Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          wdXOUhsanQwHxom3dVhp0yBp+GPs0YNDSd5nUjcAKjM=
Subject key identifier:   A2:C4:52:79:60:AF:4D:BC:54:4B:FC:10:82:A0:AA:D5:7F:A2:A1:6A
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          12
Signing time:             Sat 23 Nov 2024 05:59:11 +0000
Manifest this update:     Sat 23 Nov 2024 05:59:10 +0000
Manifest next update:     Sat 30 Nov 2024 05:59:10 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: o02hC5r0UPbEDbS8BofQWZt2seZMTBoKjzdFKYAVoRo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
        Validity
            Not Before: Nov 23 05:59:10 2024 GMT
            Not After : Nov 30 05:59:10 2024 GMT
        Subject: CN=67416f2e-dbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:c7:8b:c6:8e:1f:95:45:94:57:58:5d:1a:
                    f8:58:d8:67:1b:78:a9:5f:19:b0:46:ed:82:97:a6:
                    9c:57:04:6d:eb:9a:b4:d5:93:0a:48:19:ae:02:9d:
                    ae:53:db:96:94:84:03:1d:f0:1d:e2:a0:8b:5e:c7:
                    a7:a7:bf:a3:bb:a8:01:5f:71:d4:c8:50:92:f7:03:
                    6a:16:28:af:c9:87:b5:20:2a:a8:88:aa:b1:16:7e:
                    f3:f5:0e:c7:84:44:fc:a5:b0:67:a2:31:fb:31:61:
                    2b:f0:db:dd:6b:bf:67:60:c1:9e:0c:a7:cb:78:70:
                    83:a4:93:4a:f5:e6:78:12:2d:79:ce:ca:14:e6:bb:
                    70:5c:61:91:47:25:7b:e5:6f:d6:24:1d:af:87:18:
                    8e:aa:63:ec:58:85:3b:c6:77:c5:70:b1:73:b1:88:
                    2e:cd:7d:ff:e2:b5:72:9c:36:80:54:44:51:96:a2:
                    a5:02:26:5c:7d:30:11:58:e5:a8:2e:05:d9:4f:0d:
                    dd:45:7c:96:b4:4c:17:eb:4f:e0:f6:26:08:30:0c:
                    a6:54:2e:3a:e3:cc:e9:4b:aa:90:f2:0b:2f:ed:8f:
                    73:6b:b1:76:06:4d:97:1b:dc:24:2c:a9:99:32:be:
                    28:ec:03:5b:8e:b4:39:4b:17:c9:27:b3:76:6b:75:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:52:79:60:AF:4D:BC:54:4B:FC:10:82:A0:AA:D5:7F:A2:A1:6A
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:79:e2:fe:74:26:80:8f:14:d2:ab:d4:ba:e3:b4:24:cf:35:
         ef:52:b2:eb:6f:d5:7e:f6:3e:df:4a:ca:46:67:a5:a4:5b:9d:
         54:8d:d9:aa:10:c2:27:1d:49:8d:b8:8e:52:6e:be:cb:80:2c:
         0d:e8:0e:ac:d9:01:a7:87:c2:f2:6d:f6:0b:cd:66:6f:af:84:
         03:ad:c1:e5:69:d1:7b:d1:cc:c6:c3:61:82:4f:e2:99:6d:cd:
         fa:8d:b3:34:c1:e0:06:7d:ba:55:a0:94:88:00:05:2f:b1:47:
         5a:95:6e:2b:a7:e5:e5:85:3b:8f:bc:14:4b:94:10:16:67:7c:
         1c:60:89:5a:a5:02:c7:5e:d4:b4:89:66:8a:67:47:d3:88:93:
         38:0d:e3:e8:2e:56:f8:d9:a9:ea:64:f7:f7:15:ca:80:31:35:
         0e:6e:10:8e:95:48:74:7f:8f:43:60:a6:4f:4c:bd:a1:46:19:
         45:f0:96:1c:82:77:1c:e7:46:2b:39:90:5a:7e:3b:93:7c:ce:
         9a:38:dd:3a:91:b0:0f:b5:4c:03:b1:1e:f2:7e:e0:0d:46:55:
         bc:65:0b:47:33:95:7f:8d:92:21:df:80:4c:c1:a6:c6:07:c5:
         f2:5f:1d:06:84:91:8f:48:d6:47:91:1b:e7:2e:ae:f1:d9:5a:
         d9:ba:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org