Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
File:                     e1mk24bvVBn3rb3aHfUrUJ7m33U.mft (raw, json)
Hash identifier:          YZHqSzEXKYb/iM1gshRBOpiBcN7N+YqJYA51O3stitU=
Subject key identifier:   06:E5:5E:27:4C:DA:48:BB:BD:38:35:66:63:DD:9A:2E:D8:01:D4:1F
Authority key identifier: 7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75
Certificate issuer:       /CN=A91F3853/serialNumber=7B59A4DB86EF5419F7ADBDDA1DF52B509EE6DF75
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
Manifest number:          DD
Signing time:             Sat 23 Nov 2024 03:41:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:41:38 +0000
Manifest next update:     Sat 30 Nov 2024 03:41:38 +0000
Files and hashes:         1: e1mk24bvVBn3rb3aHfUrUJ7m33U.crl (hash: LVd288YU3JGI5ZNgXBdOWm+DzC4QPTo9hZ10l9L3P9Q=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.crl
                          rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3853/serialNumber=7B59A4DB86EF5419F7ADBDDA1DF52B509EE6DF75
        Validity
            Not Before: Nov 23 03:41:38 2024 GMT
            Not After : Nov 30 03:41:38 2024 GMT
        Subject: CN=67414ef3-ba5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:93:16:b2:05:e4:c8:f5:b3:90:f8:9f:98:
                    db:7f:9d:53:55:dd:89:59:fa:18:80:a5:a7:56:67:
                    66:b5:c3:80:57:fc:42:dd:a6:26:2c:2a:08:3e:cc:
                    f9:07:77:47:b3:ad:32:7a:f8:56:62:0a:f5:39:8b:
                    7e:69:5c:ac:62:2a:df:73:24:3f:26:84:8a:1e:1d:
                    1c:60:6e:b4:29:db:97:37:a2:35:e6:01:35:7c:f2:
                    d8:66:0f:13:dd:98:ac:6b:35:8b:a2:61:e6:6d:fd:
                    1a:bb:db:08:db:a6:de:7f:f7:49:d5:b2:75:7e:b7:
                    81:2d:22:aa:2d:30:5f:0b:cf:2e:23:23:6c:02:59:
                    db:8e:ef:7a:86:f6:5a:6a:ae:2d:d5:8d:3e:66:19:
                    6b:bf:a6:7d:ab:71:9e:ad:e2:26:2d:27:d7:65:38:
                    f1:73:9f:e7:45:73:3f:86:bb:d9:3e:fa:20:f2:08:
                    e5:72:52:fa:33:44:f6:1a:5c:74:35:f6:76:05:33:
                    71:cd:48:4d:90:8d:b8:98:7a:64:53:eb:40:b6:c2:
                    6f:36:f3:74:7b:ce:1d:84:a0:25:b9:a9:36:75:6a:
                    9d:b9:0e:76:ce:65:53:44:1d:d1:2f:81:5a:71:9b:
                    b5:80:75:46:34:96:02:1a:90:de:9e:a2:0f:88:25:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:5E:27:4C:DA:48:BB:BD:38:35:66:63:DD:9A:2E:D8:01:D4:1F
            X509v3 Authority Key Identifier:
