Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
File:                     Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json)
Hash identifier:          TW1VQPZgCUWCGxWwj4woZjGZ9o2faGtos3Z6g668Iek=
Subject key identifier:   1C:88:E9:A1:82:10:95:99:23:B1:28:4A:B7:B1:F0:7B:A6:FE:13:A8
Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Certificate issuer:       /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
Manifest number:          42
Signing time:             Sat 23 Nov 2024 05:23:03 +0000
Manifest this update:     Sat 23 Nov 2024 05:23:03 +0000
Manifest next update:     Sat 30 Nov 2024 05:23:02 +0000
Files and hashes:         1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: 0w4BvFdZTXROUipavSIHabY39GfFbdu0E615Bqkp6Rk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
        Validity
            Not Before: Nov 23 05:23:03 2024 GMT
            Not After : Nov 30 05:23:02 2024 GMT
        Subject: CN=674166b7-2e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:45:54:8a:bc:0f:4b:e6:46:ef:a2:e1:6c:
                    18:df:ca:91:8f:e8:74:cd:bf:9c:c5:c7:fe:c2:22:
                    e7:38:86:a2:ed:b3:e6:8a:e8:77:ba:81:46:18:76:
                    4b:33:ac:df:78:a8:09:9b:39:fb:e7:f7:24:dd:53:
                    9a:38:df:70:f3:92:da:1c:5b:10:d4:43:7f:76:9f:
                    8b:c6:9c:26:27:97:0d:7d:fd:67:3a:49:16:6c:fd:
                    c5:45:01:7b:6e:b7:6a:ff:59:bd:29:e3:2f:19:7e:
                    a1:d6:ac:ea:63:ae:bc:f6:28:86:2e:ce:b6:ce:ab:
                    c3:1c:3f:95:40:52:47:80:d3:52:d3:6d:5a:32:dc:
                    06:92:43:e2:ca:c1:8b:ff:1f:2a:1c:2e:1a:31:a2:
                    29:9c:1d:cc:d5:2e:18:69:1f:c8:03:c8:06:91:f7:
                    80:b3:07:a8:c9:a0:63:a6:bd:04:55:1e:88:45:0e:
                    00:c1:b0:50:e0:1b:df:8c:af:54:c5:af:44:93:2b:
                    13:f0:69:a0:40:be:81:16:12:d2:26:24:62:45:dc:
                    8e:b4:b2:eb:6d:0c:87:bd:4f:64:c8:c6:72:40:2f:
                    9e:55:d1:34:2a:4c:5d:b5:82:41:f4:a3:7a:ce:8e:
                    ad:18:92:57:ab:7b:7c:23:bf:65:29:00:a8:f0:e4:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:E9:A1:82:10:95:99:23:B1:28:4A:B7:B1:F0:7B:A6:FE:13:A8
            X509v3 Authority Key Identifier:
                keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:c6:d9:15:3a:05:33:3b:1f:8b:93:98:77:b2:72:36:81:
         97:5d:26:f1:1c:6b:40:db:25:1f:ff:59:e5:ce:46:24:b7:04:
         94:3f:e8:1a:0e:de:b2:0e:74:03:a4:3e:e2:d7:9c:7b:1b:b0:
         72:97:bf:19:5b:08:53:b0:03:1a:60:0c:3d:9f:10:df:af:80:
         24:18:42:4b:e7:0a:6b:1e:da:12:3a:e3:9d:93:d1:ac:eb:0b:
         d5:a8:06:06:96:b5:ab:82:10:d1:a0:d4:09:a0:8d:92:f2:6a:
         57:01:fb:a8:28:ca:05:d3:8a:01:53:26:4d:f0:e1:a2:43:3b:
         7f:69:3e:8b:a0:a9:66:ed:7b:c8:4a:97:df:46:81:b4:d4:45:
         c2:47:a3:36:14:01:66:a0:b1:be:b9:c7:4e:a4:af:c6:4d:bd:
         f0:68:0d:1a:ef:9c:f5:42:4e:95:26:0f:26:1c:1f:17:1b:c8:
         88:a1:d4:9e:12:c1:cf:b1:01:b8:ae:ae:d0:4d:9e:81:ca:5a:
         66:94:be:c7:55:61:78:93:62:3b:7b:2b:00:2c:6c:c9:84:12:
         aa:02:d9:66:2b:80:ac:7b:2e:78:f9:f5:3e:13:fd:aa:0f:e4:
         33:ff:db:d0:1f:e5:f4:02:cf:34:c4:c0:e0:41:f8:61:b9:eb:
         c3:88:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org