Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File:                     Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier:          NuyORlkAAyDVl+UQyS1iAUPo49KLoF8EY2G1cvPtwBs=
Subject key identifier:   BA:0E:30:EE:56:03:2C:6E:88:03:EA:A3:1F:16:F2:7D:F8:2D:09:EF
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer:       /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number:          50
Signing time:             Thu 21 Nov 2024 05:18:54 +0000
Manifest this update:     Thu 21 Nov 2024 05:18:54 +0000
Manifest next update:     Thu 28 Nov 2024 05:18:54 +0000
Files and hashes:         1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: XTp1GtR6xg6u+qqZhcQ7zkeruXnlQ9T2JtnD1EPS7AQ=)
                          2: 19DD1D64320F11EF85003478C4F9AE02.roa (hash: kwZ3vbIqcZVhBnfxvzCA1Qx5wPtS+rnm/GCZ9YWxN9g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
        Validity
            Not Before: Nov 21 05:18:54 2024 GMT
            Not After : Nov 28 05:18:54 2024 GMT
        Subject: CN=673ec2be-3bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:4f:cb:36:26:84:1e:25:d0:4e:f9:96:3a:
                    18:91:5a:48:66:51:26:ac:e4:46:c1:cd:9e:2f:1a:
                    e4:99:30:7f:64:06:63:01:5f:f5:10:b7:f6:29:4c:
                    5d:fb:75:2c:94:de:83:df:72:46:2a:b3:45:da:2d:
                    cd:85:ff:16:cb:ae:0d:ad:d6:08:e1:7a:4b:19:fb:
                    cc:69:39:fd:7f:83:3c:c8:4f:fe:ae:5a:a3:07:c0:
                    e7:67:97:b9:bd:95:63:85:94:ed:5a:be:fa:f1:89:
                    b1:99:d8:76:c3:4d:71:9e:d0:2e:ea:cc:fc:a2:95:
                    6d:8d:cd:bb:6d:1a:77:ee:f7:d9:41:dd:36:66:8d:
                    e0:e4:4d:ec:ed:db:05:cb:b6:bb:60:e1:7e:6a:eb:
                    e5:36:96:66:88:19:b8:94:04:f7:71:e8:8e:25:23:
                    5f:04:d2:5e:e0:86:e9:aa:7d:00:72:9d:7d:04:9f:
                    7c:f2:3e:2c:ad:89:d4:6c:bc:cf:5d:93:aa:4b:23:
                    2a:3d:4d:1c:91:ba:1f:bb:a5:ee:23:e6:bf:b5:e3:
                    82:93:47:13:27:71:1d:ca:c3:4d:7c:05:b6:d1:35:
                    9a:a5:a8:65:b5:b8:97:50:a7:1c:6e:13:f9:ac:24:
                    a6:37:54:62:82:41:ce:37:d7:13:f8:78:f2:17:e7:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0E:30:EE:56:03:2C:6E:88:03:EA:A3:1F:16:F2:7D:F8:2D:09:EF
            X509v3 Authority Key Identifier:
                keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:5a:51:74:18:3b:09:be:07:65:7f:36:54:d0:e9:1f:fd:
         cb:89:cc:96:f3:c6:c7:8f:f8:25:b9:6d:da:f3:5e:b7:70:8d:
         bd:b3:fd:84:ee:47:54:d4:5b:44:c3:f1:6c:0d:88:d1:2d:15:
         c8:b2:95:dd:99:bb:58:f2:5d:a6:b1:0f:eb:9b:ce:25:ce:1e:
         9c:41:ab:46:10:b7:c3:dd:43:ef:69:9c:e0:ad:dd:1e:6d:bc:
         81:6e:4b:17:c7:e8:bd:39:b2:77:a3:ee:4c:4c:f3:aa:d5:06:
         80:6a:ce:91:5f:ec:18:6e:02:f8:3e:75:bf:f5:db:f9:5c:d0:
         30:4d:da:ff:6e:ad:95:76:8f:14:19:07:4f:ef:15:7b:11:bc:
         5b:1c:04:80:d6:07:60:25:c7:65:bb:2d:0c:ba:2d:c9:d3:9e:
         09:cd:9d:d3:bf:f7:fd:f8:5e:ce:31:ce:ce:8c:47:71:99:dd:
         d8:cf:6f:93:64:6e:dc:94:44:85:b7:c2:6d:5b:cb:ee:7c:64:
         15:23:44:2f:d3:63:e2:4f:66:81:01:07:c9:03:b9:c2:85:da:
         a2:04:43:d3:be:a0:af:6f:9a:68:79:aa:bd:00:19:df:5a:aa:
         d9:1f:6d:d0:cf:84:67:c6:73:f4:fd:95:50:b8:43:56:63:de:
         9c:2a:84:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDZDNzExMC8GA1UEBRMoMjI5RUU2Q0ZCNzk1ODRCQTIzMTBBQ0NFNDUyODM4RjdB
NDhBNTAxRTAeFw0yNDExMjEwNTE4NTRaFw0yNDExMjgwNTE4NTRaMBgxFjAUBgNV
BAMTDTY3M2VjMmJlLTNiYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeKk/LNiaEHiXQTvmWOhiRWkhmUSas5EbBzZ4vGuSZMH9kBmMBX/UQt/YpTF37
dSyU3oPfckYqs0XaLc2F/xbLrg2t1gjheksZ+8xpOf1/gzzIT/6uWqMHwOdnl7m9
lWOFlO1avvrxibGZ2HbDTXGe0C7qzPyilW2NzbttGnfu99lB3TZmjeDkTezt2wXL
trtg4X5q6+U2lmaIGbiUBPdx6I4lI18E0l7ghumqfQBynX0En3zyPiytidRsvM9d
k6pLIyo9TRyRuh+7pe4j5r+144KTRxMncR3Kw018BbbRNZqlqGW1uJdQpxxuE/ms
JKY3VGKCQc431xP4ePIX5+inAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUug4w7lYD
LG6IA+qjHxbyffgtCe8wHwYDVR0jBBgwFoAUIp7mz7eVhLojEKzORSg496SKUB4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNkM3LzZGMDNENjMwMzIw
RTExRUZCNkUwREE3NkM0RjlBRTAyL0lwN216N2VWaExvakVLek9SU2c0OTZTS1VC
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSXA3bXo3ZVZoTG9qRUt6T1JTZzQ5NlNLVUI0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
NkM3LzZGMDNENjMwMzIwRTExRUZCNkUwREE3NkM0RjlBRTAyL0lwN216N2VWaExv
akVLek9SU2c0OTZTS1VCNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIz9WlF0GDsJvgdlfzZU0Okf/cuJzJbzxseP+CW5bdrzXrdwjb2z/YTu
R1TUW0TD8WwNiNEtFciyld2Zu1jyXaaxD+ubziXOHpxBq0YQt8PdQ+9pnOCt3R5t
vIFuSxfH6L05snej7kxM86rVBoBqzpFf7BhuAvg+db/12/lc0DBN2v9urZV2jxQZ
B0/vFXsRvFscBIDWB2Alx2W7LQy6LcnTngnNndO/9/34Xs4xzs6MR3GZ3djPb5Nk
btyURIW3wm1by+58ZBUjRC/TY+JPZoEBB8kDucKF2qIEQ9O+oK9vmmh5qr0AGd9a
qtkfbdDPhGfGc/T9lVC4Q1Zj3pwqhDQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:39:59 2024 by rpki-client on console-ams.rpki-client.org