:af:cb:de:c6:0c:d1:5e:d5:ae:e4:89:9b:62:ef:
         b4:aa:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org