Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          YbSBIDJ/Wq09T0Lio0n9u+n2H0A3jVtxTVcnlHbKQGU=
Subject key identifier:   59:3D:82:31:B8:15:7B:25:73:5E:AD:03:BE:5E:A2:30:C0:2E:A4:0D
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          46
Signing time:             Sat 23 Nov 2024 05:19:08 +0000
Manifest this update:     Sat 23 Nov 2024 05:19:07 +0000
Manifest next update:     Sat 30 Nov 2024 05:19:07 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: RW9H210LvtRUJjZ/3Hvyclnk27563oS5H2sLhyrikec=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Nov 23 05:19:07 2024 GMT
            Not After : Nov 30 05:19:07 2024 GMT
        Subject: CN=674165cc-7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:49:6c:bf:d3:83:93:7b:1e:4a:6c:74:1b:5d:
                    5f:0d:78:06:69:62:0b:b7:63:a2:d2:8c:07:08:8a:
                    a6:e1:39:0d:c8:3d:8c:fe:0d:4b:17:dc:a8:63:e3:
                    e7:6f:67:73:44:17:08:6b:85:59:70:93:6f:5c:f4:
                    42:0a:77:43:52:6c:96:b0:0b:78:28:8c:12:a9:c7:
                    74:90:87:33:cc:9b:cf:e5:a3:fb:6f:7a:c1:14:7a:
                    51:d9:aa:bc:2d:96:98:44:c9:ea:82:4e:ca:e4:b7:
                    de:ff:5d:f2:f4:23:ce:d8:a7:c8:a8:1b:7b:32:ae:
                    52:68:dc:be:e7:b3:4c:01:17:a7:48:46:0b:1d:ca:
                    a5:9d:2b:1f:5f:72:10:07:a6:57:1a:9c:30:50:ac:
                    3b:72:9f:2f:da:c0:5f:66:04:89:f8:37:69:73:f7:
                    cb:c2:74:05:a0:5b:41:4d:a2:bd:52:45:94:8c:96:
                    49:ef:3c:55:53:b5:02:89:9e:ea:7f:43:fa:f9:12:
                    eb:00:6b:bb:6b:89:54:cd:50:07:4d:84:c3:93:80:
                    31:15:d6:59:84:fd:82:10:8f:17:ea:c0:9e:39:f3:
                    76:fc:2f:8d:71:8e:e2:bb:d1:70:ca:5b:db:65:16:
                    b4:b8:0c:97:08:af:c5:09:f0:7a:43:55:1c:d8:ea:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:82:31:B8:15:7B:25:73:5E:AD:03:BE:5E:A2:30:C0:2E:A4:0D
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:4b:cb:f1:0f:8b:36:3e:eb:5d:db:04:3a:7a:39:70:91:
         31:86:f6:97:4a:19:98:2e:ec:92:cc:82:89:84:5c:cf:49:10:
         ab:a9:3e:a3:41:06:98:d3:fd:76:05:12:b7:88:57:7e:c2:d1:
         f7:32:fc:83:7c:0b:fa:8d:16:c1:60:bc:a8:c1:4f:76:57:17:
         40:fe:e8:9f:12:c1:b1:e1:63:60:8e:34:be:f4:1e:85:68:78:
         f3:97:fa:9d:88:40:43:23:7c:ac:b4:71:d8:4c:b2:aa:36:f0:
         78:cb:be:fb:76:e8:fd:ff:1f:ad:b8:54:45:b6:1f:3b:0c:bd:
         1a:c5:fe:6e:52:4d:03:1c:fd:67:63:20:c1:43:72:96:64:db:
         bb:9b:31:b1:a9:20:4a:5b:aa:d8:9e:43:fc:47:a6:28:88:8b:
         ba:14:cb:15:06:01:a6:ce:73:c4:2c:8d:59:80:67:71:8a:dd:
         81:1e:a4:49:80:ff:b4:5f:18:f3:9b:17:b4:33:28:b3:3a:92:
         00:56:8b:e1:51:9e:48:0e:1b:f9:82:48:fc:06:fa:be:14:92:
         ca:d5:58:23:e0:64:9a:5e:e9:5a:05:28:4f:51:23:22:aa:17:
         1a:93:6e:80:ac:e5:82:14:55:3a:c7:b7:e1:2b:2c:c7:22:17:
         1f:13:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org