Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
File:                     neREitn8xz-qLSdV9L9UnTFCcAU.mft (raw, json)
Hash identifier:          ADc5z7IfVdii/H8ZlK674mGrUYqLTB5dERwYFodfslA=
Subject key identifier:   F7:27:61:D5:0F:54:F1:D4:9F:28:24:96:CD:76:78:38:31:BE:16:F5
Authority key identifier: 9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05
Certificate issuer:       /CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
Manifest number:          014B
Signing time:             Sat 23 Nov 2024 02:32:45 +0000
Manifest this update:     Sat 23 Nov 2024 02:32:44 +0000
Manifest next update:     Sat 30 Nov 2024 02:32:44 +0000
Files and hashes:         1: neREitn8xz-qLSdV9L9UnTFCcAU.crl (hash: DTn3hZNfrjpRkG1c4qY+iGO3lcQIhvxsE6U+wZlXlIs=)
                          2: 8213ED86B18211ED961BC348C4F9AE02.roa (hash: +QnI0UZrS5ENO1HfW4khSuI3IyC9iYQtxaK38tT932I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl
                          rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E81/serialNumber=9DE4448AD9FCC73FAA2D2755F4BF549D31427005
        Validity
            Not Before: Nov 23 02:32:44 2024 GMT
            Not After : Nov 30 02:32:44 2024 GMT
        Subject: CN=67413ecc-0c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:f0:df:b6:22:fd:2d:5c:b5:06:f5:25:6f:
                    08:cc:1e:16:5c:35:54:d1:d5:6e:35:3d:2d:f7:1a:
                    55:1c:bb:94:aa:33:dd:15:69:ba:be:87:e2:ff:65:
                    b8:c3:9c:6d:72:26:0c:0f:f2:41:e0:71:1a:51:67:
                    6e:be:84:46:4a:62:52:d9:46:1a:14:2c:2c:a7:7b:
                    8d:f4:d6:a5:da:2e:ff:ea:92:d6:f3:07:8a:9f:e2:
                    47:b1:bd:6d:ca:59:25:7f:21:d9:cc:60:b0:a1:67:
                    c4:8e:9b:04:64:64:e3:34:ac:e6:9a:08:f2:8b:7e:
                    dc:84:32:f7:a0:b6:b6:b5:46:fa:c0:17:1e:a1:bb:
                    0e:25:42:94:b2:56:1a:6c:8d:13:79:04:99:17:86:
                    1e:c6:b3:0e:a6:d2:f6:96:e5:42:a7:80:c4:80:e7:
                    2e:f8:b6:fd:16:74:db:7b:86:a2:fb:e8:7f:c4:9f:
                    c5:4a:ef:d2:58:49:b8:2f:bd:83:50:a4:fc:47:45:
                    59:ab:e2:bc:10:53:09:26:b8:6a:e2:75:d8:31:d2:
                    56:6d:b0:f5:e1:f4:aa:e8:93:f2:da:e5:3b:4a:a7:
                    d9:b9:49:fc:39:5d:d0:b6:d4:8d:49:4f:38:16:3c:
                    d3:37:26:a7:b8:88:31:02:b3:07:de:36:37:7d:a4:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:61:D5:0F:54:F1:D4:9F:28:24:96:CD:76:78:38:31:BE:16:F5
            X509v3 Authority Key Identifier:
