Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File:                     7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier:          etbavNvCdlQVWvI/jz8nVv4oEN/Xz5Lm61kDrgA2K28=
Subject key identifier:   2D:B0:C1:0B:FF:D9:EC:FD:DE:56:C4:50:F7:EE:DE:5F:02:C1:63:6E
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer:       /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial:       043F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number:          043A
Signing time:             Fri 22 Nov 2024 23:50:12 +0000
Manifest this update:     Fri 22 Nov 2024 23:50:11 +0000
Manifest next update:     Fri 29 Nov 2024 23:50:11 +0000
Files and hashes:         1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: T68wKrZAahXDb4DibYa7PQ+PxFxFqqqkWH3QeC4IWZk=)
                          2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
                          rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
        Validity
            Not Before: Nov 22 23:50:11 2024 GMT
            Not After : Nov 29 23:50:11 2024 GMT
        Subject: CN=674118b4-c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:56:f0:18:61:fb:78:25:c5:32:da:6a:26:
                    84:52:88:da:70:67:f1:77:6c:38:40:f1:34:9d:12:
                    41:60:c0:70:86:25:a0:f0:58:08:f7:ff:de:6c:cc:
                    87:c4:2c:25:e9:d3:fa:13:19:a7:df:9f:c3:cf:26:
                    a4:38:53:b5:cd:02:29:45:d8:9e:e0:7e:6b:f0:29:
                    e9:55:1c:7d:f1:c7:f1:0f:f0:08:f3:39:68:1e:e5:
                    92:13:57:10:c8:90:66:5f:e6:e2:44:0f:58:8f:de:
                    78:ba:99:62:cf:19:15:24:5f:6a:b6:f0:ec:d3:e5:
                    3c:40:00:15:fa:4d:56:45:2b:b0:43:14:a8:e1:bf:
                    12:e3:af:78:28:dd:f5:ce:fa:9b:cb:43:69:69:bb:
                    0d:2d:8c:9b:5f:33:30:ee:3b:de:9a:89:de:dc:ce:
                    17:4e:f7:cc:b4:3b:ff:f6:93:2a:6c:2d:bb:3d:5c:
                    68:e7:05:7c:71:e1:02:9d:e8:5d:d2:11:e4:1d:4b:
                    cb:91:6b:9e:4e:6b:b6:5c:e2:6a:f5:bc:27:ac:5d:
                    b2:f4:2b:c0:09:bb:64:50:c4:e2:4f:02:d0:40:e1:
                    fe:24:51:81:42:9a:4b:b9:83:24:d1:67:e3:ee:b4:
                    7a:a1:38:e1:e8:d5:c0:5b:8e:66:2f:ae:4f:71:6a:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B0:C1:0B:FF:D9:EC:FD:DE:56:C4:50:F7:EE:DE:5F:02:C1:63:6E
            X509v3 Authority Key Identifier:
                keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:49:5a:f8:8f:d1:1c:b9:e1:2d:f2:3d:d7:c1:f5:94:2e:
         0f:1e:20:cd:d1:4c:26:fd:6d:49:a3:e2:76:ec:35:33:3d:fd:
         ce:ed:02:07:4a:1a:22:07:f8:12:f8:fb:8d:6d:0c:1a:68:ba:
         e8:38:3e:9c:dc:9a:33:61:42:14:d3:60:cf:b8:68:a4:d8:ef:
         74:68:ae:7d:6f:88:45:40:72:be:3b:7a:45:4d:5d:5c:dd:47:
         8d:b1:8d:7e:7a:47:fd:53:ba:09:9f:2d:9a:07:79:a3:49:1b:
         d1:93:a1:91:f5:bc:7a:1b:da:08:57:f6:ed:24:27:97:a3:31:
         fd:4b:a1:cd:54:d2:07:50:53:5d:73:65:02:d7:af:62:13:8d:
         d8:8b:ce:24:3b:ae:87:a6:9b:f9:82:d2:a6:b1:e7:7c:2a:a1:
         24:4f:04:3a:3d:65:86:7a:98:f7:0a:28:c5:26:07:07:e7:ff:
         83:97:bd:ac:a7:0a:0a:cf:1d:b3:94:56:ad:de:74:bd:ff:18:
         e0:45:e9:8f:18:c6:74:95:2f:7f:c2:66:f3:65:35:f9:38:6c:
         4a:e9:a6:04:f9:7c:3f:74:38:7c:3d:bf:02:cf:10:28:c3:13:
         ec:57:f5:27:5c:d0:ba:19:29:62:ac:5d:f5:73:06:f9:51:06:
         ac:62:e8:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw
QUUxRDAwNDcwHhcNMjQxMTIyMjM1MDExWhcNMjQxMTI5MjM1MDExWjAYMRYwFAYD
VQQDEw02NzQxMThiNC1jMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzydW8Bhh+3glxTLaaiaEUojacGfxd2w4QPE0nRJBYMBwhiWg8FgI9//ebMyH
xCwl6dP6Exmn35/DzyakOFO1zQIpRdie4H5r8CnpVRx98cfxD/AI8zloHuWSE1cQ
yJBmX+biRA9Yj954uplizxkVJF9qtvDs0+U8QAAV+k1WRSuwQxSo4b8S4694KN31
zvqby0NpabsNLYybXzMw7jvemone3M4XTvfMtDv/9pMqbC27PVxo5wV8ceECnehd
0hHkHUvLkWueTmu2XOJq9bwnrF2y9CvACbtkUMTiTwLQQOH+JFGBQppLuYMk0Wfj
7rR6oTjh6NXAW45mL65PcWoElwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2wwQv/
2ez93lbEUPfu3l8CwWNuMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3
OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS
UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCa0la+I/RHLnhLfI918H1lC4PHiDN0Uwm/W1Jo+J27DUzPf3O7QIH
ShoiB/gS+PuNbQwaaLroOD6c3JozYUIU02DPuGik2O90aK59b4hFQHK+O3pFTV1c
3UeNsY1+ekf9U7oJny2aB3mjSRvRk6GR9bx6G9oIV/btJCeXozH9S6HNVNIHUFNd
c2UC169iE43Yi84kO66Hppv5gtKmsed8KqEkTwQ6PWWGepj3CijFJgcH5/+Dl72s
pwoKzx2zlFat3nS9/xjgRemPGMZ0lS9/wmbzZTX5OGxK6aYE+Xw/dDh8Pb8CzxAo
wxPsV/UnXNC6GSlirF31cwb5UQasYuht
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org