Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
File:                     A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json)
Hash identifier:          VjVgQEOSmz7bUwE6QJaOIE7FRUXwyaHoxNFfvpHDEq8=
Subject key identifier:   13:41:01:A4:91:D4:09:27:F0:A0:7B:21:A3:BF:CB:6E:76:07:74:23
Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45
Certificate issuer:       /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
Manifest number:          7B
Signing time:             Sat 23 Nov 2024 04:56:22 +0000
Manifest this update:     Sat 23 Nov 2024 04:56:21 +0000
Manifest next update:     Sat 30 Nov 2024 04:56:21 +0000
Files and hashes:         1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: Yvh5v5TGoGaHoKl2hFuVGXzxK7Gwh4OLYDoV8D5QpPQ=)
                          2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: Pgph1w1mxcTp0uNqETbmTV9PlZdSoRllVl1EeRomNMs=)
                          3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: WLJNmT8BOYYMNdfpRbPWhPUo9IIV/6pC4TA71i+Sw7k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl
                          rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
        Validity
            Not Before: Nov 23 04:56:21 2024 GMT
            Not After : Nov 30 04:56:21 2024 GMT
        Subject: CN=67416075-1929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:7c:bf:26:72:b0:c2:ac:a2:20:e2:55:1e:
                    cc:42:29:08:5a:a4:6c:57:8e:c7:9a:a6:52:36:aa:
                    88:42:1d:a5:2d:d2:36:d1:38:b2:7d:8e:49:e2:fc:
                    2a:89:37:13:5f:db:05:b0:27:cb:ab:33:ba:af:8f:
                    36:50:7e:f7:ed:3d:c9:0b:22:a6:97:ed:c3:bc:ed:
                    8a:5c:c6:c4:e0:85:50:56:76:00:f1:21:c9:9c:7c:
                    3a:59:f1:32:16:04:d7:a5:82:33:45:ea:03:25:82:
                    69:72:86:4a:3f:be:78:67:09:f0:7b:be:b4:23:e3:
                    7c:e2:a8:53:43:d4:ae:48:c4:bd:eb:ac:18:7c:01:
                    bb:6c:92:77:9c:60:76:92:c8:fa:f0:e2:55:a7:ac:
                    0f:8f:a5:e4:c9:e1:ec:bd:c5:b9:e2:14:2a:9f:ec:
                    ab:fc:da:ce:3b:bb:fb:01:04:41:a8:6b:9d:79:60:
                    73:e1:26:2e:c2:6a:dc:e2:f5:a0:12:e9:4a:28:da:
                    52:d1:cc:e0:c5:a0:55:7d:4d:67:6e:4c:ed:06:48:
                    9c:20:08:3b:41:72:74:66:ac:fc:bf:2d:32:7a:90:
                    e4:33:d0:1a:9e:6e:b4:c5:80:4f:ed:74:d1:db:d7:
                    c0:8b:cf:00:6a:07:d1:c0:a4:ca:0d:55:ba:fb:4a:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:01:A4:91:D4:09:27:F0:A0:7B:21:A3:BF:CB:6E:76:07:74:23
            X509v3 Authority Key Identifier:
                keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:cb:91:84:4c:f8:5b:00:70:92:cc:1f:85:3c:c9:ae:03:
         d7:ec:ee:53:94:aa:b0:81:c2:9d:d8:08:af:d6:f4:a1:08:17:
         1a:39:0e:25:06:e5:45:bb:68:bc:8c:28:27:65:56:26:93:ce:
         40:10:a4:21:6a:0d:29:0f:92:69:49:30:01:57:b5:73:51:fb:
         cb:61:c4:78:e9:cf:7a:a3:36:7a:ab:d6:dc:2a:ec:d5:72:2d:
         01:47:ad:95:38:10:1a:ac:89:7a:95:00:7e:72:23:f5:35:bc:
         45:ba:4f:b9:ec:0c:ae:9d:bf:96:eb:5d:e6:f7:c8:c5:6d:81:
         19:b4:65:4f:09:22:18:27:9b:90:1d:d2:c7:ff:6a:ca:ab:8b:
         2a:ae:38:64:53:11:84:cd:57:4d:35:f2:77:26:c4:5c:27:1e:
         12:34:19:3c:76:91:40:da:1e:69:6e:d9:65:59:cc:4d:d2:cb:
         9b:42:b3:91:d4:cd:ce:c9:ae:3b:a0:48:04:bd:08:b7:df:5e:
         56:48:d9:cb:c0:04:38:b0:b7:59:e5:b1:b6:40:90:96:fd:fe:
         15:7d:d6:d2:a3:42:4c:c5:c5:88:17:a2:34:98:f8:f0:ab:fa:
         22:c0:43:99:fb:84:45:31:06:aa:5d:d1:cc:55:f1:d7:25:ce:
         6d:c0:9c:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2
MTY1M0YwNDUwHhcNMjQxMTIzMDQ1NjIxWhcNMjQxMTMwMDQ1NjIxWjAYMRYwFAYD
VQQDEw02NzQxNjA3NS0xOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxL98vyZysMKsoiDiVR7MQikIWqRsV47HmqZSNqqIQh2lLdI20TiyfY5J4vwq
iTcTX9sFsCfLqzO6r482UH737T3JCyKml+3DvO2KXMbE4IVQVnYA8SHJnHw6WfEy
FgTXpYIzReoDJYJpcoZKP754Zwnwe760I+N84qhTQ9SuSMS966wYfAG7bJJ3nGB2
ksj68OJVp6wPj6XkyeHsvcW54hQqn+yr/NrOO7v7AQRBqGudeWBz4SYuwmrc4vWg
EulKKNpS0czgxaBVfU1nbkztBkicIAg7QXJ0Zqz8vy0yepDkM9Aanm60xYBP7XTR
29fAi88AagfRwKTKDVW6+0q4AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNBAaSR
1Akn8KB7IaO/y252B3QjMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE
MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ
ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVecuRhEz4WwBwkswfhTzJrgPX7O5TlKqwgcKd2Aiv1vShCBcaOQ4l
BuVFu2i8jCgnZVYmk85AEKQhag0pD5JpSTABV7VzUfvLYcR46c96ozZ6q9bcKuzV
ci0BR62VOBAarIl6lQB+ciP1NbxFuk+57Ayunb+W613m98jFbYEZtGVPCSIYJ5uQ
HdLH/2rKq4sqrjhkUxGEzVdNNfJ3JsRcJx4SNBk8dpFA2h5pbtllWcxN0subQrOR
1M3Oya47oEgEvQi3315WSNnLwAQ4sLdZ5bG2QJCW/f4VfdbSo0JMxcWIF6I0mPjw
q/oiwEOZ+4RFMQaqXdHMVfHXJc5twJwp
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org