Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
File:                     4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json)
Hash identifier:          XP7JLL3+kUxUzKd78eBW0bbbN26/WR9/qhV2T0fFELI=
Subject key identifier:   F7:AD:AC:17:55:73:08:2D:CE:1F:40:07:F4:32:71:BF:41:D3:BB:FF
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Certificate issuer:       /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
Manifest number:          0171
Signing time:             Sat 23 Nov 2024 02:14:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:14:23 +0000
Manifest next update:     Sat 30 Nov 2024 02:14:23 +0000
Files and hashes:         1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: xyEokbJfuhjVdBGbgqI7UsRNOAfGqsRvvSlk4AGqs8E=)
                          2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=)
                          3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=)
                          4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
                          rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
        Validity
            Not Before: Nov 23 02:14:23 2024 GMT
            Not After : Nov 30 02:14:23 2024 GMT
        Subject: CN=67413a7f-197d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:bd:36:ba:e3:5e:82:ae:78:6c:67:20:26:
                    e9:e9:39:43:1c:d9:a7:4d:6e:ce:a8:43:b8:7a:a1:
                    86:20:44:19:d5:41:a4:34:f4:55:5e:e7:d5:e2:61:
                    0b:12:c5:0a:4a:87:62:8a:11:5f:4c:86:1d:8a:1e:
                    64:2f:b4:fa:d3:c7:ea:4c:44:55:68:10:57:01:28:
                    b9:db:fa:38:26:ae:dd:85:fc:1f:ef:53:99:10:0a:
                    0f:eb:1d:d4:b7:db:4c:08:91:85:85:01:cb:f5:5f:
                    2b:07:97:7d:0c:c8:30:ed:fb:63:cd:c3:3f:1a:63:
                    07:0f:49:69:3f:94:08:29:35:95:a7:be:54:2f:04:
                    84:80:ad:e5:5c:a7:2b:fb:65:46:df:2a:ff:b6:24:
                    d7:e0:32:32:b5:f7:7d:cf:fb:47:8f:10:73:d4:41:
                    d7:89:f2:94:e5:d5:86:e2:e7:e4:05:fd:63:d3:54:
                    63:55:bd:7f:06:22:36:82:58:50:ce:63:52:5b:4e:
                    1f:a9:e3:b7:5b:ad:5e:30:71:ae:84:e5:7c:0f:6b:
                    86:23:bc:b6:c6:9e:cf:dd:9c:81:a1:94:1e:97:a5:
                    da:5c:a7:1b:25:0f:58:38:f0:13:85:2c:ee:8e:6e:
                    f1:ac:d3:c9:10:04:38:14:d3:17:6b:2b:61:cd:47:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AD:AC:17:55:73:08:2D:CE:1F:40:07:F4:32:71:BF:41:D3:BB:FF
            X509v3 Authority Key Identifier:
                keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:e9:7f:59:a6:a3:92:98:f1:31:6f:cc:dc:dd:bb:6c:6b:
         38:55:b7:96:a2:9d:c0:ce:17:16:21:30:14:dc:5b:48:f7:56:
         eb:26:54:05:55:4e:09:98:54:ff:97:71:16:41:a6:3e:1b:7f:
         17:1e:ef:22:a0:a6:36:32:55:da:c0:31:28:75:1a:ac:6d:5b:
         f1:4d:ac:19:8b:e3:8d:7a:22:05:a8:03:bc:ce:20:ef:5a:9c:
         31:4e:18:5a:25:c9:1a:15:01:52:5e:e1:f3:b9:38:97:dc:72:
         ec:45:ef:6e:0b:47:e7:c7:95:ce:3c:9e:a1:ad:93:d1:87:02:
         e4:10:30:d7:9b:eb:b4:00:4b:dd:10:a0:22:94:5d:63:ee:32:
         b2:ce:a0:59:0f:d6:f7:52:2d:93:18:e4:90:e3:38:b7:ff:ce:
         5a:f0:44:c8:15:4e:7c:cc:c7:a8:6e:ad:cb:a9:13:93:9b:e3:
         8d:37:26:ad:4d:dc:f8:78:a8:12:2e:e7:a9:67:67:5d:c3:2c:
         05:2d:26:4c:dd:27:ef:63:ad:8a:67:e6:54:d3:e4:01:1c:98:
         5f:7c:f8:1e:15:3c:0f:a7:3c:11:74:96:0c:d1:5a:cb:7c:7a:
         40:40:4c:d3:79:0b:4c:02:39:31:e6:0b:7b:45:0e:c9:6c:8e:
         25:a7:c8:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjQxMTIzMDIxNDIzWhcNMjQxMTMwMDIxNDIzWjAYMRYwFAYD
VQQDEw02NzQxM2E3Zi0xOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7RW9NrrjXoKueGxnICbp6TlDHNmnTW7OqEO4eqGGIEQZ1UGkNPRVXufV4mEL
EsUKSodiihFfTIYdih5kL7T608fqTERVaBBXASi52/o4Jq7dhfwf71OZEAoP6x3U
t9tMCJGFhQHL9V8rB5d9DMgw7ftjzcM/GmMHD0lpP5QIKTWVp75ULwSEgK3lXKcr
+2VG3yr/tiTX4DIytfd9z/tHjxBz1EHXifKU5dWG4ufkBf1j01RjVb1/BiI2glhQ
zmNSW04fqeO3W61eMHGuhOV8D2uGI7y2xp7P3ZyBoZQel6XaXKcbJQ9YOPAThSzu
jm7xrNPJEAQ4FNMXaythzUeh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPetrBdV
cwgtzh9AB/Qycb9B07v/MB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3
RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQv+l/WaajkpjxMW/M3N27bGs4VbeWop3AzhcWITAU3FtI91brJlQF
VU4JmFT/l3EWQaY+G38XHu8ioKY2MlXawDEodRqsbVvxTawZi+ONeiIFqAO8ziDv
WpwxThhaJckaFQFSXuHzuTiX3HLsRe9uC0fnx5XOPJ6hrZPRhwLkEDDXm+u0AEvd
EKAilF1j7jKyzqBZD9b3Ui2TGOSQ4zi3/85a8ETIFU58zMeobq3LqROTm+ONNyat
Tdz4eKgSLuepZ2ddwywFLSZM3SfvY62KZ+ZU0+QBHJhffPgeFTwPpzwRdJYM0VrL
fHpAQEzTeQtMAjkx5gt7RQ7JbI4lp8i4
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org