Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          3cEXgWtZu8+HIpiSBpPo2z7/76tLULbFmqR3hwoMDsw=
Subject key identifier:   87:81:5E:2C:69:30:9B:62:28:24:4C:BB:C2:F3:C5:C9:6B:07:ED:A4
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       08B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0913
Signing time:             Fri 22 Nov 2024 20:22:35 +0000
Manifest this update:     Fri 22 Nov 2024 20:22:35 +0000
Manifest next update:     Fri 29 Nov 2024 20:22:35 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: fkPwrepYmTFIZ7xudkxBdIhcehzUltpjrLooC4YIluE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Nov 22 20:22:35 2024 GMT
            Not After : Nov 29 20:22:35 2024 GMT
        Subject: CN=6740e80b-7013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:f6:18:0e:fc:61:79:4a:98:25:14:53:87:
                    04:d5:8c:e2:bf:56:99:6c:25:17:b6:e8:d8:fb:51:
                    9d:fe:ba:08:80:de:ad:d9:05:41:5a:e4:89:9b:8e:
                    67:bf:da:9b:68:16:54:a8:53:c0:e3:42:1c:8a:fd:
                    a0:b8:02:b3:ea:ea:6a:c8:81:49:69:b5:63:e4:e7:
                    f1:2f:91:2e:66:6a:8d:07:f9:84:34:e6:1d:72:02:
                    d3:24:58:46:89:d9:04:f8:cf:51:ec:7a:1b:06:9f:
                    89:09:41:80:4e:04:eb:85:3c:bd:43:70:db:61:ff:
                    5c:38:56:73:39:61:28:8b:90:bf:6d:80:8f:3a:55:
                    6c:6f:6f:46:0e:2b:90:f9:36:93:e4:97:a9:87:e9:
                    ca:d6:cb:bd:1f:bc:a1:83:fc:dd:df:dd:58:7b:6f:
                    bd:7a:77:4d:07:f9:9f:e0:8f:cb:9e:48:18:21:4f:
                    96:46:e2:0d:cd:2e:db:a3:d4:7e:ee:ef:a3:62:8a:
                    22:bb:9b:c6:e3:27:fc:69:a6:89:a9:ce:f3:7e:d8:
                    3a:6a:59:9c:ca:ce:40:19:d0:d1:e2:c8:3c:09:a1:
                    ae:5c:1a:15:26:30:df:2b:9b:b2:30:d5:6e:fd:c1:
                    3b:00:89:8e:b8:97:f6:23:0c:c5:d2:ed:c8:dc:9d:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:5E:2C:69:30:9B:62:28:24:4C:BB:C2:F3:C5:C9:6B:07:ED:A4
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:db:45:62:fc:14:b7:84:8a:27:d0:74:bb:96:91:3a:67:
         ad:ea:5a:58:7d:79:12:54:7e:c2:6c:aa:92:83:65:ea:5c:8a:
         5a:b3:4d:b2:e1:7e:e9:8a:d5:a6:ff:13:3a:eb:40:81:45:74:
         39:8a:2a:49:3b:6e:8f:ea:9c:a9:33:4e:fa:56:a3:0e:d5:92:
         aa:30:f7:17:df:56:e3:70:17:8e:b8:d2:46:a0:4a:d7:51:0d:
         f1:2b:47:ff:a2:09:e9:18:a1:f9:8d:b1:49:b5:65:40:84:4c:
         1a:7c:61:52:7c:d8:81:06:6b:31:05:fa:bf:0b:04:a2:a5:9b:
         24:3f:b2:f6:37:4e:a6:b4:d2:de:e6:e2:a5:81:26:cc:4e:a8:
         72:c9:d3:e6:da:80:3f:be:e8:2d:5b:07:43:e1:6b:db:87:c1:
         8d:ca:a3:fc:5f:c3:5e:e6:35:5a:99:c7:79:49:97:7c:93:31:
         b8:fe:ff:ac:90:9b:ad:25:c4:ae:63:12:f0:50:89:44:fd:2a:
         c1:d8:00:59:8b:ef:7a:21:59:e7:e4:92:0d:3b:8c:2c:ec:83:
         a7:7d:45:92:1d:a8:18:34:63:26:e2:c5:8f:a5:59:28:14:0e:
         5a:7b:ec:c2:0c:73:c0:4d:ea:8b:cf:be:ae:27:22:92:76:74:
         5e:16:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org