Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          KbNtVZgeejCKSr02fNLU/JpfqdI/M8PK5eKqkNa51do=
Subject key identifier:   FE:EC:DC:66:97:B3:81:17:E6:0F:BB:AC:26:DC:0B:56:FD:6D:6C:4D
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          04A2
Signing time:             Fri 22 Nov 2024 23:31:38 +0000
Manifest this update:     Fri 22 Nov 2024 23:31:38 +0000
Manifest next update:     Fri 29 Nov 2024 23:31:38 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: XfjvQbA/8SDx68ARBTTHeGS1V6pJOBYhLbdF6Ti6/8k=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Nov 22 23:31:38 2024 GMT
            Not After : Nov 29 23:31:38 2024 GMT
        Subject: CN=6741145a-94f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:01:03:bf:ec:a7:4d:18:70:71:ea:25:b8:
                    8c:d0:84:37:5b:79:b1:d5:50:49:a1:43:5c:3a:99:
                    1e:02:3b:d4:1c:0d:25:6c:dc:58:67:53:0d:47:66:
                    45:a0:22:65:28:29:f9:7a:66:60:a4:ba:d7:19:08:
                    42:24:09:a7:fd:fe:c7:62:32:11:4e:a7:0b:90:70:
                    41:2b:69:3c:c9:7a:26:d1:6c:fe:c9:77:d2:89:c2:
                    33:97:e7:de:6c:cc:88:3d:13:70:47:43:62:4f:bc:
                    fe:0f:b4:ad:22:32:22:22:33:0b:4d:d4:4e:7e:ad:
                    bf:d3:9e:a7:be:b3:73:5a:81:c0:28:16:f5:49:41:
                    31:96:5c:0e:22:3e:d4:50:b2:32:e3:93:a8:71:70:
                    25:b9:ca:1a:a5:3b:90:54:dd:f2:87:de:d5:05:91:
                    5b:21:e3:06:b0:95:eb:b4:1b:0a:cf:42:d1:a5:eb:
                    50:50:76:5c:74:bd:c0:33:1a:27:c5:4a:a8:6c:1b:
                    15:9e:ad:34:94:b0:75:41:50:a4:7a:d9:02:79:b9:
                    8f:75:09:ca:bd:dc:6d:76:23:57:a8:9e:f0:25:9c:
                    7c:cd:1d:f9:fe:e3:48:e4:65:60:80:52:9a:84:7f:
                    08:db:72:40:c5:f4:89:f9:69:1e:3b:21:ef:2a:fb:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EC:DC:66:97:B3:81:17:E6:0F:BB:AC:26:DC:0B:56:FD:6D:6C:4D
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:4c:dc:35:d0:5d:1a:66:b1:2b:5d:9e:e1:58:94:82:b6:d9:
         80:86:c4:4d:01:4b:78:9f:62:cb:4f:4f:4d:bc:0f:f9:f2:51:
         99:a6:94:3b:0a:61:6c:26:26:b8:aa:56:58:91:1e:7e:b1:4f:
         24:ae:b8:7a:6d:45:d3:27:63:b7:36:d2:d0:c8:8a:de:4e:ec:
         25:30:69:42:d7:fe:78:4e:e4:c2:34:37:7b:61:18:b5:66:08:
         2c:30:7c:90:88:1e:fe:f0:3b:6e:56:c8:0d:9d:5a:a0:30:dc:
         bb:ad:7d:ea:df:9a:91:4e:ec:d8:6f:41:73:75:1f:14:3d:14:
         0b:38:0e:d5:e2:2d:9e:8b:c2:cb:91:ce:1c:a4:b3:75:21:16:
         96:38:dc:0d:c2:ae:e9:fb:f5:48:7b:9e:dc:12:fa:0e:22:82:
         58:be:62:3c:1b:b4:0c:31:ca:27:a5:8b:10:bf:f6:12:26:b8:
         47:c7:da:48:e9:4d:5f:85:e3:5e:6b:4d:71:d0:5c:51:31:59:
         91:ab:f6:01:02:bb:e3:96:49:76:9d:a1:b5:1e:5a:89:15:b5:
         5a:e6:82:e4:98:c9:c5:58:7b:6c:73:39:46:84:8c:ff:a5:6c:
         3c:e0:ae:ea:81:eb:26:a8:27:a9:bf:5d:30:db:3b:00:8f:08:
         ce:04:d2:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz
Mjk3ODAzQUMwHhcNMjQxMTIyMjMzMTM4WhcNMjQxMTI5MjMzMTM4WjAYMRYwFAYD
VQQDEw02NzQxMTQ1YS05NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+IBA7/sp00YcHHqJbiM0IQ3W3mx1VBJoUNcOpkeAjvUHA0lbNxYZ1MNR2ZF
oCJlKCn5emZgpLrXGQhCJAmn/f7HYjIRTqcLkHBBK2k8yXom0Wz+yXfSicIzl+fe
bMyIPRNwR0NiT7z+D7StIjIiIjMLTdROfq2/056nvrNzWoHAKBb1SUExllwOIj7U
ULIy45OocXAlucoapTuQVN3yh97VBZFbIeMGsJXrtBsKz0LRpetQUHZcdL3AMxon
xUqobBsVnq00lLB1QVCketkCebmPdQnKvdxtdiNXqJ7wJZx8zR35/uNI5GVggFKa
hH8I23JAxfSJ+WkeOyHvKvsLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7s3GaX
s4EX5g+7rCbcC1b9bWxNMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF
RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2
NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFTNw10F0aZrErXZ7hWJSCttmAhsRNAUt4n2LLT09NvA/58lGZppQ7
CmFsJia4qlZYkR5+sU8krrh6bUXTJ2O3NtLQyIreTuwlMGlC1/54TuTCNDd7YRi1
ZggsMHyQiB7+8DtuVsgNnVqgMNy7rX3q35qRTuzYb0FzdR8UPRQLOA7V4i2ei8LL
kc4cpLN1IRaWONwNwq7p+/VIe57cEvoOIoJYvmI8G7QMMconpYsQv/YSJrhHx9pI
6U1fheNea01x0FxRMVmRq/YBArvjlkl2naG1HlqJFbVa5oLkmMnFWHtsczlGhIz/
pWw84K7qgesmqCepv10w2zsAjwjOBNLP
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org