Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
File:                     8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json)
Hash identifier:          pzSW0Z8IJH1X3tt6J8dZpNyH6w3z1T9tCrP7XiI5NgA=
Subject key identifier:   17:DC:A9:DB:04:FB:CA:D4:66:85:EF:DB:51:34:04:E4:57:97:EC:91
Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64
Certificate issuer:       /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
Manifest number:          13
Signing time:             Wed 05 Feb 2025 06:24:40 +0000
Manifest this update:     Wed 05 Feb 2025 06:24:39 +0000
Manifest next update:     Wed 12 Feb 2025 06:24:39 +0000
Files and hashes:         1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: EHHFxdclF7VkMPEb6itnKveHW8uaTJ5GFFyQHlPgWIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 06:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536
        Validity
            Not Before: Feb  5 06:24:39 2025 GMT
            Not After : Feb 12 06:24:39 2025 GMT
        Subject: CN=67a30428-d5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:c0:69:99:9d:de:e7:b2:c7:1e:7e:05:e0:
                    9e:0a:e7:6c:e2:ad:36:e6:00:88:26:c3:aa:0b:2a:
                    91:53:98:3f:19:af:0c:9a:fb:d8:28:75:55:8b:98:
                    0d:31:69:83:ab:20:31:bc:4e:44:61:40:42:ed:5b:
                    81:37:8c:02:ed:83:c0:1d:0b:b2:42:03:20:f6:a6:
                    27:72:f8:ad:71:24:95:2e:68:e1:4c:44:ee:d5:e1:
                    1f:55:5d:c3:08:ee:14:f1:61:a1:7a:f3:14:98:bf:
                    5b:9d:ef:82:4b:b2:71:45:08:ae:25:a0:ce:09:96:
                    48:97:b9:de:fe:57:2f:28:7a:c0:ae:c2:4c:95:ff:
                    29:0f:98:b0:96:fe:62:ae:76:68:fd:35:5f:1e:c3:
                    8b:d9:8a:9f:61:d5:f3:5a:91:2b:22:6b:12:c2:3a:
                    a1:88:7d:ec:54:f5:f5:b7:45:03:d7:8b:6a:5b:d2:
                    32:9c:5e:f2:20:4f:22:cc:33:09:fa:f2:b6:d9:07:
                    83:22:a0:be:5b:32:bc:d3:76:6e:ee:38:4f:78:52:
                    08:ee:fd:79:f2:3f:01:fc:20:e3:b3:dd:42:b8:0f:
                    2a:55:3c:61:e8:52:dd:0c:5e:6e:4e:2e:7a:96:b3:
                    bc:01:a0:14:43:e4:15:30:de:80:d1:ad:00:39:d0:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DC:A9:DB:04:FB:CA:D4:66:85:EF:DB:51:34:04:E4:57:97:EC:91
            X509v3 Authority Key Identifier:
                keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:45:e5:02:7e:9a:02:be:c8:fd:8c:0d:c9:4c:ae:78:78:
         0c:37:54:c3:fa:89:40:df:aa:6c:5a:30:1d:6b:e6:d1:49:e2:
         36:be:d5:29:2a:58:29:24:69:63:ea:67:db:ac:32:a4:94:d7:
         a8:b6:cd:d9:00:a3:16:0b:3c:dc:ba:ae:00:9d:39:ab:1b:f6:
         d0:0b:4a:0b:f2:28:f0:5d:38:ce:15:68:53:0b:0c:67:e2:b5:
         cf:3d:a5:5e:64:ff:bf:a4:9a:d8:07:75:ad:eb:c8:e9:c1:00:
         62:a4:bb:28:78:42:0a:1d:88:77:23:1b:75:b2:79:a8:5e:d5:
         ae:6c:89:5a:0c:a8:29:d7:20:fc:24:cb:0a:93:c6:a7:0c:4b:
         4b:ea:bb:71:9d:49:c4:1f:55:e9:b8:40:db:b7:26:fe:fd:f7:
         a3:a5:2f:66:41:c5:2b:4d:52:36:38:71:35:20:57:fb:a9:87:
         26:9a:08:4e:9e:f7:a7:e3:d6:47:7d:5f:36:56:dc:fc:7e:cc:
         82:5f:b2:b3:68:e4:0f:0e:a5:ea:85:bb:ee:08:7c:9a:af:5c:
         73:0c:a6:fb:4e:80:7a:07:d8:52:04:be:06:a9:bd:e6:e8:e9:
         f7:81:9e:ed:2f:cf:c1:34:84:fc:0d:ff:9b:fa:8e:e0:8a:19:
         fb:03:89:f9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjUzNjExMC8GA1UEBRMoRjMzNjdENzQ0NDgzOTlDMThFRjY3QzdDOTg2MTA3Qjgx
NEIxMkQ2NDAeFw0yNTAyMDUwNjI0MzlaFw0yNTAyMTIwNjI0MzlaMBgxFjAUBgNV
BAMTDTY3YTMwNDI4LWQ1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWV8BpmZ3e57LHHn4F4J4K52zirTbmAIgmw6oLKpFTmD8Zrwya+9godVWLmA0x
aYOrIDG8TkRhQELtW4E3jALtg8AdC7JCAyD2pidy+K1xJJUuaOFMRO7V4R9VXcMI
7hTxYaF68xSYv1ud74JLsnFFCK4loM4JlkiXud7+Vy8oesCuwkyV/ykPmLCW/mKu
dmj9NV8ew4vZip9h1fNakSsiaxLCOqGIfexU9fW3RQPXi2pb0jKcXvIgTyLMMwn6
8rbZB4MioL5bMrzTdm7uOE94Ugju/XnyPwH8IOOz3UK4DypVPGHoUt0MXm5OLnqW
s7wBoBRD5BUw3oDRrQA50H55AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9yp2wT7
ytRmhe/bUTQE5FeX7JEwHwYDVR0jBBgwFoAU8zZ9dESDmcGO9nx8mGEHuBSxLWQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2L0EzMDVGNEU0Qzk5
QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExX
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHpaOWRFU0RtY0dPOW54OG1HRUh1QlN4TFdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG
NTM2L0EzMDVGNEU0Qzk5QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNH
TzlueDhtR0VIdUJTeExXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKG+ReUCfpoCvsj9jA3JTK54eAw3VMP6iUDfqmxaMB1r5tFJ4ja+1Skq
WCkkaWPqZ9usMqSU16i2zdkAoxYLPNy6rgCdOasb9tALSgvyKPBdOM4VaFMLDGfi
tc89pV5k/7+kmtgHda3ryOnBAGKkuyh4QgodiHcjG3Wyeahe1a5siVoMqCnXIPwk
ywqTxqcMS0vqu3GdScQfVem4QNu3Jv7996OlL2ZBxStNUjY4cTUgV/uphyaaCE6e
96fj1kd9XzZW3Px+zIJfsrNo5A8OpeqFu+4IfJqvXHMMpvtOgHoH2FIEvgapvebo
6feBnu0vz8E0hPwN/5v6juCKGfsDifk=
-----END CERTIFICATE-----
Generated at Thu Feb 6 04:52:58 2025 by rpki-client