Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
File:                     rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json)
Hash identifier:          ZC+tlT5uh/y8y9jfcXUFvwL9j97MkNjgdne2JOS7pYE=
Subject key identifier:   00:36:58:95:92:47:09:58:54:B8:7F:F5:D7:56:DB:B5:E5:33:46:80
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Certificate issuer:       /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
Manifest number:          65
Signing time:             Sat 23 Nov 2024 04:58:00 +0000
Manifest this update:     Sat 23 Nov 2024 04:57:59 +0000
Manifest next update:     Sat 30 Nov 2024 04:57:59 +0000
Files and hashes:         1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: E1aT0MyxBz2pQ854vYpfp1PIDAtf0D5Q9OyPLJ3VG7o=)
                          2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=)
                          3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
                          rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
        Validity
            Not Before: Nov 23 04:57:59 2024 GMT
            Not After : Nov 30 04:57:59 2024 GMT
        Subject: CN=674160d8-b096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:1e:07:fa:74:7b:59:00:52:d0:99:e1:06:
                    06:73:2a:19:95:ed:34:8f:62:cd:bb:24:04:9c:cc:
                    58:cc:4d:d0:7e:9c:74:76:be:a4:e5:7d:a0:21:8a:
                    84:42:7f:fa:a2:7d:c2:45:64:4a:5b:04:1b:61:6f:
                    05:27:a2:43:25:87:21:f4:a3:b1:3b:89:9f:c0:b3:
                    1f:ea:3f:78:93:8f:92:a2:96:f4:7a:2b:f2:57:8a:
                    88:ab:d7:bf:4b:d0:c4:7b:60:7d:a6:ac:d0:31:36:
                    8a:d3:6c:fc:df:2f:45:00:e5:3c:be:41:e5:50:ce:
                    f0:8a:5c:69:aa:56:c0:b9:93:9f:ed:5a:75:3f:fb:
                    8e:f3:df:90:ba:1b:cd:80:6f:ff:1b:5c:6a:48:38:
                    c9:70:89:99:44:8b:b5:ab:ff:82:d3:09:62:6d:6f:
                    f9:30:af:2d:51:88:f8:24:94:0f:48:7c:2d:fb:48:
                    8c:bc:9b:03:2e:97:14:5d:82:2c:1d:30:4d:58:c1:
                    d9:55:10:85:d8:02:d2:6b:cb:fe:e8:23:61:63:17:
                    28:01:b2:19:71:84:e9:64:7d:c0:fb:4f:65:04:08:
                    e9:b0:e8:4a:b1:44:42:aa:28:d4:de:31:05:25:29:
                    46:8f:9c:33:bb:bd:a8:44:a4:0b:ef:e3:9b:fd:ec:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:58:95:92:47:09:58:54:B8:7F:F5:D7:56:DB:B5:E5:33:46:80
            X509v3 Authority Key Identifier:
                keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:4c:bb:bd:f1:ae:bb:68:88:50:38:3b:d0:60:ed:5a:44:
         12:0e:35:a4:7d:6b:ca:2b:f7:23:df:e0:64:e1:3f:3e:9b:26:
         40:93:16:35:40:a8:9d:c4:b9:ac:c7:e9:9c:4b:31:e6:5d:f5:
         d8:75:26:ab:9b:85:fe:3d:d3:29:13:e0:7c:24:0e:f0:83:59:
         96:ee:97:ab:ba:f5:ae:52:f6:dd:3f:b5:a6:bd:cf:70:2d:a2:
         02:f1:06:67:77:fb:b9:5f:20:69:1f:2a:0c:a2:1d:8a:a6:9a:
         8e:4c:26:ad:92:fb:fc:40:3d:97:7f:1d:83:f7:a5:35:a3:da:
         fc:9e:7d:2f:03:d3:66:d6:25:69:ad:3a:e3:35:91:63:ee:95:
         6a:85:93:57:f6:08:78:0f:d2:82:f6:21:ea:4c:bd:b5:fd:66:
         3f:21:7a:24:3c:09:a7:09:2d:15:b5:18:cb:b7:70:f0:db:a8:
         ad:67:3c:b5:85:fe:30:9f:1f:52:a1:a7:7c:29:a5:93:c3:9d:
         fc:87:90:9a:7d:18:ba:c8:a5:ae:34:c3:95:4e:d1:07:cf:ac:
         14:7a:6e:1a:79:53:e2:b9:cb:c0:21:34:6e:f1:f8:3a:e1:63:
         da:b0:9d:db:8f:a9:fd:8b:48:56:51:cd:38:2b:9a:4a:0e:ba:
         e2:5f:f7:eb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QjZGQjExMC8GA1UEBRMoQUQyMzRFM0YxRUJCQURBRDAxOUZFMDlBRkZGNzBFODA3
NUFGREUxNzAeFw0yNDExMjMwNDU3NTlaFw0yNDExMzAwNDU3NTlaMBgxFjAUBgNV
BAMTDTY3NDE2MGQ4LWIwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDALB4H+nR7WQBS0JnhBgZzKhmV7TSPYs27JASczFjMTdB+nHR2vqTlfaAhioRC
f/qifcJFZEpbBBthbwUnokMlhyH0o7E7iZ/Asx/qP3iTj5KilvR6K/JXioir179L
0MR7YH2mrNAxNorTbPzfL0UA5Ty+QeVQzvCKXGmqVsC5k5/tWnU/+47z35C6G82A
b/8bXGpIOMlwiZlEi7Wr/4LTCWJtb/kwry1RiPgklA9IfC37SIy8mwMulxRdgiwd
ME1YwdlVEIXYAtJry/7oI2FjFygBshlxhOlkfcD7T2UECOmw6EqxREKqKNTeMQUl
KUaPnDO7vahEpAvv45v97GJhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUADZYlZJH
CVhUuH/111bbteUzRoAwHwYDVR0jBBgwFoAUrSNOPx67ra0Bn+Ca//cOgHWv3hcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNkZCL0Q5Q0M5RURFMTFG
NzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNo
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvclNOT1B4NjdyYTBCbi1DYV9fY09nSFd2M2hjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC
NkZCL0Q5Q0M5RURFMTFGNzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEw
Qm4tQ2FfX2NPZ0hXdjNoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJoDTLu98a67aIhQODvQYO1aRBIONaR9a8or9yPf4GThPz6bJkCTFjVA
qJ3EuazH6ZxLMeZd9dh1Jqubhf490ykT4HwkDvCDWZbul6u69a5S9t0/taa9z3At
ogLxBmd3+7lfIGkfKgyiHYqmmo5MJq2S+/xAPZd/HYP3pTWj2vyefS8D02bWJWmt
OuM1kWPulWqFk1f2CHgP0oL2IepMvbX9Zj8heiQ8CacJLRW1GMu3cPDbqK1nPLWF
/jCfH1Khp3wppZPDnfyHkJp9GLrIpa40w5VO0QfPrBR6bhp5U+K5y8AhNG7x+Drh
Y9qwnduPqf2LSFZRzTgrmkoOuuJf9+s=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org