Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
File:                     d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json)
Hash identifier:          8zF17qJ+GSB0Sc6Rfu8SVB2dn+wFCmLqhl1b9p/xIFo=
Subject key identifier:   5D:76:06:C8:CE:51:68:E6:51:FE:CE:2A:3C:93:CD:09:3D:6F:0A:69
Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
Certificate issuer:       /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
Manifest number:          08DF
Signing time:             Fri 22 Nov 2024 20:09:52 +0000
Manifest this update:     Fri 22 Nov 2024 20:09:52 +0000
Manifest next update:     Fri 29 Nov 2024 20:09:52 +0000
Files and hashes:         1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: xdUQO8sVSKS+3oajWRESyobEIhzOEpQtm5unMsgHiBI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
        Validity
            Not Before: Nov 22 20:09:52 2024 GMT
            Not After : Nov 29 20:09:52 2024 GMT
        Subject: CN=6740e510-7623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:15:27:6b:b3:cc:9c:78:d3:9d:f0:46:9a:
                    f9:3c:cb:ff:17:cd:90:21:02:a5:80:04:67:43:08:
                    68:a7:4b:99:08:e6:0c:84:ed:ad:f7:6d:b5:d4:cf:
                    ee:b1:92:12:5b:19:e7:e9:ec:cb:3d:23:f7:00:78:
                    2f:d0:8b:8a:fd:2b:c8:ae:c8:5f:ce:25:00:e7:8f:
                    ec:81:d7:08:60:5f:1a:9d:ac:57:fd:25:19:4f:03:
                    cb:f5:bc:1f:40:1e:7a:c6:68:c7:af:13:0d:c3:b5:
                    67:af:f4:87:b5:bc:e9:b9:70:bc:bf:47:be:bc:f3:
                    07:58:bd:84:27:7b:2e:b9:06:80:44:e1:86:a9:80:
                    76:8d:34:a1:32:2e:2e:67:22:cb:b0:a4:f8:c4:0f:
                    0b:89:39:8c:44:fd:50:75:4d:b5:d7:d5:1f:17:5f:
                    7d:68:00:73:c5:28:0f:f0:75:93:84:8c:d6:d7:c8:
                    b5:52:2e:48:ac:11:d4:57:e7:83:7d:6b:b7:7d:e5:
                    c3:ae:47:dd:bf:17:1c:5d:79:fe:6d:87:f9:0d:d6:
                    b9:cf:1d:6b:e4:ae:b5:d1:8c:7e:f8:48:02:8e:12:
                    13:33:e5:78:4e:f4:81:b0:cc:73:6b:fb:e2:54:a7:
                    88:c8:bb:fb:e4:9e:87:2c:1b:34:54:6a:13:7c:40:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:06:C8:CE:51:68:E6:51:FE:CE:2A:3C:93:CD:09:3D:6F:0A:69
            X509v3 Authority Key Identifier:
                keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:3c:3e:d3:56:1d:4d:75:bb:b4:e5:ef:c4:cc:43:6c:19:
         de:e0:35:56:3e:e6:69:c8:eb:54:36:f5:d1:ac:9b:8d:a9:e0:
         b8:b8:5f:b4:21:c8:ef:e4:60:58:de:be:03:18:f1:6e:e5:d6:
         73:a9:c5:7b:d1:a2:55:73:ab:ab:f2:00:83:22:06:02:af:06:
         fb:9b:39:07:23:04:9d:29:4a:d2:a6:7b:75:e2:a6:5c:5e:41:
         44:df:6b:93:6d:41:be:54:fc:12:b5:eb:fa:be:08:71:e6:42:
         19:12:86:ae:68:4b:e6:1d:f6:25:34:15:f1:e5:75:6e:55:c1:
         21:d6:2f:8f:a6:37:e8:30:1a:a0:0b:d2:bf:b5:61:07:8d:d0:
         aa:c5:54:e9:34:87:01:cc:74:0e:d0:b3:19:e9:76:34:4c:6a:
         16:30:06:80:79:97:96:3b:45:cb:4e:ad:c9:f8:78:7c:57:8a:
         73:fa:a8:17:b4:96:0d:1d:a7:6b:41:57:e3:d7:ed:4d:81:b6:
         a6:d6:11:e2:d7:94:85:7e:f5:1d:48:9e:5e:03:e0:31:da:6c:
         c3:71:06:b3:5b:99:17:fd:4f:23:bd:59:31:42:cb:f5:37:73:
         3c:51:25:42:ea:76:b4:4c:e9:a6:38:f3:76:a5:d1:57:2c:1a:
         ab:35:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org