Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          z9xwgkOvoMpV6/NefBMLMQKPtj8r+zdTqmX4qcuDkrE=
Subject key identifier:   AB:B5:51:C7:5F:FE:72:64:A0:8B:93:79:54:73:00:30:91:15:2C:C5
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0BB0
Signing time:             Fri 22 Nov 2024 18:42:43 +0000
Manifest this update:     Fri 22 Nov 2024 18:42:43 +0000
Manifest next update:     Fri 29 Nov 2024 18:42:43 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: EzgA4Is879wMPINOQ96k/q9b1rOVnWVc++AYxwZF3Ws=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: IT8My1igb19zRIqfP1EEqWkr5ITf55rRyu3QYeadVgU=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: 5fSkBz/blC9vFV4c7Fw4uMJzBb7PoDNDHFIWI/q+D+k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Nov 22 18:42:43 2024 GMT
            Not After : Nov 29 18:42:43 2024 GMT
        Subject: CN=6740d0a3-db76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:02:fa:b1:7d:bd:03:a2:b7:52:cf:b2:b3:
                    dc:30:1a:58:6e:f8:9a:e4:71:bc:5a:fe:a9:23:6c:
                    63:f8:fe:29:ae:51:d3:85:60:70:ea:82:13:c5:6a:
                    b9:50:7f:22:9a:e3:fb:18:e6:74:60:a2:48:11:58:
                    bc:a7:e7:e5:b2:f6:28:af:3a:b0:85:d3:28:52:61:
                    79:04:8d:3e:ad:64:fd:6c:c8:56:b0:2d:70:89:54:
                    ba:31:fb:3c:d1:83:21:e2:cc:38:bf:e7:c6:ac:02:
                    07:61:b2:09:5b:97:c4:dc:6a:b6:46:0f:e4:3c:ba:
                    ce:e5:4e:ac:e8:a9:b4:35:49:e4:00:17:7a:4b:b9:
                    b8:7d:91:6a:b8:dc:61:85:a8:85:f8:0d:f3:78:15:
                    0e:4d:92:ec:4e:54:85:f6:08:c8:a2:b8:13:f8:6b:
                    10:e8:ab:48:14:3b:d6:41:aa:af:fb:f8:61:cd:e2:
                    b6:df:69:98:02:08:8f:ba:97:74:0d:63:1e:46:a2:
                    2f:7e:d1:ad:1f:c3:89:df:46:40:22:57:ed:52:28:
                    c2:b5:8b:c9:f2:25:53:8b:8b:c3:01:f3:33:07:c2:
                    a5:82:9c:b8:41:34:ad:f8:eb:15:57:f5:60:52:48:
                    28:fe:81:f4:7d:07:24:3a:49:28:b4:15:33:ec:c7:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B5:51:C7:5F:FE:72:64:A0:8B:93:79:54:73:00:30:91:15:2C:C5
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:79:4e:b6:50:2f:51:75:35:37:21:7e:33:b2:25:2a:1c:
         de:f5:8f:e7:8a:08:29:2b:50:ab:26:9c:66:2d:1a:66:07:e1:
         92:4d:77:37:ac:74:b1:ef:2f:0e:75:45:a3:36:ec:a4:08:83:
         22:e4:8a:26:e1:19:39:44:4e:43:f7:c4:aa:e4:27:9e:f6:b1:
         e0:3c:88:8f:bc:4f:03:ae:09:62:e2:b3:39:85:b0:f5:14:4a:
         55:cf:a0:d6:87:22:23:7e:ba:ef:cf:34:68:49:0b:e0:10:ef:
         11:6a:69:eb:a0:fa:25:6b:9a:ce:95:04:7e:b5:37:b8:52:80:
         c4:ae:14:98:79:96:be:e2:20:ac:1e:38:f0:39:4c:8f:04:1a:
         35:de:35:6e:d1:db:9d:07:24:18:c8:24:2d:cc:be:d5:79:57:
         83:82:0a:d0:d7:5e:6f:b9:74:0c:32:40:ed:d2:af:b6:9d:c1:
         36:34:c4:8a:df:f8:b7:44:25:6e:bf:b8:0c:9c:a4:7f:70:f5:
         45:b3:c6:c8:86:e0:26:53:25:39:ca:2a:8b:08:c7:77:71:8f:
         da:ef:18:43:84:fd:5b:7b:91:7f:6b:d4:8f:f3:7c:cf:7d:7c:
         e8:cf:3f:60:16:4a:0c:f3:ea:3a:dd:e8:e3:67:d9:4d:00:c7:
         ae:6c:a7:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG
ODU2RDVERUIwHhcNMjQxMTIyMTg0MjQzWhcNMjQxMTI5MTg0MjQzWjAYMRYwFAYD
VQQDEw02NzQwZDBhMy1kYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37oC+rF9vQOit1LPsrPcMBpYbvia5HG8Wv6pI2xj+P4prlHThWBw6oITxWq5
UH8imuP7GOZ0YKJIEVi8p+flsvYorzqwhdMoUmF5BI0+rWT9bMhWsC1wiVS6Mfs8
0YMh4sw4v+fGrAIHYbIJW5fE3Gq2Rg/kPLrO5U6s6Km0NUnkABd6S7m4fZFquNxh
haiF+A3zeBUOTZLsTlSF9gjIorgT+GsQ6KtIFDvWQaqv+/hhzeK232mYAgiPupd0
DWMeRqIvftGtH8OJ30ZAIlftUijCtYvJ8iVTi4vDAfMzB8Klgpy4QTSt+OsVV/Vg
Ukgo/oH0fQckOkkotBUz7MdQyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu1Ucdf
/nJkoIuTeVRzADCRFSzFMB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx
RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE
d1VVd0FJcUxsaVA0VnRYZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1b3lOtlAvUXU1NyF+M7IlKhze9Y/niggpK1CrJpxmLRpmB+GSTXc3
rHSx7y8OdUWjNuykCIMi5Iom4Rk5RE5D98Sq5Cee9rHgPIiPvE8Drgli4rM5hbD1
FEpVz6DWhyIjfrrvzzRoSQvgEO8RamnroPola5rOlQR+tTe4UoDErhSYeZa+4iCs
HjjwOUyPBBo13jVu0dudByQYyCQtzL7VeVeDggrQ115vuXQMMkDt0q+2ncE2NMSK
3/i3RCVuv7gMnKR/cPVFs8bIhuAmUyU5yiqLCMd3cY/a7xhDhP1be5F/a9SP83zP
fXzozz9gFkoM8+o63ejjZ9lNAMeubKf8
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org