                keyid:7B:59:A4:DB:86:EF:54:19:F7:AD:BD:DA:1D:F5:2B:50:9E:E6:DF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1mk24bvVBn3rb3aHfUrUJ7m33U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3853/F01F63285FA111EEBD9AF828C4F9AE02/e1mk24bvVBn3rb3aHfUrUJ7m33U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:29:55:40:19:bc:5c:7a:f7:6e:b7:ff:58:a0:0c:ea:5f:
         ab:aa:9c:89:79:72:fb:e0:c7:e3:75:ae:91:e4:d5:fa:ad:85:
         c3:ab:4b:56:a3:e5:8f:b1:27:75:11:0c:96:e9:85:90:e3:ed:
         87:7b:97:d7:48:6d:67:5b:1f:73:87:38:df:86:ee:b0:95:9e:
         96:89:e9:fe:e7:57:46:f1:0b:9a:3c:06:c4:2b:38:a4:ce:41:
         a0:9a:26:6e:b7:bf:99:00:48:db:61:f6:77:cb:dc:aa:a5:ee:
         69:fc:e3:bc:39:3f:00:93:18:cc:19:e5:80:e7:ee:8d:51:27:
         35:60:4d:b8:e0:ec:93:a2:87:fb:36:a2:82:93:e3:db:11:66:
         51:47:b8:28:9f:36:c3:ac:90:b3:d9:f3:f5:9d:1d:a4:1d:3a:
         6b:0a:7f:db:40:a7:8b:3b:f9:2a:b8:ea:1e:e4:4b:14:68:e3:
         12:8a:7c:16:73:62:f9:d2:51:22:eb:62:27:32:a0:1a:09:26:
         c0:5e:8e:6b:3e:24:63:98:f0:02:bc:b7:6d:63:40:8c:de:37:
         9d:88:01:ca:fe:4c:05:da:ca:f5:f0:74:8f:c3:fa:e0:61:fd:
         28:35:cc:16:12:87:ad:f2:5a:ae:b5:96:0f:9e:6f:b1:ee:51:
         e3:8c:d6:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM4NTMxMTAvBgNVBAUTKDdCNTlBNERCODZFRjU0MTlGN0FEQkREQTFERjUyQjUw
OUVFNkRGNzUwHhcNMjQxMTIzMDM0MTM4WhcNMjQxMTMwMDM0MTM4WjAYMRYwFAYD
VQQDEw02NzQxNGVmMy1iYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlyTFrIF5Mj1s5D4n5jbf51TVd2JWfoYgKWnVmdmtcOAV/xC3aYmLCoIPsz5
B3dHs60yevhWYgr1OYt+aVysYirfcyQ/JoSKHh0cYG60KduXN6I15gE1fPLYZg8T
3ZisazWLomHmbf0au9sI26bef/dJ1bJ1freBLSKqLTBfC88uIyNsAlnbju96hvZa
aq4t1Y0+Zhlrv6Z9q3GereImLSfXZTjxc5/nRXM/hrvZPvog8gjlclL6M0T2Glx0
NfZ2BTNxzUhNkI24mHpkU+tAtsJvNvN0e84dhKAluak2dWqduQ52zmVTRB3RL4Fa
cZu1gHVGNJYCGpDenqIPiCVrGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAblXidM
2ki7vTg1ZmPdmi7YAdQfMB8GA1UdIwQYMBaAFHtZpNuG71QZ96292h31K1Ce5t91
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzg1My9GMDFGNjMyODVG
QTExMUVFQkQ5QUY4MjhDNEY5QUUwMi9lMW1rMjRidlZCbjNyYjNhSGZVclVKN20z
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UxbWsyNGJ2VkJuM3JiM2FIZlVyVUo3bTMzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mzg1My9GMDFGNjMyODVGQTExMUVFQkQ5QUY4MjhDNEY5QUUwMi9lMW1rMjRidlZC
bjNyYjNhSGZVclVKN20zM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASPylVQBm8XHr3brf/WKAM6l+rqpyJeXL74Mfjda6R5NX6rYXDq0tW
o+WPsSd1EQyW6YWQ4+2He5fXSG1nWx9zhzjfhu6wlZ6Wien+51dG8QuaPAbEKzik
zkGgmiZut7+ZAEjbYfZ3y9yqpe5p/OO8OT8AkxjMGeWA5+6NUSc1YE244OyToof7
NqKCk+PbEWZRR7gonzbDrJCz2fP1nR2kHTprCn/bQKeLO/kquOoe5EsUaOMSinwW
c2L50lEi62InMqAaCSbAXo5rPiRjmPACvLdtY0CM3jediAHK/kwF2sr18HSPw/rg
Yf0oNcwWEoet8lqutZYPnm+x7lHjjNYE
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org