Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File:                     weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier:          0T9y3a5TxVI9ZyoVCWifTSbZkJOoBxuinZlOAqXgwyI=
Subject key identifier:   85:D5:14:49:19:F5:04:3F:1B:52:0B:00:EB:F8:8B:DE:88:8C:84:D0
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       28A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number:          2873
Signing time:             Wed 20 Nov 2024 15:36:44 +0000
Manifest this update:     Wed 20 Nov 2024 15:36:43 +0000
Manifest next update:     Wed 27 Nov 2024 15:36:43 +0000
Files and hashes:         1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: DEFWSPhPBaTw62yB1j4k1kvXDz/ebVC+M7kb82SIMi0=)
                          2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: plj7gbTh/uibVdgorTOsQNlKAa4siZFr/FDFGAoOHVQ=)
                          3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: ewBco8gqchgAZcgf6OAk2yT9BaA4NqBATGQ+Jh1fnx8=)
                          4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: lLi+QxihnBbQertxygAhuI6GY2s+HazcxNAIxA9mxbE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10403 (0x28a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Nov 20 15:36:43 2024 GMT
            Not After : Nov 27 15:36:43 2024 GMT
        Subject: CN=673e020c-f526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:66:6b:65:1b:7e:a7:4b:22:92:46:16:7b:95:
                    1e:33:20:65:9b:ba:75:a1:7f:7d:cb:b6:f1:2f:e4:
                    1d:4c:0a:41:ef:ad:05:65:7a:0b:45:f3:49:ad:ef:
                    d7:cb:09:cb:9a:80:01:42:12:4b:a3:9d:ae:7f:5a:
                    e9:11:62:89:06:30:1a:71:fb:6f:c3:eb:ee:ee:4e:
                    95:1f:eb:63:08:a7:8c:ed:58:d9:06:d2:dd:8b:70:
                    05:21:f9:96:df:75:48:99:df:66:c9:9c:f9:ea:1b:
                    ee:f5:5c:c1:a4:76:1c:40:48:c7:59:ec:aa:70:9f:
                    72:34:f7:a4:b7:84:0e:8a:30:86:23:0c:cd:db:60:
                    4b:05:c1:69:47:6c:45:13:04:1d:87:a2:9e:ab:9d:
                    d4:e6:7e:dd:27:ac:f8:75:5b:f1:90:6a:58:09:69:
                    87:c3:e0:fe:21:65:60:98:7e:f5:76:81:2e:89:72:
                    b0:46:2f:a0:5d:26:51:5e:42:64:9b:61:17:6f:4d:
                    e2:45:1b:ee:ff:a8:89:63:85:b2:3d:f8:07:ae:1f:
                    99:b8:21:ed:ab:e2:77:15:9d:0a:bd:84:25:60:89:
                    b1:fb:ba:ea:e9:f5:46:7c:35:49:5a:75:d6:fc:5f:
                    6a:28:88:41:0c:8d:9b:ff:4f:e7:d1:71:8a:30:3a:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:14:49:19:F5:04:3F:1B:52:0B:00:EB:F8:8B:DE:88:8C:84:D0
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:9d:60:e8:34:14:22:aa:ab:43:10:c1:36:7a:6d:fa:c4:
         cf:c3:b3:52:09:4a:4a:ca:56:b5:32:b5:b9:a2:7a:0f:05:bb:
         fe:10:9b:18:c0:81:ef:65:6d:cd:73:34:8a:39:9b:a2:68:95:
         ae:fb:b8:4b:b8:6f:70:c5:c7:01:af:15:cf:4d:27:eb:a7:8b:
         3c:d6:9e:e7:cd:ec:e2:bf:11:25:36:81:2f:45:01:f3:f3:a9:
         cf:d6:ac:ed:bb:8b:9f:ab:d1:54:af:39:f3:b3:de:ce:82:29:
         50:3d:f5:46:5c:ad:07:1a:31:d4:2c:02:5c:7a:d7:64:b1:d2:
         44:95:d1:d6:5b:55:12:b0:73:30:2d:74:57:8f:e0:29:12:7c:
         55:44:c4:30:7e:7f:ec:02:87:7c:d1:18:69:f4:b8:f8:59:64:
         6b:96:1a:02:fb:66:fa:81:13:89:33:24:1f:41:f3:81:a5:05:
         11:ed:3d:06:7c:d5:a2:90:b8:98:fa:54:08:74:48:46:6c:4c:
         c2:70:90:15:64:8a:8e:55:87:ff:40:25:0b:da:6f:32:df:cd:
         9e:ca:97:6e:d1:a1:fd:cd:60:ee:d4:38:4e:89:2e:90:3f:a1:
         c7:ab:11:f6:9c:41:86:15:38:5b:9a:01:06:15:5a:b8:cc:75:
         74:a3:5a:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjQxMTIwMTUzNjQzWhcNMjQxMTI3MTUzNjQzWjAYMRYwFAYD
VQQDEw02NzNlMDIwYy1mNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4WZrZRt+p0sikkYWe5UeMyBlm7p1oX99y7bxL+QdTApB760FZXoLRfNJre/X
ywnLmoABQhJLo52uf1rpEWKJBjAacftvw+vu7k6VH+tjCKeM7VjZBtLdi3AFIfmW
33VImd9myZz56hvu9VzBpHYcQEjHWeyqcJ9yNPekt4QOijCGIwzN22BLBcFpR2xF
EwQdh6Keq53U5n7dJ6z4dVvxkGpYCWmHw+D+IWVgmH71doEuiXKwRi+gXSZRXkJk
m2EXb03iRRvu/6iJY4WyPfgHrh+ZuCHtq+J3FZ0KvYQlYImx+7rq6fVGfDVJWnXW
/F9qKIhBDI2b/0/n0XGKMDrtkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXVFEkZ
9QQ/G1ILAOv4i96IjITQMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f
dkJoM0d1eUxZQUpuSTdZSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPJJ1g6DQUIqqrQxDBNnpt+sTPw7NSCUpKyla1MrW5onoPBbv+EJsY
wIHvZW3NczSKOZuiaJWu+7hLuG9wxccBrxXPTSfrp4s81p7nzezivxElNoEvRQHz
86nP1qztu4ufq9FUrznzs97OgilQPfVGXK0HGjHULAJcetdksdJEldHWW1USsHMw
LXRXj+ApEnxVRMQwfn/sAod80Rhp9Lj4WWRrlhoC+2b6gROJMyQfQfOBpQUR7T0G
fNWikLiY+lQIdEhGbEzCcJAVZIqOVYf/QCUL2m8y382eypdu0aH9zWDu1DhOiS6Q
P6HHqxH2nEGGFThbmgEGFVq4zHV0o1q7
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:43 2024 by rpki-client on console-fra.rpki-client.org