Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          5Wegto8JmpCT1XykSg6KuDbPryLVeJpdVx602k21JHA=
Subject key identifier:   DB:4B:D9:F6:32:8B:53:6D:62:B4:15:80:EC:90:FB:CC:98:7A:71:BD
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       10C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1CBF
Signing time:             Fri 22 Nov 2024 17:19:11 +0000
Manifest this update:     Fri 22 Nov 2024 17:19:10 +0000
Manifest next update:     Fri 29 Nov 2024 17:19:10 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: psBemcysvvd6IdVDccWCaMAESG0tYsKTd3DCWE40XI4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4289 (0x10c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Nov 22 17:19:10 2024 GMT
            Not After : Nov 29 17:19:10 2024 GMT
        Subject: CN=6740bd0e-8b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:f1:ca:bc:1c:57:8c:3c:d5:be:f8:c6:5f:
                    d1:57:af:6b:30:33:2e:5f:bd:65:5d:57:a1:15:6c:
                    bf:65:6c:00:70:04:f1:47:57:19:31:4b:3f:b1:f2:
                    d6:51:ce:70:7c:89:14:13:47:73:41:89:6d:1c:03:
                    a2:37:2f:9b:62:c2:11:aa:f2:77:18:09:a4:b0:f0:
                    87:09:11:01:96:9e:ea:be:e6:2c:5a:ea:f9:89:30:
                    ba:4e:fb:f2:57:2a:ff:3d:8a:10:ac:e0:22:f3:c5:
                    96:20:5d:df:2c:b7:c5:88:fd:6d:26:d7:89:4f:00:
                    64:08:06:19:65:2b:a3:8e:f4:24:28:2b:c5:be:65:
                    bd:82:97:7c:8a:8d:c5:75:f9:2b:a8:ee:82:c6:d5:
                    67:9a:4a:81:0a:fc:78:fb:88:4f:e0:e9:2a:32:aa:
                    6b:69:0b:35:1e:c2:2c:d9:ed:f3:b1:39:5f:12:ce:
                    a3:0d:b1:4b:9c:c4:0c:e3:44:f6:f2:48:0a:a0:54:
                    85:67:3f:d4:fe:21:c9:37:dd:09:e9:5a:71:d6:37:
                    2e:08:77:ea:18:d4:d3:1f:a1:3a:f7:5a:05:71:71:
                    cc:b0:55:ef:cd:8d:ad:44:6c:ca:fb:de:ce:98:71:
                    3c:8c:71:31:bc:83:ca:c1:53:95:5c:b5:ba:d6:79:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:D9:F6:32:8B:53:6D:62:B4:15:80:EC:90:FB:CC:98:7A:71:BD
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:35:2a:2b:6a:e5:89:c2:a5:d8:99:b4:1c:64:88:cf:35:
         75:13:2e:d7:c3:d7:d9:f4:af:59:c9:55:9b:23:83:f0:37:b6:
         39:e4:b1:29:3e:ee:e0:73:17:1d:dc:d7:8c:ce:8f:ab:f1:83:
         a5:7d:aa:1f:69:a7:b4:c1:d5:28:7a:9b:6f:0f:a7:92:a1:17:
         93:89:0d:4d:47:a7:a8:8f:69:aa:d6:f6:76:0d:01:a1:26:5d:
         85:e9:94:c7:f1:4e:07:30:2f:a6:b0:ce:ac:15:e3:34:96:e5:
         d8:ad:0b:78:9d:15:4e:58:a7:44:d5:bf:b9:e9:b6:79:da:a1:
         53:16:1a:27:94:f6:eb:7c:39:44:8a:b3:e4:b4:0f:0b:b4:48:
         d1:19:22:4a:b3:52:25:60:49:03:db:97:ca:17:20:5a:17:3f:
         43:df:46:a1:03:38:8c:40:08:db:e1:74:1e:c2:f5:75:bf:92:
         ff:41:fb:a7:6f:0c:7f:5e:8b:f4:f0:d6:d0:5b:f6:f7:f1:65:
         85:e6:da:60:2b:1e:92:cc:8b:26:98:1f:5b:20:8b:3d:94:2b:
         1d:21:f7:56:51:12:e3:90:65:bc:99:2e:5a:b1:6c:c6:67:3b:
         0f:ca:c9:e5:cb:8a:c4:1b:11:58:31:5c:8c:63:18:ae:a6:c5:
         6c:d8:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org