Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
File:                     FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft (raw, json)
Hash identifier:          jkEnbo4GocpSz0JavopFo0PyC69yITQ/TjJHiPhTNoY=
Subject key identifier:   DC:46:56:C9:26:59:7B:8C:D0:B0:09:05:23:F7:F5:02:AF:34:8D:55
Authority key identifier: FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD
Certificate issuer:       /CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
Certificate serial:       461DD3AF309010ACF312281701C6BD5467BAF462
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
Manifest number:          024B
Signing time:             Sat 23 Nov 2024 04:06:30 +0000
Manifest this update:     Sat 23 Nov 2024 04:01:30 +0000
Manifest next update:     Sun 24 Nov 2024 04:31:30 +0000
Files and hashes:         1: FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl (hash: wFqb8yNvnHYcF6xpPgMEFIiiAYfT31Hv1Fol7eooHNQ=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 04:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1d:d3:af:30:90:10:ac:f3:12:28:17:01:c6:bd:54:67:ba:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897390000/serialNumber=FCAB6F8783B3183D2AA0B094970CBC767B75AEDD
        Validity
            Not Before: Nov 23 04:01:30 2024 GMT
            Not After : Nov 24 04:31:30 2024 GMT
        Subject: CN=DC4656C926597B8CD0B0090523F7F502AF348D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:5c:ee:26:d5:f0:9d:8b:70:55:b1:1d:00:
                    29:06:bc:87:f3:75:72:72:e6:be:77:07:f2:ab:fa:
                    0f:fc:c5:d5:e9:ac:d8:9a:d1:f1:bc:4f:37:6d:7f:
                    d5:63:63:55:f5:57:3a:ad:03:1f:0f:de:02:91:86:
                    2d:33:2c:a6:dd:b1:3f:04:7e:dc:d6:86:a9:9c:6c:
                    c7:8c:22:40:ee:e6:b2:1b:4d:b5:b3:da:92:23:79:
                    02:9c:31:85:2b:77:2f:c3:eb:83:e2:f8:64:e3:19:
                    21:25:fb:d8:9f:a5:1b:52:31:84:9b:b7:af:d4:8b:
                    86:45:30:1a:e2:a9:54:3e:5e:40:02:11:7c:fe:c4:
                    6b:be:6a:2b:94:9b:e5:0a:40:d0:ba:88:f9:0e:25:
                    d1:b3:db:47:f2:ff:8d:34:98:5b:22:61:12:ad:be:
                    79:b4:45:fd:ec:93:0e:3a:43:58:bd:30:58:9c:90:
                    4e:65:85:be:24:85:8d:9c:32:4b:e9:db:2d:a8:e6:
                    bd:a3:a3:30:6c:88:7b:c9:ee:fc:80:23:2b:56:3b:
                    33:e0:ab:34:5c:2a:8b:fb:41:06:9a:5e:18:91:92:
                    de:11:bd:90:f1:b2:ed:08:88:5c:92:91:85:12:5e:
                    26:b7:23:7e:a3:9f:25:93:b8:87:52:2c:80:84:02:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:46:56:C9:26:59:7B:8C:D0:B0:09:05:23:F7:F5:02:AF:34:8D:55
            X509v3 Authority Key Identifier:
                keyid:FC:AB:6F:87:83:B3:18:3D:2A:A0:B0:94:97:0C:BC:76:7B:75:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ktvh4OzGD0qoLCUlwy8dnt1rt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/2/FCAB6F8783B3183D2AA0B094970CBC767B75AEDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:28:05:c8:6f:61:50:e2:b4:31:54:9f:2d:aa:f7:bd:f6:df:
         eb:5c:7a:eb:4f:46:9a:ab:6e:f8:6e:41:2a:58:44:cb:b3:d5:
         c0:37:2a:6c:a1:6e:e6:dd:d7:3f:ae:bb:85:78:f0:3b:63:41:
         ca:79:e4:ca:aa:23:75:39:52:67:d1:13:1b:c0:0b:de:78:b0:
         6d:86:4d:fa:81:36:38:cf:c4:a0:2e:2b:fb:0f:bf:17:84:dd:
         b2:4c:47:f5:f6:b1:99:17:14:cb:50:69:5b:ae:d4:f7:a7:bd:
         35:68:70:36:89:bb:a7:18:d1:11:1f:78:7e:38:03:cb:2d:a3:
         4e:2f:87:fa:ef:b9:87:88:a6:bd:7d:55:24:d8:bc:7a:4c:6e:
         da:9f:b1:be:fb:25:f3:69:0e:7b:30:57:f7:94:79:92:b9:7a:
         8d:56:23:e2:3c:3c:23:50:e0:81:d0:89:12:ab:ef:f4:37:df:
         ea:3f:82:a5:1b:18:5e:d0:c6:68:65:cc:ed:0c:28:d9:51:34:
         06:2b:f1:bc:b5:e4:7b:41:05:92:b5:2b:d8:4f:15:ed:e5:c6:
         da:a8:67:f7:95:84:0a:ca:45:61:c4:3a:f8:7f:c4:8e:8e:ed:
         21:76:36:c5:c5:34:31:d1:32:2b:37:dd:b7:79:fe:95:c2:d8:
         92:0e:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org