Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
File:                     k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json)
Hash identifier:          2Iox7PVUcV0bNtBR8Cu8DELUzlvCHgfVdpnRysu291I=
Subject key identifier:   3A:82:30:C0:E7:F4:40:8E:39:C2:C0:DE:02:BE:D5:2C:2F:07:B6:17
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Certificate issuer:       /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial:       2625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
Manifest number:          2625
Signing time:             Fri 22 Nov 2024 15:42:08 +0000
Manifest this update:     Fri 22 Nov 2024 15:42:07 +0000
Manifest next update:     Fri 29 Nov 2024 15:42:07 +0000
Files and hashes:         1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: 6BO3eyRPWeyBceJgDddNsVftJMadt25TlAvh0kmSqxg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9765 (0x2625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
        Validity
            Not Before: Nov 22 15:42:07 2024 GMT
            Not After : Nov 29 15:42:07 2024 GMT
        Subject: CN=6740a650-25dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:a9:6b:1e:41:ff:a6:d3:28:04:c4:d6:37:
                    8c:eb:45:80:4e:ee:ba:07:dc:1c:9a:3f:20:87:46:
                    d5:bd:e1:45:88:f3:58:b8:50:b7:de:ef:ad:e4:b0:
                    ac:30:bd:99:1c:c9:b6:1b:a4:0c:82:37:2f:3c:99:
                    ea:71:eb:6c:cd:3e:1a:da:a6:bb:0a:80:f8:48:dd:
                    e1:1a:c3:d2:c8:62:d1:95:99:f2:b2:0a:d9:4a:11:
                    45:f4:02:93:21:a8:b7:56:3d:b3:2f:57:28:0d:15:
                    7b:be:4d:ed:7a:bd:b8:68:85:09:42:cb:cf:3d:71:
                    a2:46:e9:19:9c:22:32:84:bd:16:31:5f:47:1f:d8:
                    aa:a2:85:0d:ea:ef:92:46:b3:26:e8:8a:73:1c:91:
                    50:93:00:9e:9a:94:7e:54:9e:60:d3:ae:3c:4a:fd:
                    2e:67:c1:42:42:ea:eb:1a:6b:02:1d:71:51:b7:b2:
                    4d:b1:d1:50:75:21:31:00:07:4b:47:94:f4:a1:c2:
                    76:a7:ed:45:e6:bf:00:16:27:bf:55:1c:f6:5f:41:
                    9f:49:df:fb:19:62:7c:b5:0f:4a:98:08:36:1c:7a:
                    83:77:b2:6e:09:87:4c:84:83:ca:b1:c7:0b:40:73:
                    e7:ea:b2:a3:3d:1c:07:8b:e0:d9:c0:17:44:43:ac:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:30:C0:E7:F4:40:8E:39:C2:C0:DE:02:BE:D5:2C:2F:07:B6:17
            X509v3 Authority Key Identifier:
                keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:d5:57:77:b3:aa:67:da:c6:f2:6b:1d:1e:37:34:65:bc:
         92:49:8b:b2:1c:6b:fb:51:a1:70:ec:13:af:f6:8b:b6:54:2d:
         ce:7e:3d:0e:3e:90:f1:ea:55:7d:99:c7:13:a3:f5:76:d9:09:
         8d:5a:5e:d2:92:57:3b:74:c6:0e:2f:6c:0e:63:48:14:9b:2b:
         45:58:23:48:d2:53:0d:9a:69:67:ce:0e:1c:41:f1:eb:5e:d9:
         23:12:9d:4e:60:54:9e:02:62:9b:72:29:5e:ec:5f:bd:df:b0:
         df:1d:14:5a:04:6e:1c:30:41:53:45:08:21:0f:7a:1e:2a:e6:
         69:cf:8c:64:d8:a1:e4:3a:5b:7b:52:75:ce:2a:0e:45:b4:e1:
         c4:25:fe:5d:48:8d:f8:85:87:d5:76:56:79:04:82:1e:3b:40:
         a8:8c:bc:22:25:93:ae:1b:3a:25:65:92:05:3a:15:a1:08:7d:
         bf:4e:d7:b8:d2:85:f2:a8:07:49:e5:d2:34:63:ff:88:67:17:
         1e:1c:1d:b5:34:f6:8c:9d:17:da:79:1a:a7:01:4b:47:38:ad:
         a2:e5:b3:e3:62:2d:23:1a:b6:60:c1:01:1b:0a:43:15:f2:5a:
         df:4b:5e:8a:f9:36:08:e1:73:04:d2:32:89:59:cb:65:55:0b:
         a8:16:40:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz
RENFRjQ1MjMwHhcNMjQxMTIyMTU0MjA3WhcNMjQxMTI5MTU0MjA3WjAYMRYwFAYD
VQQDEw02NzQwYTY1MC0yNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAupax5B/6bTKATE1jeM60WATu66B9wcmj8gh0bVveFFiPNYuFC33u+t5LCs
ML2ZHMm2G6QMgjcvPJnqcetszT4a2qa7CoD4SN3hGsPSyGLRlZnysgrZShFF9AKT
Iai3Vj2zL1coDRV7vk3ter24aIUJQsvPPXGiRukZnCIyhL0WMV9HH9iqooUN6u+S
RrMm6IpzHJFQkwCempR+VJ5g0648Sv0uZ8FCQurrGmsCHXFRt7JNsdFQdSExAAdL
R5T0ocJ2p+1F5r8AFie/VRz2X0GfSd/7GWJ8tQ9KmAg2HHqDd7JuCYdMhIPKsccL
QHPn6rKjPRwHi+DZwBdEQ6zvOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqCMMDn
9ECOOcLA3gK+1SwvB7YXMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD
RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x
eS1NeHd1N1Zib2c5enZSU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFzNVXd7OqZ9rG8msdHjc0ZbySSYuyHGv7UaFw7BOv9ou2VC3Ofj0O
PpDx6lV9mccTo/V22QmNWl7Sklc7dMYOL2wOY0gUmytFWCNI0lMNmmlnzg4cQfHr
XtkjEp1OYFSeAmKbcile7F+937DfHRRaBG4cMEFTRQghD3oeKuZpz4xk2KHkOlt7
UnXOKg5FtOHEJf5dSI34hYfVdlZ5BIIeO0CojLwiJZOuGzolZZIFOhWhCH2/Tte4
0oXyqAdJ5dI0Y/+IZxceHB21NPaMnRfaeRqnAUtHOK2i5bPjYi0jGrZgwQEbCkMV
8lrfS16K+TYI4XME0jKJWctlVQuoFkCz
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org