Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
File:                     EnvYBqI30MrekRgrn8cmZZvi73E.mft (raw, json)
Hash identifier:          9PjAUpQb0amgjjImu2mkZ9HyO4W990SnXIH8jHtrLjI=
Subject key identifier:   CF:82:32:C1:0D:F3:8A:C3:F6:D9:62:6A:39:DD:7E:13:CA:71:10:03
Authority key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
Certificate issuer:       /CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
Manifest number:          05D3
Signing time:             Fri 22 Nov 2024 22:33:50 +0000
Manifest this update:     Fri 22 Nov 2024 22:33:49 +0000
Manifest next update:     Fri 29 Nov 2024 22:33:49 +0000
Files and hashes:         1: EnvYBqI30MrekRgrn8cmZZvi73E.crl (hash: QjLFv1dzJIxBoPujYC8kfUOC86RXld3SYNRz0w3JQvU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl
                          rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
        Validity
            Not Before: Nov 22 22:33:49 2024 GMT
            Not After : Nov 29 22:33:49 2024 GMT
        Subject: CN=674106ce-9265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:21:df:0b:2b:66:62:b5:5c:da:ce:d0:f0:
                    9e:00:2a:67:40:5c:9c:b8:05:e0:37:80:a8:d3:e2:
                    fc:7c:8a:bd:08:15:c7:f4:da:76:f6:f1:75:23:9d:
                    42:69:58:17:94:a8:fe:4f:18:9a:cf:16:a2:c0:24:
                    bc:ec:68:d0:64:a3:a1:2d:bc:57:e8:cf:bb:d9:49:
                    7d:5f:ab:17:85:28:c4:39:03:be:d2:59:5a:23:92:
                    68:42:d1:e4:c0:d7:c5:24:63:5b:bd:89:44:7b:ee:
                    b9:e7:bb:65:d2:d2:b2:51:73:c9:e7:8c:e1:5d:88:
                    00:80:55:ab:00:88:2c:54:a2:71:61:a2:13:d0:b4:
                    c9:28:8c:ed:26:8f:bf:4b:62:55:a3:47:3c:1c:c7:
                    4d:c1:aa:83:fb:b3:5e:26:23:6f:0f:b7:9b:4f:01:
                    be:6b:35:58:03:ff:6e:6f:5f:d6:fb:fa:c1:74:ae:
                    de:9a:00:9e:e2:b0:90:db:1f:76:61:15:68:a4:5d:
                    79:a4:07:c6:6d:4a:46:3a:c5:7f:f5:15:46:39:34:
                    c6:20:be:46:7c:f6:1c:fc:06:1b:fc:54:d6:70:b8:
                    ed:c9:0c:03:13:8a:87:ed:70:23:8e:70:3f:7c:d5:
                    f4:f4:5c:92:4c:6c:0a:47:ee:76:7d:aa:37:6f:a2:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:32:C1:0D:F3:8A:C3:F6:D9:62:6A:39:DD:7E:13:CA:71:10:03
            X509v3 Authority Key Identifier:
                keyid:12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:ef:47:fe:b0:71:9c:53:84:c2:b7:ae:f7:db:58:7a:7c:
         15:c0:a3:7f:30:f8:45:80:d8:fb:e4:b9:9d:36:3c:9d:d4:4f:
         78:73:14:6e:59:d4:c6:c3:e9:e6:27:e1:45:3d:d7:89:8b:a6:
         a2:a4:81:e7:07:54:64:84:95:1d:81:2b:24:3d:06:59:37:4a:
         93:0a:f4:5c:74:27:70:af:89:99:46:84:4a:07:41:5f:45:5e:
         f4:10:aa:0a:43:95:fb:e5:7a:17:20:90:01:fa:ff:32:e9:8e:
         e3:07:ae:76:8b:57:b5:d4:56:d5:49:16:ba:68:12:f2:0e:67:
         71:4f:57:b6:ff:e6:8f:41:03:c5:2c:a2:dd:06:3b:97:91:7c:
         8a:d0:a7:f2:13:fd:be:74:30:be:27:2f:74:b7:4b:58:f5:55:
         e8:bc:2e:c5:57:af:83:c4:67:24:e7:a9:19:19:14:2e:03:25:
         ed:53:8e:a7:3d:e9:76:14:a6:19:77:71:bb:5d:e0:ed:7f:27:
         bf:b1:21:77:3e:f4:d1:c4:5a:e8:f1:3e:fd:11:07:f2:b7:65:
         5e:9a:3d:c0:2e:ac:22:7d:c2:01:40:d4:c2:ce:da:72:e6:b7:
         1f:22:db:09:b8:ee:89:0e:82:fe:86:30:9d:76:0d:d4:52:96:
         50:69:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org