Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File:                     cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier:          UE1Qhn5ENAlBvmGohreDXnjTK0ByFmI7dBDuparWyZ8=
Subject key identifier:   AD:B7:7E:AE:0F:A8:00:D0:21:C7:D5:02:65:C2:E0:46:8F:4E:80:53
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer:       /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number:          0761
Signing time:             Fri 22 Nov 2024 21:01:15 +0000
Manifest this update:     Fri 22 Nov 2024 21:01:15 +0000
Manifest next update:     Fri 29 Nov 2024 21:01:15 +0000
Files and hashes:         1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: EhmXbpJ5EAdPdGRKQJkdSOwYKN4UxtjalNZoQcJnddk=)
                          2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=)
                          3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
                          rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
        Validity
            Not Before: Nov 22 21:01:15 2024 GMT
            Not After : Nov 29 21:01:15 2024 GMT
        Subject: CN=6740f11b-4bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:0a:52:ef:e9:b2:72:bf:ec:dd:71:f9:86:
                    89:8f:bb:b7:1d:dc:0b:4c:78:5d:0e:e3:0c:92:5e:
                    26:44:a8:07:dd:b3:2a:f3:62:66:d9:ab:ce:3c:de:
                    e5:3f:25:16:72:bf:71:e3:c6:2e:ca:39:6e:24:f4:
                    19:0e:89:9b:ad:0c:23:8a:36:c9:d8:03:00:b0:ed:
                    9e:f1:7d:36:5c:ef:12:4f:d5:30:c8:be:f6:fd:54:
                    b6:cd:61:ef:8d:c1:85:2c:71:25:d8:c7:e4:64:25:
                    6e:48:a6:25:d6:55:ad:a4:ca:4d:6c:bc:a9:b1:f9:
                    08:21:19:8d:05:18:7b:35:ee:ee:c8:de:47:58:38:
                    04:9b:94:7b:e9:87:07:ea:2b:49:4e:19:2f:62:e1:
                    8d:c0:88:14:42:39:4d:e5:98:a3:50:11:43:a9:6b:
                    f7:d4:99:e4:66:d7:7c:24:c6:8e:af:01:2a:dd:3a:
                    14:57:82:cb:04:0d:fc:ec:15:a5:37:c3:8d:fe:d1:
                    48:77:c5:60:24:bf:54:f9:11:82:72:a4:fa:21:34:
                    75:14:b2:6c:33:5a:c4:fb:43:2c:06:ae:d3:dc:34:
                    f2:98:cf:6c:1b:22:ab:f2:1c:91:e9:7e:2b:f2:05:
                    63:1b:7b:35:46:90:cd:22:3c:77:54:cd:df:31:90:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B7:7E:AE:0F:A8:00:D0:21:C7:D5:02:65:C2:E0:46:8F:4E:80:53
            X509v3 Authority Key Identifier:
                keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2e:8d:f3:1a:0a:22:a3:b6:58:93:8b:64:5d:68:0c:1b:27:
         65:db:3d:5b:2d:f7:70:bf:af:b3:81:b3:e2:ee:56:e7:e8:05:
         a8:c8:dc:1f:5d:6f:aa:ae:93:14:00:ca:11:a8:b6:1e:3b:bd:
         2f:2b:a4:d5:d2:1a:ee:15:d4:f3:74:d8:f9:01:d4:df:32:fd:
         23:f7:9a:d1:b6:44:c5:1b:28:cd:ea:6b:19:f7:ff:43:07:6d:
         e6:59:9d:4d:e2:39:3f:01:6f:ad:3c:dc:cb:0c:f1:0f:75:bc:
         f2:cb:5c:2d:f2:15:de:40:0f:21:45:7c:3f:3b:95:08:d0:0f:
         b4:2f:1b:6a:3b:80:1d:96:35:79:af:78:3c:5a:b0:09:90:63:
         e0:a4:93:42:e7:50:df:c7:23:6d:91:42:71:82:fd:0d:d3:0e:
         05:4b:63:3e:cc:42:ff:5a:2a:8d:40:d0:a9:a8:69:d4:00:48:
         df:9a:1d:33:17:88:b5:5a:f9:92:f4:b5:ff:47:eb:8c:3a:cd:
         f2:f1:6f:1c:27:1e:ee:c3:f4:52:22:61:b9:11:d9:fa:56:ca:
         76:94:c4:3c:02:b8:35:80:4b:ac:d3:fb:d7:2c:28:18:04:0b:
         34:de:e5:26:1e:64:e4:90:f5:7f:9f:f0:93:f4:5b:9b:b7:1c:
         16:81:9a:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB
RENDNTdGMEQwHhcNMjQxMTIyMjEwMTE1WhcNMjQxMTI5MjEwMTE1WjAYMRYwFAYD
VQQDEw02NzQwZjExYi00YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNsKUu/psnK/7N1x+YaJj7u3HdwLTHhdDuMMkl4mRKgH3bMq82Jm2avOPN7l
PyUWcr9x48YuyjluJPQZDombrQwjijbJ2AMAsO2e8X02XO8ST9UwyL72/VS2zWHv
jcGFLHEl2MfkZCVuSKYl1lWtpMpNbLypsfkIIRmNBRh7Ne7uyN5HWDgEm5R76YcH
6itJThkvYuGNwIgUQjlN5ZijUBFDqWv31JnkZtd8JMaOrwEq3ToUV4LLBA387BWl
N8ON/tFId8VgJL9U+RGCcqT6ITR1FLJsM1rE+0MsBq7T3DTymM9sGyKr8hyR6X4r
8gVjG3s1RpDNIjx3VM3fMZAuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK23fq4P
qADQIcfVAmXC4EaPToBTMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3
QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI
ai1oRG9sUExCSUN0ekZmdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/Lo3zGgoio7ZYk4tkXWgMGydl2z1bLfdwv6+zgbPi7lbn6AWoyNwf
XW+qrpMUAMoRqLYeO70vK6TV0hruFdTzdNj5AdTfMv0j95rRtkTFGyjN6msZ9/9D
B23mWZ1N4jk/AW+tPNzLDPEPdbzyy1wt8hXeQA8hRXw/O5UI0A+0LxtqO4AdljV5
r3g8WrAJkGPgpJNC51DfxyNtkUJxgv0N0w4FS2M+zEL/WiqNQNCpqGnUAEjfmh0z
F4i1WvmS9LX/R+uMOs3y8W8cJx7uw/RSImG5Edn6Vsp2lMQ8Arg1gEus0/vXLCgY
BAs03uUmHmTkkPV/n/CT9FubtxwWgZrv
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org