                keyid:9D:E4:44:8A:D9:FC:C7:3F:AA:2D:27:55:F4:BF:54:9D:31:42:70:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neREitn8xz-qLSdV9L9UnTFCcAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E81/16CF7566B17F11ED9684DC45C4F9AE02/neREitn8xz-qLSdV9L9UnTFCcAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:86:92:3e:26:a1:5e:ad:07:85:18:aa:26:2d:01:5b:33:
         ce:49:98:ad:58:32:81:e9:66:d1:df:6f:52:0a:45:92:4c:4b:
         59:e8:84:27:bb:a3:58:19:2d:ba:d7:e3:08:c3:c2:78:9c:a0:
         7b:0d:eb:6b:03:13:23:5a:69:61:bd:32:ad:d0:22:99:63:b7:
         7c:40:c9:69:dd:a7:81:c0:4b:ec:41:4d:bb:ee:2b:90:3f:6a:
         f1:bb:c9:33:b8:71:bc:d1:9a:4d:1f:52:ec:ad:23:d6:6f:69:
         76:3f:85:3c:b9:28:fa:2e:96:49:dd:d2:7f:8b:20:7c:72:d3:
         61:9b:fb:f2:71:8d:cf:4a:3d:97:50:e6:da:0f:f7:ae:e3:36:
         d6:44:49:d3:dc:45:b8:ac:16:cf:39:a4:26:54:b8:c2:e1:f1:
         66:68:0c:7e:57:cf:ef:72:06:6b:04:81:15:99:4c:78:f0:c3:
         98:f5:49:68:14:c5:a9:0d:6f:a5:bd:d8:9c:c7:e7:ef:d7:6e:
         5f:b2:f5:63:7b:b6:1f:f0:41:f0:0c:b4:e9:69:2d:21:79:6c:
         f5:37:c8:bf:0d:61:3a:af:0c:80:c4:1c:f4:3e:82:ae:96:48:
         fa:e4:e7:46:cd:26:e1:e8:3e:c1:95:ee:99:bf:7c:a2:2c:87:
         19:19:97:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFODExMTAvBgNVBAUTKDlERTQ0NDhBRDlGQ0M3M0ZBQTJEMjc1NUY0QkY1NDlE
MzE0MjcwMDUwHhcNMjQxMTIzMDIzMjQ0WhcNMjQxMTMwMDIzMjQ0WjAYMRYwFAYD
VQQDEw02NzQxM2VjYy0wYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1Hw37Yi/S1ctQb1JW8IzB4WXDVU0dVuNT0t9xpVHLuUqjPdFWm6vofi/2W4
w5xtciYMD/JB4HEaUWduvoRGSmJS2UYaFCwsp3uN9Nal2i7/6pLW8weKn+JHsb1t
ylklfyHZzGCwoWfEjpsEZGTjNKzmmgjyi37chDL3oLa2tUb6wBceobsOJUKUslYa
bI0TeQSZF4YexrMOptL2luVCp4DEgOcu+Lb9FnTbe4ai++h/xJ/FSu/SWEm4L72D
UKT8R0VZq+K8EFMJJrhq4nXYMdJWbbD14fSq6JPy2uU7SqfZuUn8OV3QttSNSU84
FjzTNyanuIgxArMH3jY3faTOewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcnYdUP
VPHUnygkls12eDgxvhb1MB8GA1UdIwQYMBaAFJ3kRIrZ/Mc/qi0nVfS/VJ0xQnAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4MS8xNkNGNzU2NkIx
N0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6LXFMU2RWOUw5VW5URkNj
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25lUkVpdG44eHotcUxTZFY5TDlVblRGQ2NBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkU4MS8xNkNGNzU2NkIxN0YxMUVEOTY4NERDNDVDNEY5QUUwMi9uZVJFaXRuOHh6
LXFMU2RWOUw5VW5URkNjQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6FIaSPiahXq0HhRiqJi0BWzPOSZitWDKB6WbR329SCkWSTEtZ6IQn
u6NYGS261+MIw8J4nKB7DetrAxMjWmlhvTKt0CKZY7d8QMlp3aeBwEvsQU277iuQ
P2rxu8kzuHG80ZpNH1LsrSPWb2l2P4U8uSj6LpZJ3dJ/iyB8ctNhm/vycY3PSj2X
UObaD/eu4zbWREnT3EW4rBbPOaQmVLjC4fFmaAx+V8/vcgZrBIEVmUx48MOY9Ulo
FMWpDW+lvdicx+fv125fsvVje7Yf8EHwDLTpaS0heWz1N8i/DWE6rwyAxBz0PoKu
lkj65OdGzSbh6D7Ble6Zv3yiLIcZGZcr
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org