Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
File:                     VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json)
Hash identifier:          OvODC0F9mLNFPlUddEI0lRxyo1YRRtJJOyO/9xxaoVw=
Subject key identifier:   23:D4:A2:01:FE:36:2E:C2:00:AE:86:0F:9C:D3:C1:DE:86:8E:C0:5D
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Certificate issuer:       /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial:       0A05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
Manifest number:          09FF
Signing time:             Fri 22 Nov 2024 19:36:38 +0000
Manifest this update:     Fri 22 Nov 2024 19:36:37 +0000
Manifest next update:     Fri 29 Nov 2024 19:36:37 +0000
Files and hashes:         1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: cSDbwVRmgQ4vEB0BDTWO+Amci5aoSmygByLTuxfV0jc=)
                          2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: yH51MrOnrCMRnU8jdZMxQRRlfTnvexHS8d47tx5HLls=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
                          rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
        Validity
            Not Before: Nov 22 19:36:37 2024 GMT
            Not After : Nov 29 19:36:37 2024 GMT
        Subject: CN=6740dd45-e3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:b8:9f:c8:ef:6a:75:6e:43:b9:6d:fd:20:
                    e0:da:b3:70:bf:a7:4f:33:98:3a:27:47:5d:86:88:
                    38:dd:c2:6b:52:5f:f3:ff:2c:80:a7:08:dd:b4:de:
                    b7:f2:db:86:b8:ba:83:4d:67:3b:58:64:46:6e:00:
                    19:07:59:cd:f6:19:d0:b2:71:25:b9:1d:aa:a8:32:
                    1b:67:7d:52:00:f7:82:48:e9:80:ac:de:83:4c:f4:
                    d6:1e:42:d2:f7:ff:49:50:59:53:49:f1:d7:d4:be:
                    d8:5a:0e:96:59:5f:31:f6:e0:be:54:ed:b9:a4:bb:
                    b1:57:8a:12:9a:7f:b2:2c:f4:14:4e:fa:b7:0d:bb:
                    ca:94:12:22:df:79:79:8d:96:c6:d8:ae:31:13:17:
                    00:9b:fa:09:e8:55:09:09:ad:ed:19:d8:c8:ea:11:
                    46:0e:26:9f:13:b1:5b:b7:a6:dc:f3:d3:5b:48:ef:
                    58:3d:84:73:a3:d5:40:bf:e9:d9:02:de:a2:f1:31:
                    5b:0f:8a:e3:1a:45:72:c2:7c:80:93:a8:4d:21:42:
                    4d:04:95:eb:82:1a:0a:a2:14:b8:ce:04:72:89:57:
                    2b:6d:6e:dd:0c:b7:2e:ce:c6:22:7d:2d:c2:7e:84:
                    76:8c:fa:17:67:00:05:a4:39:39:a8:1b:c7:74:48:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:A2:01:FE:36:2E:C2:00:AE:86:0F:9C:D3:C1:DE:86:8E:C0:5D
            X509v3 Authority Key Identifier:
                keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:de:ed:3c:2f:2f:63:08:9e:e0:fb:54:4a:21:51:64:3e:e8:
         88:48:cd:12:7b:16:64:e6:c7:67:c4:d1:8c:55:bd:26:aa:d7:
         f3:c6:d2:18:75:2c:1e:e2:78:6c:45:db:85:9c:94:60:72:fa:
         7b:d0:8a:57:4d:c9:ea:3f:4d:aa:2f:6b:8f:db:16:24:da:4c:
         86:70:f5:b3:ef:28:5e:7c:0d:d2:f2:1f:e3:b5:1f:4a:fa:3e:
         55:e2:ba:47:85:e3:64:c1:f6:8b:6c:8a:85:e5:4e:49:67:7e:
         92:4d:3f:17:da:19:9d:20:33:e3:3f:2d:6d:35:7e:d5:d9:14:
         55:c6:9d:e0:af:3c:ef:95:84:0c:b1:13:23:1d:b7:10:13:3f:
         c4:68:d8:23:43:34:75:21:c5:8e:2c:c4:a0:bf:99:a0:37:b8:
         f1:8d:e4:41:3d:11:50:c6:e8:8d:b2:18:e3:d1:fa:02:21:a1:
         34:ba:af:7c:0c:98:21:e9:c7:04:9e:78:0c:27:34:be:b6:b7:
         57:14:5f:23:aa:89:24:bc:e4:e7:b4:83:1d:db:a6:1a:26:93:
         a0:77:19:12:42:56:ad:38:c8:7b:6a:e1:de:e3:3a:70:07:97:
         7d:0e:a3:49:32:76:c9:a3:d7:74:1d:f2:c9:65:b3:ce:29:f9:
         0d:d8:18:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4
MDExMTYzRkEwHhcNMjQxMTIyMTkzNjM3WhcNMjQxMTI5MTkzNjM3WjAYMRYwFAYD
VQQDEw02NzQwZGQ0NS1lM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5+4n8jvanVuQ7lt/SDg2rNwv6dPM5g6J0ddhog43cJrUl/z/yyApwjdtN63
8tuGuLqDTWc7WGRGbgAZB1nN9hnQsnEluR2qqDIbZ31SAPeCSOmArN6DTPTWHkLS
9/9JUFlTSfHX1L7YWg6WWV8x9uC+VO25pLuxV4oSmn+yLPQUTvq3DbvKlBIi33l5
jZbG2K4xExcAm/oJ6FUJCa3tGdjI6hFGDiafE7Fbt6bc89NbSO9YPYRzo9VAv+nZ
At6i8TFbD4rjGkVywnyAk6hNIUJNBJXrghoKohS4zgRyiVcrbW7dDLcuzsYifS3C
foR2jPoXZwAFpDk5qBvHdEiajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPUogH+
Ni7CAK6GD5zTwd6GjsBdMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz
NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD
S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCp3u08Ly9jCJ7g+1RKIVFkPuiISM0SexZk5sdnxNGMVb0mqtfzxtIY
dSwe4nhsRduFnJRgcvp70IpXTcnqP02qL2uP2xYk2kyGcPWz7yhefA3S8h/jtR9K
+j5V4rpHheNkwfaLbIqF5U5JZ36STT8X2hmdIDPjPy1tNX7V2RRVxp3grzzvlYQM
sRMjHbcQEz/EaNgjQzR1IcWOLMSgv5mgN7jxjeRBPRFQxuiNshjj0foCIaE0uq98
DJgh6ccEnngMJzS+trdXFF8jqokkvOTntIMd26YaJpOgdxkSQlatOMh7auHe4zpw
B5d9DqNJMnbJo9d0HfLJZbPOKfkN2BiU
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org