Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File:                     fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier:          uRi6/bjTTCNdx1QUYKmRExu8Iem/87LqDDlxaljDf2I=
Subject key identifier:   25:A9:94:7F:9E:25:25:E7:19:B5:41:02:64:6C:F1:31:DF:55:DF:A5
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer:       /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number:          0730
Signing time:             Fri 22 Nov 2024 21:13:56 +0000
Manifest this update:     Fri 22 Nov 2024 21:13:55 +0000
Manifest next update:     Fri 29 Nov 2024 21:13:55 +0000
Files and hashes:         1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: f4uNQUHkfdWZOdlEatg6HVYUIgxMKCmgWNlLBYI1lV0=)
                          2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: ct7Z/dJtcS+yU/X4lz2gIOM97fNKVcVlFQQJs1hgNTw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
                          rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
        Validity
            Not Before: Nov 22 21:13:55 2024 GMT
            Not After : Nov 29 21:13:55 2024 GMT
        Subject: CN=6740f414-5b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:e3:fd:de:77:83:b1:89:5c:9e:c7:b2:ed:
                    b6:0c:f8:ef:88:1c:c7:e7:bd:0f:27:3f:fd:1d:7b:
                    96:de:8e:90:16:bd:d8:08:b1:dc:87:4c:08:38:6b:
                    e7:86:4a:f8:cf:af:47:97:d6:7d:8c:a6:28:b3:b5:
                    4c:52:a3:83:c6:5a:62:b9:a0:ea:cf:5d:0c:54:77:
                    14:d3:3f:19:09:ac:bd:d5:15:c8:2c:7e:ff:4c:e4:
                    0c:f0:62:2d:21:f7:72:2e:57:cf:83:4d:ab:91:24:
                    2e:f3:62:92:b2:aa:15:9a:cf:ac:af:e6:bd:2a:0b:
                    6f:b7:7e:12:8f:25:5a:fe:1f:13:20:fc:a5:ea:67:
                    ba:07:33:b0:87:83:bd:1c:35:14:e1:99:16:ff:85:
                    15:4e:2c:7d:9a:0e:10:be:27:f0:0a:c9:ed:23:5e:
                    68:64:02:c6:70:ad:43:26:3a:39:cd:df:8f:00:90:
                    90:13:7a:fd:54:3f:1d:30:fb:f5:d2:9d:18:c9:2f:
                    2d:79:5d:e0:eb:92:08:5a:07:c4:3f:50:cb:25:98:
                    a8:89:94:1a:cb:b4:08:04:5c:29:58:99:dc:79:a4:
                    56:b4:34:5b:ab:82:b4:8d:00:f8:e0:7d:56:f6:33:
                    57:e4:77:e6:4a:16:e0:d6:96:94:f1:65:c9:c7:de:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A9:94:7F:9E:25:25:E7:19:B5:41:02:64:6C:F1:31:DF:55:DF:A5
            X509v3 Authority Key Identifier:
                keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:65:71:3a:17:75:d9:81:25:4c:ad:54:fc:6b:4b:5e:f3:
         2d:15:52:f3:87:d0:c5:7c:86:44:9a:37:03:55:3e:99:13:07:
         4a:d8:f9:b3:b7:21:2b:f9:08:e3:cb:ae:11:44:90:c5:63:ee:
         25:5e:c8:d3:1a:64:ad:4c:84:ca:18:22:e4:52:7d:60:b6:9f:
         ff:09:a1:06:69:49:8c:00:9a:1f:d6:02:ac:d3:4b:4b:64:82:
         d6:93:42:c6:06:14:5c:d3:4c:69:70:4c:9b:66:06:5d:ce:11:
         15:65:4c:d1:0a:66:8a:08:f8:ec:5c:3f:ed:14:59:3f:08:b0:
         4f:80:6d:4c:50:43:6c:6b:7e:10:84:bc:6e:23:26:e4:18:ef:
         12:6f:0d:6e:00:69:d3:89:41:4d:70:5f:09:05:24:cf:29:79:
         5c:0b:2f:b2:e3:b4:0d:59:a0:01:14:93:cf:29:e2:0d:e5:79:
         3f:c0:42:80:9a:00:8d:82:7a:83:91:1a:5d:8c:bc:cc:23:44:
         f3:00:b3:5c:80:66:e1:02:dc:5c:22:61:eb:24:69:9c:75:27:
         91:96:0f:cf:3e:a6:6d:9e:3a:be:ed:96:25:49:36:56:36:e2:
         7c:02:f6:d1:f4:a6:a5:06:32:51:8f:30:fc:c0:79:eb:81:1f:
         31:06:31:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy
NDYxRTI3MTUwHhcNMjQxMTIyMjExMzU1WhcNMjQxMTI5MjExMzU1WjAYMRYwFAYD
VQQDEw02NzQwZjQxNC01Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmB3j/d53g7GJXJ7Hsu22DPjviBzH570PJz/9HXuW3o6QFr3YCLHch0wIOGvn
hkr4z69Hl9Z9jKYos7VMUqODxlpiuaDqz10MVHcU0z8ZCay91RXILH7/TOQM8GIt
IfdyLlfPg02rkSQu82KSsqoVms+sr+a9Kgtvt34SjyVa/h8TIPyl6me6BzOwh4O9
HDUU4ZkW/4UVTix9mg4QvifwCsntI15oZALGcK1DJjo5zd+PAJCQE3r9VD8dMPv1
0p0YyS8teV3g65IIWgfEP1DLJZioiZQay7QIBFwpWJnceaRWtDRbq4K0jQD44H1W
9jNX5HfmShbg1paU8WXJx97QRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWplH+e
JSXnGbVBAmRs8THfVd+lMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD
MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz
LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXLGVxOhd12YElTK1U/GtLXvMtFVLzh9DFfIZEmjcDVT6ZEwdK2Pmz
tyEr+Qjjy64RRJDFY+4lXsjTGmStTITKGCLkUn1gtp//CaEGaUmMAJof1gKs00tL
ZILWk0LGBhRc00xpcEybZgZdzhEVZUzRCmaKCPjsXD/tFFk/CLBPgG1MUENsa34Q
hLxuIybkGO8Sbw1uAGnTiUFNcF8JBSTPKXlcCy+y47QNWaABFJPPKeIN5Xk/wEKA
mgCNgnqDkRpdjLzMI0TzALNcgGbhAtxcImHrJGmcdSeRlg/PPqZtnjq+7ZYlSTZW
NuJ8AvbR9KalBjJRjzD8wHnrgR8xBjHA
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org