Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File:                     5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier:          wvg6aoLQt+e7lsAK0F/IMCgGhpvh+NLjyz3xSikdzro=
Subject key identifier:   D4:75:9E:39:90:DC:FF:81:08:F0:59:2C:7E:92:E1:FC:E0:F5:AD:6B
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer:       /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial:       133A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number:          131C
Signing time:             Fri 22 Nov 2024 17:02:35 +0000
Manifest this update:     Fri 22 Nov 2024 17:02:35 +0000
Manifest next update:     Fri 29 Nov 2024 17:02:35 +0000
Files and hashes:         1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: SeXNQMC3T3Ur5M3dJzrBjJ8RWFixpIxzaHWjrrHHtmM=)
                          2: D294AC20A65811EE9811D15CC4F9AE02.roa (hash: iaX7BsFQmWrtql3cTAb4OcfkPRmO9Uu8E6rcRU5NC/o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4922 (0x133a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
        Validity
            Not Before: Nov 22 17:02:35 2024 GMT
            Not After : Nov 29 17:02:35 2024 GMT
        Subject: CN=6740b92b-62dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:47:39:5d:c2:b0:79:58:a6:0e:22:ba:8f:
                    f4:09:11:8c:65:79:0c:db:15:0f:c8:f1:d4:bd:46:
                    f5:a9:35:ea:c7:3d:d8:03:0f:2a:64:48:95:64:98:
                    eb:11:50:c4:5f:ec:fe:d1:5c:07:ad:32:a6:53:71:
                    99:c9:84:be:86:c0:5f:b2:c5:44:9c:6d:00:35:49:
                    a1:e7:bd:6e:c0:3e:38:f6:7f:0b:40:88:27:b7:94:
                    3b:fb:cc:62:eb:d6:36:2f:9d:b8:c6:4c:f9:6a:b3:
                    8e:22:d7:e7:56:3f:4e:14:81:32:a9:fa:ca:db:9d:
                    d5:6f:c7:f5:76:32:bf:ee:6b:06:f1:d5:e5:9b:1e:
                    a4:2e:90:f4:45:dc:16:0a:ed:bf:1c:4e:64:a2:c2:
                    b3:96:e2:64:f4:99:83:c4:51:1d:95:67:96:ae:5e:
                    98:8b:d4:3e:62:d5:5f:5d:1b:9c:c2:00:4a:70:52:
                    ba:4a:51:57:77:fd:f1:2f:a9:81:88:c0:16:c1:db:
                    70:e5:87:90:05:a5:b7:4a:66:b2:10:77:18:07:28:
                    22:66:ee:3a:8d:17:ea:1e:bd:a8:21:a7:42:b2:98:
                    0e:98:e5:2f:d3:93:3a:80:34:d2:d5:39:8b:b7:be:
                    6d:06:d7:fc:f6:32:56:3c:67:a4:d1:13:4b:5d:8f:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:9E:39:90:DC:FF:81:08:F0:59:2C:7E:92:E1:FC:E0:F5:AD:6B
            X509v3 Authority Key Identifier:
                keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3c:ef:0d:d3:5e:87:f8:21:99:79:cd:bd:c3:b4:21:3c:a2:
         e2:fc:c7:6b:59:47:5c:be:f8:8b:07:46:30:ad:db:e8:6b:fc:
         5e:c2:0a:26:59:8b:3f:a6:6a:54:fc:da:0e:a5:5a:77:53:0e:
         a0:5d:bf:2f:6f:32:30:16:6a:64:c5:59:3a:73:96:e4:2d:4b:
         cc:65:8c:ba:4d:8e:88:96:d9:ba:2b:07:72:87:e7:f2:3f:f1:
         8b:30:b7:8f:48:39:8a:8d:98:c0:ca:88:69:69:ef:ca:cb:34:
         e9:01:f4:35:9e:7f:e8:af:0d:5b:f7:7f:3b:a1:e8:41:88:89:
         23:46:e7:bc:86:28:f1:f5:0f:0e:82:5d:2b:b6:73:a1:43:dd:
         3a:b9:19:e7:0e:66:42:c6:42:93:8a:17:b9:bd:77:24:22:bb:
         c5:83:f5:51:24:62:97:26:dd:e4:e5:b6:8b:5d:c9:94:f9:3f:
         54:0b:20:6b:7c:eb:12:7e:f0:02:0c:fa:33:75:2c:89:50:6f:
         65:b5:c7:b0:6e:9b:74:2d:58:4b:51:e0:13:4b:3f:82:8d:64:
         1f:6b:a0:75:e8:e6:cf:86:fd:72:23:b3:39:ab:6e:e5:8c:08:
         37:17:34:b5:d2:d7:2d:44:64:7b:d4:be:d3:68:4f:8c:27:0c:
         e2:35:e4:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw
MUYyRTczNzkwHhcNMjQxMTIyMTcwMjM1WhcNMjQxMTI5MTcwMjM1WjAYMRYwFAYD
VQQDEw02NzQwYjkyYi02MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYVHOV3CsHlYpg4iuo/0CRGMZXkM2xUPyPHUvUb1qTXqxz3YAw8qZEiVZJjr
EVDEX+z+0VwHrTKmU3GZyYS+hsBfssVEnG0ANUmh571uwD449n8LQIgnt5Q7+8xi
69Y2L524xkz5arOOItfnVj9OFIEyqfrK253Vb8f1djK/7msG8dXlmx6kLpD0RdwW
Cu2/HE5kosKzluJk9JmDxFEdlWeWrl6Yi9Q+YtVfXRucwgBKcFK6SlFXd/3xL6mB
iMAWwdtw5YeQBaW3SmayEHcYBygiZu46jRfqHr2oIadCspgOmOUv05M6gDTS1TmL
t75tBtf89jJWPGek0RNLXY+3gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR1njmQ
3P+BCPBZLH6S4fzg9a1rMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy
M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1
aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+PO8N016H+CGZec29w7QhPKLi/MdrWUdcvviLB0Ywrdvoa/xewgom
WYs/pmpU/NoOpVp3Uw6gXb8vbzIwFmpkxVk6c5bkLUvMZYy6TY6Iltm6Kwdyh+fy
P/GLMLePSDmKjZjAyohpae/KyzTpAfQ1nn/orw1b9387oehBiIkjRue8hijx9Q8O
gl0rtnOhQ906uRnnDmZCxkKTihe5vXckIrvFg/VRJGKXJt3k5baLXcmU+T9UCyBr
fOsSfvACDPozdSyJUG9ltcewbpt0LVhLUeATSz+CjWQfa6B16ObPhv1yI7M5q27l
jAg3FzS10tctRGR71L7TaE+MJwziNeT7
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org