Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
File:                     LV39FidW7eBIu98_mMTBWrxfvZg.mft (raw, json)
Hash identifier:          UtJTitXogbs2TCZRq4r8pEgVhA8Uof4nZa4oLttx+48=
Subject key identifier:   C9:29:74:7F:59:91:3E:7B:A1:02:2C:41:E2:12:CF:88:3D:D4:EC:96
Authority key identifier: 2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98
Certificate issuer:       /CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
Manifest number:          0142
Signing time:             Sat 23 Nov 2024 02:36:43 +0000
Manifest this update:     Sat 23 Nov 2024 02:36:43 +0000
Manifest next update:     Sat 30 Nov 2024 02:36:43 +0000
Files and hashes:         1: LV39FidW7eBIu98_mMTBWrxfvZg.crl (hash: 2cLeXc3aVTQmJw76YU66xh4GomCqz1NLd5OFbZ88Klk=)
                          2: 9554A1DABC9311ED9A95EC18C4F9AE02.roa (hash: tdiT5Pj4H5/sdu2riOGkLRsNazThR/Jtxol14iAExBQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl
                          rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98
        Validity
            Not Before: Nov 23 02:36:43 2024 GMT
            Not After : Nov 30 02:36:43 2024 GMT
        Subject: CN=67413fbb-0ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:02:d9:36:7f:30:02:24:eb:29:46:17:c7:6a:
                    a9:b4:a4:ea:c8:26:95:21:bb:29:f4:3f:7a:b1:4a:
                    77:69:95:2a:76:ba:02:1e:db:fd:06:3c:61:0c:1c:
                    c0:24:03:94:32:c4:77:9c:ef:95:11:d3:86:18:84:
                    1f:23:4f:1c:9c:9c:68:f0:c2:08:5a:3c:78:bd:96:
                    42:7d:f4:d2:36:22:b0:25:da:41:8a:59:ab:ce:01:
                    dd:96:37:04:28:2f:9a:d5:35:77:f1:f2:23:c7:7d:
                    07:c5:e3:f0:be:34:b9:19:c0:e3:6d:c6:54:02:41:
                    6d:e5:c0:ef:3c:9b:f8:43:e2:59:03:e7:b5:88:cd:
                    0a:8f:0d:1e:ac:b1:ff:a2:89:37:de:53:85:8b:9a:
                    a6:e3:f3:62:c5:18:8d:e0:14:6f:52:2d:94:42:7b:
                    48:07:8a:27:3f:33:eb:43:be:22:d9:8f:db:7a:6f:
                    57:76:0a:3d:4f:1e:59:68:d6:c2:13:54:94:0f:ba:
                    d8:ba:a6:0a:da:ea:94:03:73:52:1b:0f:e7:de:a5:
                    9c:98:68:ca:50:19:e3:b7:60:5f:ef:f6:15:ad:0e:
                    a7:a1:4d:85:74:64:52:80:b9:80:15:13:3f:b8:a3:
                    9c:c5:7e:c6:cc:db:c1:b4:49:3b:21:e4:0f:2c:d6:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:29:74:7F:59:91:3E:7B:A1:02:2C:41:E2:12:CF:88:3D:D4:EC:96
            X509v3 Authority Key Identifier:
                keyid:2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:c5:f4:f7:c6:92:7e:bc:89:c5:41:41:f9:ae:fb:a6:ce:
         ac:e4:59:56:bf:95:a5:e6:f2:ed:fc:b6:32:70:56:63:c0:ca:
         f9:84:4b:d5:27:cf:b4:df:a3:0c:2a:3f:10:b1:5e:e0:4d:8c:
         6e:6c:33:07:a6:31:a2:dc:3a:74:cc:8e:29:1f:9e:98:00:3d:
         53:41:b2:5a:a5:f5:ed:b1:54:af:11:4e:36:23:ee:08:ed:b6:
         f0:2e:98:90:a6:d0:60:0b:fa:63:96:5e:5d:3f:de:ae:6c:6b:
         e6:b5:22:4c:c8:cd:e8:f0:70:cc:38:5a:b9:77:7f:8b:0f:bb:
         99:a2:55:e9:20:90:12:e8:9c:81:4d:12:da:10:cf:38:13:6a:
         35:19:22:5a:78:7a:f1:e7:d1:22:6d:a7:02:01:6e:53:4d:8b:
         8b:6b:fe:c3:b7:75:45:5c:38:6a:b2:90:b5:85:2d:8a:d7:c9:
         a9:5c:f4:af:73:3e:9c:75:b7:eb:a1:b8:0a:59:dc:2e:d0:92:
         1e:bc:61:76:3d:d7:c3:09:d7:66:72:88:30:33:1d:7f:88:2b:
         1f:68:36:f2:12:6e:e1:78:65:2f:b1:89:84:8d:04:9b:c6:55:
         30:95:95:59:90:b9:ad:a4:67:dd:f4:9b:ae:d8:90:f2:8e:5f:
         72:c6:ac:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2MjYxMTAvBgNVBAUTKDJENURGRDE2Mjc1NkVERTA0OEJCREYzRjk4QzRDMTVB
QkM1RkJEOTgwHhcNMjQxMTIzMDIzNjQzWhcNMjQxMTMwMDIzNjQzWjAYMRYwFAYD
VQQDEw02NzQxM2ZiYi0wZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9gLZNn8wAiTrKUYXx2qptKTqyCaVIbsp9D96sUp3aZUqdroCHtv9BjxhDBzA
JAOUMsR3nO+VEdOGGIQfI08cnJxo8MIIWjx4vZZCffTSNiKwJdpBilmrzgHdljcE
KC+a1TV38fIjx30HxePwvjS5GcDjbcZUAkFt5cDvPJv4Q+JZA+e1iM0Kjw0erLH/
ook33lOFi5qm4/NixRiN4BRvUi2UQntIB4onPzPrQ74i2Y/bem9Xdgo9Tx5ZaNbC
E1SUD7rYuqYK2uqUA3NSGw/n3qWcmGjKUBnjt2Bf7/YVrQ6noU2FdGRSgLmAFRM/
uKOcxX7GzNvBtEk7IeQPLNa14wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkpdH9Z
kT57oQIsQeISz4g91OyWMB8GA1UdIwQYMBaAFC1d/RYnVu3gSLvfP5jEwVq8X72Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyNi8wQkY0QTFGRUJD
OTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdlQkl1OThfbU1UQldyeGZ2
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWMzlGaWRXN2VCSXU5OF9tTVRCV3J4ZnZaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTYyNi8wQkY0QTFGRUJDOTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdl
Qkl1OThfbU1UQldyeGZ2WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuAsX098aSfryJxUFB+a77ps6s5FlWv5Wl5vLt/LYycFZjwMr5hEvV
J8+036MMKj8QsV7gTYxubDMHpjGi3Dp0zI4pH56YAD1TQbJapfXtsVSvEU42I+4I
7bbwLpiQptBgC/pjll5dP96ubGvmtSJMyM3o8HDMOFq5d3+LD7uZolXpIJAS6JyB
TRLaEM84E2o1GSJaeHrx59EibacCAW5TTYuLa/7Dt3VFXDhqspC1hS2K18mpXPSv
cz6cdbfrobgKWdwu0JIevGF2PdfDCddmcogwMx1/iCsfaDbyEm7heGUvsYmEjQSb
xlUwlZVZkLmtpGfd9Juu2JDyjl9yxqy/
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org