Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
File:                     6u5Zump8cEkFjFZZfMdFxh7FoKk.mft (raw, json)
Hash identifier:          lCgvG9uacedl6zn70MxxgM1NQ6LGaq+PbvxavObrSWY=
Subject key identifier:   D5:E9:A9:49:90:55:B4:D1:6C:74:84:89:19:72:03:1A:26:BB:7B:57
Authority key identifier: EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9
Certificate issuer:       /CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
Manifest number:          0400
Signing time:             Sat 23 Nov 2024 00:46:57 +0000
Manifest this update:     Sat 23 Nov 2024 00:46:57 +0000
Manifest next update:     Sat 30 Nov 2024 00:46:57 +0000
Files and hashes:         1: 6u5Zump8cEkFjFZZfMdFxh7FoKk.crl (hash: qdo4Zj2unLMoXnOxKIj1GDc2YrWJgRqFFzgM2lO5eqA=)
                          2: F19BD82C46A011EE85BCFA3FC4F9AE02.roa (hash: ZOjRA4e8JF04vz5XfrfA+6zi4vKEjUsdc+KkK56wyTg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl
                          rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AD92/serialNumber=EAEE59BA6A7C7049058C56597CC745C61EC5A0A9
        Validity
            Not Before: Nov 23 00:46:57 2024 GMT
            Not After : Nov 30 00:46:57 2024 GMT
        Subject: CN=67412601-31c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:db:b0:42:14:de:a2:94:1a:62:ac:9b:69:
                    14:32:b6:8a:46:1d:f8:a5:03:62:16:06:90:2c:a8:
                    c4:55:b3:4b:f6:bf:da:01:4f:0b:f4:36:cf:95:b2:
                    a6:51:10:cf:10:0c:3c:07:90:0d:ce:45:64:b1:0c:
                    25:5b:43:80:de:f1:47:9d:8b:73:ad:64:56:90:67:
                    62:e4:fd:56:16:53:7c:f1:d7:c3:9e:a3:38:2a:7d:
                    51:f4:03:24:0b:4a:0b:e5:f6:0c:9d:ee:e2:b4:ab:
                    b6:05:6d:d4:2c:0e:da:8b:c3:d5:90:17:ae:ff:74:
                    ea:b1:07:e2:e3:1f:68:7c:e5:7a:39:2b:07:2c:33:
                    52:69:7c:a0:e0:4c:90:98:73:12:f5:24:5e:29:f8:
                    46:74:4a:38:4f:d2:13:c0:ab:c8:43:5a:28:93:b8:
                    58:42:d8:6b:a6:6d:77:d1:70:52:b6:e3:25:29:59:
                    b1:3d:10:5e:ad:d4:9e:f0:5c:6a:59:7a:f1:e0:2b:
                    f7:9b:4f:71:79:ef:b3:74:45:10:d7:d6:cb:4c:c4:
                    e8:c0:e2:09:7a:58:55:f0:21:3a:fe:8c:51:96:ee:
                    e6:af:a6:03:e4:c4:4b:0e:e8:a9:a5:d1:ae:11:8e:
                    a6:b1:85:04:99:17:ad:14:93:65:11:bd:48:19:c4:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:A9:49:90:55:B4:D1:6C:74:84:89:19:72:03:1A:26:BB:7B:57
            X509v3 Authority Key Identifier:
