Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
File:                     B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft (raw, json)
Hash identifier:          ymhIHM6x+z6ovKEE/j2dsy8O6cwn8ND0vtoTMZuEOc8=
Subject key identifier:   75:2A:1D:D9:26:45:A6:0B:22:30:B6:8A:A0:12:D4:CE:B0:47:85:3D
Authority key identifier: 07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B
Certificate issuer:       /CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B
Certificate serial:       1085
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
Manifest number:          107C
Signing time:             Fri 22 Nov 2024 17:21:13 +0000
Manifest this update:     Fri 22 Nov 2024 17:21:12 +0000
Manifest next update:     Fri 29 Nov 2024 17:21:12 +0000
Files and hashes:         1: B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl (hash: 1fjrtROUw5gZ06uzquhoAW3Pi3UGHGWhnTUxXQTf7iY=)
                          2: 78CEA40E63CE11EBB442586CC4F9AE02.roa (hash: NewJlP4FcPImSES9Zii/D+Z8AFnZFa5F2PVIi0h4zOo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl
                          rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4229 (0x1085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B
        Validity
            Not Before: Nov 22 17:21:12 2024 GMT
            Not After : Nov 29 17:21:12 2024 GMT
        Subject: CN=6740bd88-3d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:04:c3:19:2f:61:ed:4f:1c:66:18:13:5c:
                    0a:12:87:44:ea:fe:ad:2d:07:6d:bb:37:15:ca:b4:
                    b4:7b:2a:7c:a2:ab:6c:5e:d8:05:36:77:76:01:dd:
                    67:53:87:48:44:c8:a7:0f:7c:77:47:5f:3c:9b:82:
                    95:aa:ff:74:84:3d:fd:93:ee:e1:91:24:b9:8a:d9:
                    c7:8c:05:0e:7f:f1:4e:74:ce:16:98:dc:87:7d:29:
                    5d:a3:85:5c:bf:49:d8:6a:3d:60:bb:b6:a0:72:52:
                    86:90:fc:28:95:cb:b1:28:4a:b8:bf:4e:ed:69:26:
                    a1:59:52:ac:a7:e2:2d:1d:f5:5b:ea:bd:aa:ac:93:
                    69:9d:be:c4:87:de:a1:d3:97:a0:8f:46:57:b9:df:
                    7c:a7:81:cd:52:05:2b:b9:eb:74:b6:73:a5:26:98:
                    5f:2d:49:09:de:40:22:80:76:2a:d7:b7:a9:7f:49:
                    27:30:ee:30:15:0b:ef:06:9d:ca:72:81:7d:51:4c:
                    65:bd:f3:16:4a:6a:4c:b6:e3:77:9e:20:45:04:cd:
                    4f:a8:d6:e0:ac:ae:3b:78:de:aa:c1:b4:8b:38:08:
                    19:d8:1e:b7:74:9b:5c:d7:06:a7:1a:c6:b0:bf:b7:
                    a4:80:02:7d:7e:98:66:17:33:86:af:94:f1:2e:0a:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:1D:D9:26:45:A6:0B:22:30:B6:8A:A0:12:D4:CE:B0:47:85:3D
            X509v3 Authority Key Identifier:
                keyid:07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2b:cd:1f:ce:5b:6f:b6:af:6a:13:6c:17:e5:af:ab:8c:03:
         d3:8d:e1:49:3f:d2:07:f0:55:e5:14:9c:01:15:be:c8:d8:8a:
         cc:f6:10:95:a2:64:75:a9:93:88:f1:f1:5e:90:1a:54:d7:7c:
         dc:5b:9c:44:40:88:39:f0:e7:7d:27:18:ec:33:a4:ab:4e:99:
         3f:45:58:02:1c:07:20:4f:e2:c6:df:a0:1c:60:ee:b2:e2:c5:
         08:be:2e:74:fc:22:0f:56:7c:22:19:28:ff:ce:99:10:09:32:
         bc:3b:18:22:de:b6:0f:6a:45:11:7b:af:c1:e2:87:f4:a8:55:
         19:d1:5b:8b:fe:aa:a1:2a:e1:c1:57:80:27:20:74:3c:1b:d4:
         84:f5:8c:cb:51:32:60:1f:d7:9f:5a:7d:13:89:3c:e2:57:d5:
         cf:1a:6d:85:0e:ab:d7:b2:b9:ff:0a:ae:44:1b:37:8d:33:5d:
         fb:62:b1:e9:12:51:c4:ef:17:91:61:a8:86:fa:79:cb:ba:6c:
         b4:28:0d:dd:9c:04:0e:6b:00:17:63:a0:ae:d7:2f:b2:4e:8d:
         70:d1:f3:0d:ea:9b:43:12:4d:61:38:b0:0d:92:2b:eb:d5:54:
         44:f0:aa:e2:0f:81:69:1d:d9:34:0d:a0:b6:ee:c3:9f:aa:a7:
         04:40:4e:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxNTcxMTAvBgNVBAUTKDA3OUNGQ0M1MTJFQTYxOTY2RkEzMTlBMjk4OEM5MkZE
ODZCREY4OEIwHhcNMjQxMTIyMTcyMTEyWhcNMjQxMTI5MTcyMTEyWjAYMRYwFAYD
VQQDEw02NzQwYmQ4OC0zZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1EUEwxkvYe1PHGYYE1wKEodE6v6tLQdtuzcVyrS0eyp8oqtsXtgFNnd2Ad1n
U4dIRMinD3x3R188m4KVqv90hD39k+7hkSS5itnHjAUOf/FOdM4WmNyHfSldo4Vc
v0nYaj1gu7agclKGkPwolcuxKEq4v07taSahWVKsp+ItHfVb6r2qrJNpnb7Eh96h
05egj0ZXud98p4HNUgUruet0tnOlJphfLUkJ3kAigHYq17epf0knMO4wFQvvBp3K
coF9UUxlvfMWSmpMtuN3niBFBM1PqNbgrK47eN6qwbSLOAgZ2B63dJtc1wanGsaw
v7ekgAJ9fphmFzOGr5TxLgpzNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUqHdkm
RaYLIjC2iqAS1M6wR4U9MB8GA1UdIwQYMBaAFAec/MUS6mGWb6MZopiMkv2GvfiL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzE1Ny81NEU0N0RFRTFE
M0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVlaWnZveG1pbUl5U19ZYTkt
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I1ejh4UkxxWVpadm94bWltSXlTX1lhOS1Jcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzE1Ny81NEU0N0RFRTFEM0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVla
WnZveG1pbUl5U19ZYTktSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRK80fzltvtq9qE2wX5a+rjAPTjeFJP9IH8FXlFJwBFb7I2IrM9hCV
omR1qZOI8fFekBpU13zcW5xEQIg58Od9JxjsM6SrTpk/RVgCHAcgT+LG36AcYO6y
4sUIvi50/CIPVnwiGSj/zpkQCTK8Oxgi3rYPakURe6/B4of0qFUZ0VuL/qqhKuHB
V4AnIHQ8G9SE9YzLUTJgH9efWn0TiTziV9XPGm2FDqvXsrn/Cq5EGzeNM137YrHp
ElHE7xeRYaiG+nnLumy0KA3dnAQOawAXY6Cu1y+yTo1w0fMN6ptDEk1hOLANkivr
1VRE8KriD4FpHdk0DaC27sOfqqcEQE5U
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org