Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
File:                     J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json)
Hash identifier:          Wy/sHGzL09HIs0LsQvgCFRkmmQwfbnsDzm4SwddazK0=
Subject key identifier:   18:E2:59:B5:5C:B0:0D:0B:21:1E:95:86:36:EF:02:35:8F:49:4A:3C
Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
Certificate issuer:       /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
Manifest number:          A1
Signing time:             Sat 23 Nov 2024 04:19:08 +0000
Manifest this update:     Sat 23 Nov 2024 04:19:07 +0000
Manifest next update:     Sat 30 Nov 2024 04:19:07 +0000
Files and hashes:         1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: iTh85mnTHbSkLAElWUBEikoc9i/m0Nou9mjh3SLarPY=)
                          2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: SlEkJKeWiwLtr2u4eKIm9arVfuxIvf+Z6mCwVHWhjSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
                          rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
        Validity
            Not Before: Nov 23 04:19:07 2024 GMT
            Not After : Nov 30 04:19:07 2024 GMT
        Subject: CN=674157bc-1038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:61:d6:71:06:bc:a7:95:55:3f:9b:04:b7:
                    fa:de:ad:e8:0e:58:ac:e9:e9:66:43:fb:b7:d5:7d:
                    14:9e:d4:5b:79:00:8e:75:b2:50:ff:76:44:f3:4e:
                    d9:d1:3a:1d:7f:1d:fc:f0:ab:ab:66:b0:12:ea:4b:
                    3c:44:bc:96:89:b4:75:b4:95:06:b7:d9:66:f0:b8:
                    e1:20:26:47:c2:8d:a0:19:f4:b8:d6:bb:ee:c2:5e:
                    b3:63:6e:f9:dc:c6:a6:a8:c8:e6:33:b0:40:3a:9b:
                    83:95:a3:ca:a5:fc:ef:f0:7b:5e:97:3f:44:33:af:
                    88:0a:ad:3e:dd:e5:af:fa:27:4d:90:30:0f:11:fa:
                    3c:25:1a:70:bb:b2:d3:48:6b:68:3a:cf:63:3b:27:
                    e6:9d:61:0a:0d:66:9d:3b:53:05:01:a1:01:6f:9e:
                    5c:9a:80:55:ee:03:2c:e2:69:f3:4d:8c:11:f4:78:
                    74:28:4d:18:93:45:55:38:ae:31:f9:3e:98:c6:3c:
                    6a:2c:87:00:28:80:7c:54:b3:21:86:74:2d:bf:cf:
                    34:52:28:fa:b5:b6:03:32:17:01:5b:6e:da:ca:36:
                    a3:bd:93:2d:d2:d2:e4:20:f4:46:4d:97:ed:3b:68:
                    8f:aa:5c:5d:dc:b1:9e:13:56:43:56:d6:a6:1d:cd:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:59:B5:5C:B0:0D:0B:21:1E:95:86:36:EF:02:35:8F:49:4A:3C
            X509v3 Authority Key Identifier:
                keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2d:a0:0f:7e:47:92:8b:dc:49:b3:67:ce:1d:ae:f0:31:e0:
         88:d3:fb:a1:c2:3b:40:e9:3e:b3:55:90:54:c4:09:30:7b:b7:
         c7:b9:2d:60:d6:d8:39:86:ab:7b:97:59:a6:e4:fb:1e:2e:33:
         85:44:7f:5d:44:d4:db:72:76:f5:c8:25:4c:23:a7:4a:4a:5b:
         22:28:76:22:70:ed:99:47:60:89:8f:96:61:f4:ab:b0:47:76:
         ba:97:00:de:ad:43:1c:fe:a4:ba:34:dd:8b:9f:cf:ab:67:00:
         28:ac:95:26:b1:b6:fe:ac:a2:9d:ec:9a:7a:fb:41:3e:93:6f:
         4c:28:e1:7f:eb:c7:8d:e0:35:58:0e:2b:cd:26:d8:3b:f7:51:
         9a:fe:8e:96:68:62:b1:10:34:19:0a:4d:b6:5d:6a:ae:fc:f6:
         26:3e:0e:81:40:5a:1f:a1:76:83:87:ff:92:7c:77:02:1e:6c:
         f5:1f:30:c3:e5:94:0e:81:23:a5:35:48:07:47:1d:8b:04:a3:
         1e:eb:6b:48:93:89:41:85:63:86:87:1f:9c:12:fd:04:39:bd:
         84:3f:f3:8a:c2:2e:6a:07:3c:4b:52:e3:61:66:27:8c:84:01:
         99:7c:20:56:eb:15:4b:2e:89:27:6d:b0:e5:0d:13:b1:91:05:
         f4:b4:6a:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx
MTJBODgzNDUwHhcNMjQxMTIzMDQxOTA3WhcNMjQxMTMwMDQxOTA3WjAYMRYwFAYD
VQQDEw02NzQxNTdiYy0xMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbhh1nEGvKeVVT+bBLf63q3oDlis6elmQ/u31X0UntRbeQCOdbJQ/3ZE807Z
0Todfx388KurZrAS6ks8RLyWibR1tJUGt9lm8LjhICZHwo2gGfS41rvuwl6zY275
3MamqMjmM7BAOpuDlaPKpfzv8Htelz9EM6+ICq0+3eWv+idNkDAPEfo8JRpwu7LT
SGtoOs9jOyfmnWEKDWadO1MFAaEBb55cmoBV7gMs4mnzTYwR9Hh0KE0Yk0VVOK4x
+T6YxjxqLIcAKIB8VLMhhnQtv880Uij6tbYDMhcBW27ayjajvZMt0tLkIPRGTZft
O2iPqlxd3LGeE1ZDVtamHc0UhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjiWbVc
sA0LIR6VhjbvAjWPSUo8MB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1
NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj
cHNfVklqYnNFS0VSS29nMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJLaAPfkeSi9xJs2fOHa7wMeCI0/uhwjtA6T6zVZBUxAkwe7fHuS1g
1tg5hqt7l1mm5PseLjOFRH9dRNTbcnb1yCVMI6dKSlsiKHYicO2ZR2CJj5Zh9Kuw
R3a6lwDerUMc/qS6NN2Ln8+rZwAorJUmsbb+rKKd7Jp6+0E+k29MKOF/68eN4DVY
DivNJtg791Ga/o6WaGKxEDQZCk22XWqu/PYmPg6BQFofoXaDh/+SfHcCHmz1HzDD
5ZQOgSOlNUgHRx2LBKMe62tIk4lBhWOGhx+cEv0EOb2EP/OKwi5qBzxLUuNhZieM
hAGZfCBW6xVLLoknbbDlDROxkQX0tGqu
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org