Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          jZtG+3kgbUDgI2gmcVi5KlBGoca0I+Dlb7CuN5V5yTE=
Subject key identifier:   89:61:19:06:05:C1:D6:A1:2E:8C:F2:42:6B:19:94:24:EA:7F:70:11
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          0826
Signing time:             Fri 22 Nov 2024 20:31:12 +0000
Manifest this update:     Fri 22 Nov 2024 20:31:11 +0000
Manifest next update:     Fri 29 Nov 2024 20:31:11 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: Ap4IsIIG++QFYhJ4nffbGIC7sPwXnwcKZoTZRnKxvgE=)
                          2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 9wXMOm9fVh9YiiXGFKNsgIYR+u452tjlEUQ6Zp2HaJM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Nov 22 20:31:11 2024 GMT
            Not After : Nov 29 20:31:11 2024 GMT
        Subject: CN=6740ea10-bea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:a2:72:d7:96:31:f1:69:a1:b1:10:a6:e1:
                    91:22:d3:77:e7:76:ef:b4:77:10:f7:6c:0b:aa:aa:
                    b1:08:62:17:69:47:1a:00:32:a7:9d:41:4e:4c:09:
                    8b:26:c9:a2:5c:f4:db:4a:76:30:3a:2b:9f:6f:01:
                    34:fe:96:52:d1:68:43:fb:58:b1:ca:c6:0c:57:6d:
                    67:f0:20:52:22:be:44:3e:f4:c6:77:12:99:b4:39:
                    3d:ec:30:35:48:05:ff:2c:cf:fe:ec:85:44:83:e4:
                    af:3e:47:db:d8:b6:df:97:57:4d:c1:c0:b4:1e:f8:
                    f5:11:1b:34:8d:bc:46:28:87:93:75:c6:82:da:ed:
                    65:e8:90:39:cd:ab:10:2c:bf:91:f4:2b:5a:de:13:
                    33:50:b9:88:c0:cf:b0:2b:21:7e:2a:1d:44:a9:bc:
                    3d:07:5b:a0:78:cc:e1:cb:1b:ac:bc:f6:2a:35:d0:
                    97:4f:b0:5b:2b:07:3b:97:c2:b5:cf:07:32:37:a1:
                    52:58:3e:aa:90:9f:9c:85:7e:fa:0c:52:99:36:7e:
                    d5:72:e4:1a:ef:b9:94:c3:8b:54:6b:fc:45:12:7b:
                    2a:f1:81:30:fa:ea:c7:aa:96:96:c2:ac:68:2a:30:
                    ac:92:1e:c3:fd:83:b2:b6:bf:32:c9:cb:af:93:64:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:19:06:05:C1:D6:A1:2E:8C:F2:42:6B:19:94:24:EA:7F:70:11
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:2d:cf:0a:dc:fa:69:8d:30:74:41:b6:03:d9:ad:37:2f:
         36:40:e7:be:cb:bd:fe:26:97:e8:9d:75:5c:eb:8a:06:73:dd:
         b6:47:f6:09:13:a2:ad:fa:e1:0d:c4:3c:e2:c1:12:32:b8:7b:
         80:a9:26:63:b0:37:34:f2:e5:67:56:4f:41:f2:28:1f:40:2e:
         84:ee:9f:0a:ff:e2:f0:6a:ad:42:6d:98:b2:f3:77:de:ef:ac:
         12:e5:69:b4:63:fe:e1:f1:2a:7a:be:6a:75:ec:81:41:16:4c:
         04:db:8e:76:31:7d:1f:48:fe:80:26:5a:fc:15:f1:d4:36:b5:
         1c:7c:8b:3d:cd:fc:a1:e8:87:40:6f:eb:79:4b:51:67:4a:a9:
         20:ac:30:c2:fb:72:3a:93:48:5e:a8:f7:e5:21:14:23:8b:1e:
         fc:e2:5c:60:1e:94:fd:d0:d3:db:2b:e3:c7:73:cd:70:b1:8b:
         05:92:29:ee:de:8e:00:af:48:ba:2b:9d:f7:d3:8d:dc:ca:6c:
         d0:89:70:4e:cf:42:de:8e:35:ac:b2:7b:05:02:57:da:4f:42:
         37:5b:51:55:9a:51:db:7b:72:cc:25:06:14:77:41:15:3d:82:
         65:ef:1a:36:f0:05:c5:bc:c8:74:d4:5d:26:50:a2:18:3c:1d:
         4a:5e:59:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1
N0FGQTREMjgwHhcNMjQxMTIyMjAzMTExWhcNMjQxMTI5MjAzMTExWjAYMRYwFAYD
VQQDEw02NzQwZWExMC1iZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkKicteWMfFpobEQpuGRItN353bvtHcQ92wLqqqxCGIXaUcaADKnnUFOTAmL
JsmiXPTbSnYwOiufbwE0/pZS0WhD+1ixysYMV21n8CBSIr5EPvTGdxKZtDk97DA1
SAX/LM/+7IVEg+SvPkfb2Lbfl1dNwcC0Hvj1ERs0jbxGKIeTdcaC2u1l6JA5zasQ
LL+R9Cta3hMzULmIwM+wKyF+Kh1Eqbw9B1ugeMzhyxusvPYqNdCXT7BbKwc7l8K1
zwcyN6FSWD6qkJ+chX76DFKZNn7VcuQa77mUw4tUa/xFEnsq8YEw+urHqpaWwqxo
KjCskh7D/YOytr8yycuvk2TuMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlhGQYF
wdahLozyQmsZlCTqf3ARMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG
MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi
bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgPC3PCtz6aY0wdEG2A9mtNy82QOe+y73+JpfonXVc64oGc922R/YJ
E6Kt+uENxDziwRIyuHuAqSZjsDc08uVnVk9B8igfQC6E7p8K/+Lwaq1CbZiy83fe
76wS5Wm0Y/7h8Sp6vmp17IFBFkwE2452MX0fSP6AJlr8FfHUNrUcfIs9zfyh6IdA
b+t5S1FnSqkgrDDC+3I6k0heqPflIRQjix784lxgHpT90NPbK+PHc81wsYsFkinu
3o4Ar0i6K533043cymzQiXBOz0LejjWssnsFAlfaT0I3W1FVmlHbe3LMJQYUd0EV
PYJl7xo28AXFvMh01F0mUKIYPB1KXlkM
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org