Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File:                     3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier:          cMFfeFHOCPduawvc9HK1yK3/oV/O/DfY/2LlrnD/5no=
Subject key identifier:   79:53:2E:3E:A0:DB:ED:6B:FA:5C:D2:12:16:89:A6:BD:F1:1D:B5:69
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer:       /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number:          0115
Signing time:             Sat 23 Nov 2024 02:23:00 +0000
Manifest this update:     Sat 23 Nov 2024 02:22:59 +0000
Manifest next update:     Sat 30 Nov 2024 02:22:59 +0000
Files and hashes:         1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: unpWRw45YWKqG87nL4l3mY1IkNIJf/cCgfwah8aM58g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
        Validity
            Not Before: Nov 23 02:22:59 2024 GMT
            Not After : Nov 30 02:22:59 2024 GMT
        Subject: CN=67413c83-db0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:43:19:1f:6d:8a:a6:00:e4:78:74:6e:12:
                    c1:49:e3:81:d6:2b:c7:1e:ae:5a:42:18:7c:ab:c5:
                    23:5d:d4:ec:c8:10:32:74:d0:0e:ca:21:14:43:17:
                    8e:d6:d8:d1:03:6f:ad:87:b1:d6:dd:51:c3:22:7a:
                    77:18:3a:b6:87:c3:9d:e6:22:7b:8b:b1:6e:a7:8e:
                    2d:2b:3e:1e:08:2a:3d:db:3b:22:1c:da:9d:d4:7d:
                    37:05:e6:aa:48:b2:9a:71:e1:e9:d0:41:44:f3:c0:
                    bb:6a:f8:a4:b8:d9:89:20:66:67:10:71:1c:7e:44:
                    1c:c1:67:7f:73:4a:71:75:a0:f2:7d:d6:85:df:fd:
                    45:1e:36:1d:43:99:0f:c1:77:6b:db:d1:61:a6:f8:
                    e7:95:15:24:53:73:1b:ce:43:7f:50:d1:76:ee:ba:
                    90:d4:bf:64:c4:7e:88:5c:d6:99:ec:b1:28:f9:da:
                    4e:1e:36:a1:90:bf:a1:d4:ad:14:b7:2c:f3:99:d4:
                    69:3c:fb:63:eb:64:05:f5:09:68:06:18:b3:c2:b9:
                    ea:68:be:1d:cd:e0:ab:ee:c3:03:1e:0a:7c:37:50:
                    2f:9d:26:f2:2a:71:12:d2:1e:5d:a9:f4:47:e3:ad:
                    b7:fc:dc:6c:55:5d:24:87:77:2f:91:35:e4:18:15:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:2E:3E:A0:DB:ED:6B:FA:5C:D2:12:16:89:A6:BD:F1:1D:B5:69
            X509v3 Authority Key Identifier:
                keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:2c:8c:93:79:d1:69:62:cb:bd:01:a7:90:fd:b3:8b:1d:
         63:86:81:fd:c0:21:8d:94:db:06:f8:9b:33:c9:d0:e9:48:63:
         e1:6b:f3:0c:b5:97:08:80:15:f9:be:ac:aa:2f:4f:ec:18:cd:
         e5:43:04:1a:d3:77:28:5c:80:22:78:c1:69:a9:a6:c5:de:65:
         6f:dd:d8:47:f6:c5:29:8c:8e:1e:13:92:78:96:b0:79:bf:91:
         7b:37:2f:b8:38:16:a6:68:d2:66:5f:ad:82:e2:59:c6:e5:fb:
         2d:e8:42:91:1f:55:66:02:c2:74:8c:0e:fa:2c:0b:14:9e:bb:
         8e:46:4f:d6:88:8f:8a:23:ac:ca:98:17:46:d9:16:c9:2a:2f:
         0c:72:1c:c4:b8:73:b3:70:71:97:ea:3d:04:2b:4c:f3:74:a2:
         4e:6e:b2:95:22:11:08:59:bf:44:e5:5c:c0:5e:03:5d:25:54:
         1f:7d:cb:25:f7:15:c6:cc:6c:41:0b:d2:8b:49:b4:96:48:65:
         0d:14:8a:b4:c2:a5:72:fc:55:87:1f:c4:1e:84:7e:c9:92:88:
         1f:93:ea:26:50:47:09:2d:00:e5:f9:f3:4c:b2:91:44:f0:a4:
         2c:d1:e5:15:0e:17:f6:81:19:79:60:f7:66:8f:56:94:8a:a4:
         22:ea:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org