                keyid:EA:EE:59:BA:6A:7C:70:49:05:8C:56:59:7C:C7:45:C6:1E:C5:A0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6u5Zump8cEkFjFZZfMdFxh7FoKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AD92/330D08E0AE9E11EC9E483D73C4F9AE02/6u5Zump8cEkFjFZZfMdFxh7FoKk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0e:bc:62:df:2a:d8:9d:25:a9:44:3e:53:bb:72:92:37:dd:
         67:db:01:4e:8a:dd:ed:f4:bb:c6:40:2d:5e:9a:1a:d3:8f:bf:
         d0:b4:9b:8c:3d:64:01:af:1d:0f:33:ea:4c:0b:e2:6e:c1:55:
         73:a6:ec:9e:58:d1:b0:ab:b9:17:3f:c7:0b:3e:af:01:42:4b:
         3f:71:51:9d:89:68:f5:46:b5:97:85:a7:8d:b6:e2:2b:05:bf:
         30:7e:0a:38:79:cd:e8:e5:f6:09:6e:25:b8:6d:7d:e5:54:fd:
         d2:43:39:63:f2:e6:d3:7a:a3:6f:49:5d:76:17:1c:fe:01:b1:
         ee:d5:75:53:ca:b1:33:fa:94:66:64:f8:98:0e:b3:c2:74:bc:
         d3:ff:a7:c7:6e:98:73:80:8f:9a:d2:e7:a9:74:10:3a:16:83:
         ee:22:29:c2:d1:bf:61:10:0e:df:14:f0:f3:15:7d:f4:42:53:
         ea:1d:ad:dd:27:cd:db:6c:5f:af:ba:af:98:89:44:16:d0:f9:
         16:95:09:02:f4:ed:18:1f:06:4c:d2:de:dc:5c:ba:d2:92:4b:
         eb:dd:39:65:da:f0:69:aa:5e:06:ea:cb:0d:cc:72:6a:2c:1d:
         eb:0d:5b:df:2a:8c:60:90:74:cb:2e:dd:d1:07:f7:74:2a:a7:
         bf:03:e7:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEFEOTIxMTAvBgNVBAUTKEVBRUU1OUJBNkE3QzcwNDkwNThDNTY1OTdDQzc0NUM2
MUVDNUEwQTkwHhcNMjQxMTIzMDA0NjU3WhcNMjQxMTMwMDA0NjU3WjAYMRYwFAYD
VQQDEw02NzQxMjYwMS0zMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3nbsEIU3qKUGmKsm2kUMraKRh34pQNiFgaQLKjEVbNL9r/aAU8L9DbPlbKm
URDPEAw8B5ANzkVksQwlW0OA3vFHnYtzrWRWkGdi5P1WFlN88dfDnqM4Kn1R9AMk
C0oL5fYMne7itKu2BW3ULA7ai8PVkBeu/3TqsQfi4x9ofOV6OSsHLDNSaXyg4EyQ
mHMS9SReKfhGdEo4T9ITwKvIQ1ook7hYQthrpm130XBStuMlKVmxPRBerdSe8Fxq
WXrx4Cv3m09xee+zdEUQ19bLTMTowOIJelhV8CE6/oxRlu7mr6YD5MRLDuippdGu
EY6msYUEmRetFJNlEb1IGcSYFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXpqUmQ
VbTRbHSEiRlyAxomu3tXMB8GA1UdIwQYMBaAFOruWbpqfHBJBYxWWXzHRcYexaCp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUQ5Mi8zMzBEMDhFMEFF
OUUxMUVDOUU0ODNENzNDNEY5QUUwMi82dTVadW1wOGNFa0ZqRlpaZk1kRnhoN0Zv
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ1NVp1bXA4Y0VrRmpGWlpmTWRGeGg3Rm9Lay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QUQ5Mi8zMzBEMDhFMEFFOUUxMUVDOUU0ODNENzNDNEY5QUUwMi82dTVadW1wOGNF
a0ZqRlpaZk1kRnhoN0ZvS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfDrxi3yrYnSWpRD5Tu3KSN91n2wFOit3t9LvGQC1emhrTj7/QtJuM
PWQBrx0PM+pMC+JuwVVzpuyeWNGwq7kXP8cLPq8BQks/cVGdiWj1RrWXhaeNtuIr
Bb8wfgo4ec3o5fYJbiW4bX3lVP3SQzlj8ubTeqNvSV12Fxz+AbHu1XVTyrEz+pRm
ZPiYDrPCdLzT/6fHbphzgI+a0uepdBA6FoPuIinC0b9hEA7fFPDzFX30QlPqHa3d
J83bbF+vuq+YiUQW0PkWlQkC9O0YHwZM0t7cXLrSkkvr3Tll2vBpql4G6ssNzHJq
LB3rDVvfKoxgkHTLLt3RB/d0Kqe/A+dM
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org