Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
File:                     -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json)
Hash identifier:          TxfU79NOCEBdpKNp5gjo49TNHIp8SdZhRjaUIjjoQVc=
Subject key identifier:   02:74:91:D9:65:09:45:1E:46:BA:CF:94:E3:11:03:47:0D:C7:16:28
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Certificate issuer:       /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial:       1EAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
Manifest number:          1EAE
Signing time:             Fri 22 Nov 2024 16:02:19 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:18 +0000
Manifest next update:     Fri 29 Nov 2024 16:02:18 +0000
Files and hashes:         1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: xym+MSlCFe6FNce3UiN3xk753HovatnXga/AVyFs4xg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7854 (0x1eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
        Validity
            Not Before: Nov 22 16:02:18 2024 GMT
            Not After : Nov 29 16:02:18 2024 GMT
        Subject: CN=6740ab0a-2554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:67:7b:88:6b:cc:50:f8:17:4d:a6:84:e8:
                    c6:27:70:0e:04:d7:34:eb:bc:d3:5d:cd:f2:6f:d1:
                    7c:29:32:2a:89:24:57:93:dc:88:b2:c6:c2:80:9a:
                    50:9c:9c:39:a0:85:35:b5:88:6c:52:eb:5e:e1:48:
                    f5:5e:dd:34:01:bb:67:c1:9b:d0:2d:da:b7:13:e1:
                    3c:0e:a6:d4:99:6d:5b:09:11:5b:32:53:ae:70:b1:
                    12:36:26:0b:49:cd:76:4e:06:98:76:05:4e:07:92:
                    42:97:99:2d:e6:c2:0c:4e:33:0d:06:e4:1a:81:43:
                    fa:e0:a1:f0:24:44:d9:47:58:9a:e7:4e:e4:8e:bc:
                    35:ee:87:cb:8a:a0:01:06:7b:07:d4:c3:f7:73:3f:
                    dd:96:33:08:d4:5f:da:b5:e2:f3:b8:41:50:e6:03:
                    80:2f:5d:9f:27:bf:5e:32:0c:cb:19:23:7e:9e:18:
                    2e:43:35:32:57:a1:a0:59:2b:d2:bc:d2:3a:43:c2:
                    bc:5b:b9:b1:c9:bd:26:db:ab:4a:ca:25:9b:33:7f:
                    69:ed:77:51:a0:2e:05:36:43:1d:3f:e2:c6:92:3b:
                    bf:c2:ea:c2:26:e1:64:f6:ce:82:98:3a:62:7e:25:
                    30:06:b3:2d:87:58:b0:40:85:aa:ae:f7:77:a4:7e:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:91:D9:65:09:45:1E:46:BA:CF:94:E3:11:03:47:0D:C7:16:28
            X509v3 Authority Key Identifier:
                keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:d5:83:e8:43:fb:8f:0e:50:4a:84:86:2c:05:d0:e0:49:
         3e:f4:4f:8c:d2:97:ec:17:5c:e1:79:dc:d5:24:7d:08:ab:43:
         6c:28:fa:1b:b8:a8:95:2e:69:a0:01:d7:4b:90:9e:75:da:f0:
         45:eb:65:5f:7e:d5:48:54:97:44:fe:88:85:ce:5a:3a:f3:50:
         d7:07:88:74:1a:14:a1:ee:5d:f8:e0:7a:b8:d5:de:cd:9c:d6:
         62:72:e5:08:9c:5a:00:f9:63:b6:47:43:3a:44:f7:c2:e9:2c:
         f7:cd:59:48:b8:66:6f:f7:96:3c:e2:b4:4f:e6:20:95:6d:7e:
         ae:5c:80:fd:bc:c2:a8:5e:3e:1b:57:5c:f6:fc:ec:bd:14:94:
         41:a3:ec:75:a9:56:da:f5:68:e0:75:50:24:c8:a4:cd:e1:3f:
         88:f2:78:25:4a:39:10:59:ba:86:63:dd:7f:c8:78:8f:ca:1b:
         42:37:37:f9:16:65:80:9b:a5:f6:e8:b7:7d:3b:e7:40:09:95:
         e8:04:52:84:ed:7a:5f:f9:9f:d5:9e:6e:80:51:e7:9d:dd:03:
         c7:6e:69:57:e8:f3:db:12:6e:8f:6d:80:d0:d8:a4:5f:27:54:
         65:38:41:85:88:72:a0:8c:f3:e8:dd:c7:29:76:2d:b7:66:24:
         f3:f1:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org