Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
File:                     uvgLngYKGXeZFoErAACdd3OoSwA.mft (raw, json)
Hash identifier:          Yj5Cg/yHpcXBwM3t4MZ9aAYVjsczLsmIwhu2ijFg+Uc=
Subject key identifier:   8A:3B:53:84:92:E8:C9:22:F2:D0:FD:0E:B6:88:F9:F7:2B:DA:FA:B3
Authority key identifier: BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00
Certificate issuer:       /CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
Manifest number:          7F
Signing time:             Sat 23 Nov 2024 04:38:22 +0000
Manifest this update:     Sat 23 Nov 2024 04:38:21 +0000
Manifest next update:     Sat 30 Nov 2024 04:38:21 +0000
Files and hashes:         1: uvgLngYKGXeZFoErAACdd3OoSwA.crl (hash: s4B6pF5exscKJg2BXxnxs0N8Mdbt6fhQpf7puo3PVT0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00
        Validity
            Not Before: Nov 23 04:38:21 2024 GMT
            Not After : Nov 30 04:38:21 2024 GMT
        Subject: CN=67415c3e-d9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:0d:88:79:5a:e6:2f:c8:65:78:c5:e0:f6:
                    f8:50:74:8a:99:bc:ce:7c:85:ae:49:a9:30:7a:3f:
                    fc:85:cd:03:38:88:7f:4c:d3:2c:15:fa:f0:7d:20:
                    93:6e:57:e9:f0:61:3b:81:9d:ec:d7:6f:21:02:7c:
                    01:5f:5f:87:b6:c9:67:b1:61:49:8b:6b:c9:f0:ab:
                    f4:8e:a7:16:8c:a5:0a:17:71:75:b0:98:fa:b4:ed:
                    ff:db:b5:5f:9b:0a:b8:0f:25:1b:4b:7b:60:81:5e:
                    25:0e:3c:6f:59:7d:7c:4e:af:98:af:da:82:bf:0e:
                    cc:21:05:cf:d1:66:2c:4a:fb:00:f2:a6:42:0f:7e:
                    e0:64:14:54:c8:f6:77:25:e9:ed:43:53:79:40:7a:
                    da:39:03:04:40:e8:40:7f:3f:1a:b4:d6:2a:ea:81:
                    78:d7:0e:0a:c7:b8:b7:57:9a:f1:3d:5b:73:9b:ab:
                    5f:85:39:da:f3:10:3a:60:bb:b1:57:68:08:d7:ea:
                    52:d5:03:eb:88:81:77:bb:71:f3:f3:0c:c6:e5:cb:
                    16:84:90:f2:2a:b3:d1:aa:b8:04:b1:9c:17:de:cb:
                    a7:69:91:f6:ca:19:48:c8:44:fa:f0:d5:27:b8:d9:
                    ed:f8:11:db:ae:e0:45:74:a0:dd:5c:50:4d:a5:57:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:53:84:92:E8:C9:22:F2:D0:FD:0E:B6:88:F9:F7:2B:DA:FA:B3
            X509v3 Authority Key Identifier:
                keyid:BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:83:9d:f0:6c:42:e5:e8:76:38:25:b3:36:4a:f9:6f:fb:
         2b:ea:65:bb:00:28:84:f6:15:15:cf:4e:c9:9d:89:c5:fb:b8:
         e3:1d:4f:e7:98:bc:de:0a:2e:8e:d3:05:7f:27:af:95:cd:6f:
         86:4f:29:00:7a:a0:fe:ad:80:6f:6e:ff:30:52:7b:9c:7e:02:
         a4:be:47:ab:76:9e:2d:44:1a:ee:93:f2:05:85:db:62:8b:e5:
         5c:cb:86:5e:11:e7:2a:20:d0:f7:85:50:3e:0f:f6:59:51:b4:
         24:43:22:54:8f:77:20:6f:a2:ac:6a:eb:76:f7:73:8b:a7:de:
         6e:da:f8:b4:37:1f:c0:b8:5e:f9:2b:44:fa:08:63:d1:36:1f:
         f0:16:d3:e3:6d:c8:35:0e:4d:3a:82:78:48:19:dc:ca:5a:a6:
         57:28:e5:ab:6e:0e:c8:0f:85:c1:e8:98:fb:84:9b:76:bb:be:
         c8:3b:7d:1e:8b:8a:e7:eb:5f:c8:fb:c5:80:aa:a8:e0:fb:aa:
         2d:bb:23:40:03:f9:85:08:e4:7f:ef:5e:82:f6:88:be:1e:d2:
         89:57:23:87:43:14:fe:d1:36:d1:ec:96:1a:42:8f:22:f8:8b:
         68:68:f3:5d:75:17:75:93:19:93:e4:15:20:f3:22:d7:d3:71:
         98:d0:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org