Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
File:                     dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft (raw, json)
Hash identifier:          uzFLuUd4uLnqtdGCTK3RxVqImKxUYshWCkHmbejgDxo=
Subject key identifier:   F9:58:77:37:0A:26:43:E9:28:F5:64:79:D1:CE:58:67:2F:97:23:41
Authority key identifier: 75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52
Certificate issuer:       /CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
Certificate serial:       06D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
Manifest number:          07E6
Signing time:             Fri 22 Nov 2024 21:40:24 +0000
Manifest this update:     Fri 22 Nov 2024 21:40:23 +0000
Manifest next update:     Fri 29 Nov 2024 21:40:23 +0000
Files and hashes:         1: dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl (hash: BL+IS1SyzrQwqwwKSMIcZMIKB3kANbUTl+WIcO9lTRo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A/serialNumber=75BA913DBABFE94A34C7040DAB475C35A258A152
        Validity
            Not Before: Nov 22 21:40:23 2024 GMT
            Not After : Nov 29 21:40:23 2024 GMT
        Subject: CN=6740fa48-8fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:30:c3:18:85:19:82:ad:a4:36:e6:26:10:
                    93:a1:cd:da:db:26:dd:80:66:a6:eb:c4:81:e7:4f:
                    7b:80:92:5f:cd:ea:7f:e8:c4:77:bd:06:2d:4e:98:
                    8f:39:2a:a1:af:5a:37:5d:46:d0:03:25:cf:04:6b:
                    1e:cb:08:ca:44:65:85:7a:ed:17:13:60:f5:d2:33:
                    0b:53:ef:ea:a6:ef:e5:d3:1e:1b:e0:3b:16:95:21:
                    11:29:2c:d4:12:b7:ac:e1:95:08:62:69:8a:51:b7:
                    d0:eb:0a:52:c5:ad:7a:3c:18:85:aa:92:55:97:77:
                    79:47:ae:62:19:af:61:0c:4c:90:f3:9e:e2:e0:26:
                    9d:b5:ef:4a:8f:50:56:ae:9d:35:63:3f:ec:7d:63:
                    86:42:e4:56:a6:ae:54:0b:32:dc:ff:53:cd:d7:9e:
                    97:e6:a1:34:12:a3:70:d5:e2:0d:a4:6e:e0:93:9a:
                    50:2d:30:85:9c:55:b9:24:a5:68:fa:e8:f9:17:ce:
                    f5:ad:9a:2c:ed:bc:b9:28:db:5c:b3:9d:d0:81:35:
                    a4:1e:55:06:42:01:73:81:36:8e:0a:e9:4b:6a:12:
                    37:83:3b:a3:57:aa:95:2d:69:71:a4:9b:89:6f:56:
                    0a:10:53:6c:83:e5:1c:e6:6e:5c:72:15:f3:c1:8a:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:77:37:0A:26:43:E9:28:F5:64:79:D1:CE:58:67:2F:97:23:41
            X509v3 Authority Key Identifier:
                keyid:75:BA:91:3D:BA:BF:E9:4A:34:C7:04:0D:AB:47:5C:35:A2:58:A1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/dbqRPbq_6Uo0xwQNq0dcNaJYoVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:f0:b9:94:7c:97:6b:d9:b0:99:dc:c1:86:bd:9c:5c:a6:
         b6:a1:da:cb:69:76:0c:42:87:7d:d3:73:77:7c:89:20:79:eb:
         7e:9f:0b:0c:b4:5f:5e:f5:6c:45:e8:8a:a2:8f:fc:68:38:88:
         b3:5a:66:a1:69:d8:67:02:80:4d:66:3a:80:41:ac:43:9f:3e:
         d0:3e:06:17:38:32:95:5e:2f:23:a8:5f:4e:69:76:c9:43:27:
         23:2e:40:9e:7d:20:3d:61:2e:4f:3c:05:10:d2:42:c3:05:18:
         01:75:f6:d7:2a:7f:a0:53:eb:d2:0c:71:4a:36:e7:bb:53:cf:
         d9:c7:a8:5f:9c:f0:e9:f2:89:d2:ec:72:b2:98:d9:13:a5:bd:
         03:53:c5:74:d9:05:8f:aa:d3:8e:a8:4a:3b:bc:1a:0c:73:2f:
         1b:80:86:c1:57:85:7c:2a:4a:61:bd:c5:e6:c5:27:3d:a8:c2:
         ac:2f:86:3c:c5:90:d8:f3:71:83:45:87:f2:9f:66:c8:04:4d:
         63:f6:6d:65:06:d3:b8:2f:80:5e:4c:1d:cb:92:4e:53:df:fe:
         66:2d:06:38:df:3c:25:11:a0:1a:1f:9e:e7:35:96:59:66:dc:
         80:5b:ce:22:59:91:4f:ba:e8:f1:96:f1:eb:ba:35:96:09:32:
         5e:10:96:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NEExMTAvBgNVBAUTKDc1QkE5MTNEQkFCRkU5NEEzNEM3MDQwREFCNDc1QzM1
QTI1OEExNTIwHhcNMjQxMTIyMjE0MDIzWhcNMjQxMTI5MjE0MDIzWjAYMRYwFAYD
VQQDEw02NzQwZmE0OC04ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXgwwxiFGYKtpDbmJhCToc3a2ybdgGam68SB5097gJJfzep/6MR3vQYtTpiP
OSqhr1o3XUbQAyXPBGseywjKRGWFeu0XE2D10jMLU+/qpu/l0x4b4DsWlSERKSzU
Eres4ZUIYmmKUbfQ6wpSxa16PBiFqpJVl3d5R65iGa9hDEyQ857i4Cadte9Kj1BW
rp01Yz/sfWOGQuRWpq5UCzLc/1PN156X5qE0EqNw1eINpG7gk5pQLTCFnFW5JKVo
+uj5F871rZos7by5KNtcs53QgTWkHlUGQgFzgTaOCulLahI3gzujV6qVLWlxpJuJ
b1YKEFNsg+Uc5m5cchXzwYo38QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlYdzcK
JkPpKPVkedHOWGcvlyNBMB8GA1UdIwQYMBaAFHW6kT26v+lKNMcEDatHXDWiWKFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1
MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZVbzB4d1FOcTBkY05hSllv
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RicVJQYnFfNlVvMHh3UU5xMGRjTmFKWW9WSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9kYnFSUGJxXzZV
bzB4d1FOcTBkY05hSllvVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArJfC5lHyXa9mwmdzBhr2cXKa2odrLaXYMQod903N3fIkgeet+nwsM
tF9e9WxF6Iqij/xoOIizWmahadhnAoBNZjqAQaxDnz7QPgYXODKVXi8jqF9OaXbJ
QycjLkCefSA9YS5PPAUQ0kLDBRgBdfbXKn+gU+vSDHFKNue7U8/Zx6hfnPDp8onS
7HKymNkTpb0DU8V02QWPqtOOqEo7vBoMcy8bgIbBV4V8KkphvcXmxSc9qMKsL4Y8
xZDY83GDRYfyn2bIBE1j9m1lBtO4L4BeTB3Lkk5T3/5mLQY43zwlEaAaH57nNZZZ
ZtyAW84iWZFPuujxlvHrujWWCTJeEJay
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org