Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          3KVIN3PRl9AvRe098upL1k2EGCqB28CXr4TO99UK5Wk=
Subject key identifier:   0C:C0:AC:26:E0:5F:08:B4:46:DC:B4:18:BD:28:E1:BB:0B:7C:DA:B8
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0A6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0A53
Signing time:             Fri 22 Nov 2024 19:30:08 +0000
Manifest this update:     Fri 22 Nov 2024 19:30:07 +0000
Manifest next update:     Fri 29 Nov 2024 19:30:07 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: RhH/kErdtFh93mLeAHFKVAoTMPcQO+EpKXimLJ52vDI=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 3+4YIvZgcCdVrPM39eq8U0b37BVdz2kxEm0TdnodkbE=)
                          3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: z2Amob3XsDPHZrT5Wf5AplgGB0ayushklt2PBfRRMGk=)
                          4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b8sKlJgxC+LgU3RKdElF+rtjQy5KxRCgzXpaFbzf9q0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Nov 22 19:30:07 2024 GMT
            Not After : Nov 29 19:30:07 2024 GMT
        Subject: CN=6740dbc0-6cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:7a:5a:db:a3:c8:64:0c:a7:cb:41:63:b4:
                    ef:9b:71:9e:49:74:14:c1:39:46:28:6e:98:f0:cb:
                    84:81:2c:d2:04:c5:6b:4f:25:b7:e0:62:f8:ae:fb:
                    61:2b:1f:8b:63:45:0f:a2:6b:9f:7e:b9:5f:27:26:
                    99:13:9d:34:2c:10:f2:2e:6c:8a:13:f6:12:46:08:
                    af:37:d5:17:bd:eb:65:48:6e:a2:07:38:1b:e1:39:
                    ae:1f:c9:a6:d2:dd:6a:e0:1c:05:87:3a:f9:32:0b:
                    b8:09:98:5e:ec:9a:19:90:90:43:21:5a:cd:8e:75:
                    fa:a9:70:41:78:fc:dc:f4:22:b0:54:d8:76:f3:3d:
                    78:e9:1d:e5:57:d5:5c:3f:1e:b2:85:4c:13:1e:12:
                    a0:50:67:4e:ed:80:ba:65:1e:97:e7:88:e6:56:99:
                    4e:c3:59:ab:48:b8:d7:c8:d4:3f:86:42:01:ca:7a:
                    bf:eb:09:20:52:bd:ef:bb:3c:e6:d4:9a:db:4b:b2:
                    60:46:79:6f:2f:07:52:67:e5:f4:00:70:42:9c:81:
                    5b:f5:76:2a:83:26:ee:0c:df:3b:e1:b7:d5:6b:7c:
                    69:8e:fb:99:73:14:d0:4d:ce:e7:f5:2d:0e:99:69:
                    b5:32:0d:8b:e0:9d:ee:8a:8f:76:29:0b:e5:a1:af:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:AC:26:E0:5F:08:B4:46:DC:B4:18:BD:28:E1:BB:0B:7C:DA:B8
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:89:1d:f1:4b:af:22:c3:28:06:02:0f:91:73:95:55:ff:00:
         03:28:db:00:fc:ef:e2:5f:b3:ad:f3:3b:89:d6:31:9f:2e:f2:
         56:13:f9:d0:36:dc:32:29:e2:48:83:7c:79:7f:d2:55:84:c2:
         cd:59:07:cd:9c:fb:de:56:0d:9b:46:3c:37:c1:13:87:3e:a3:
         c9:b8:62:cd:aa:67:07:95:0e:a7:be:27:bf:2f:92:e2:e7:b8:
         3b:c4:65:9f:04:72:e6:a6:bf:be:b4:ed:d8:b2:db:aa:59:18:
         fc:fe:49:0f:a2:3f:ff:29:e8:22:16:bf:49:65:95:5e:10:26:
         22:3b:44:44:45:14:2a:6a:e5:30:3c:c4:46:8d:93:5f:12:6c:
         ee:69:cc:38:a9:bd:87:54:7c:21:54:10:5a:57:7a:75:7c:d2:
         69:63:ee:9b:51:ac:a8:e7:08:28:10:29:70:ca:e8:ec:1f:71:
         d4:75:30:60:bc:0c:53:59:0c:29:8c:d7:2f:78:ad:7e:d3:18:
         d5:89:ff:19:4f:0f:b2:cd:d8:78:a2:c7:fb:a0:58:b0:9f:cb:
         04:71:dc:ee:3f:a3:5c:1c:45:d7:63:6b:4d:05:01:4c:4f:bb:
         f6:ab:93:33:a6:76:f5:5a:45:4c:40:c8:75:dd:e4:2a:a8:40:
         a7:c7:fb:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjQxMTIyMTkzMDA3WhcNMjQxMTI5MTkzMDA3WjAYMRYwFAYD
VQQDEw02NzQwZGJjMC02Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzN6WtujyGQMp8tBY7Tvm3GeSXQUwTlGKG6Y8MuEgSzSBMVrTyW34GL4rvth
Kx+LY0UPomuffrlfJyaZE500LBDyLmyKE/YSRgivN9UXvetlSG6iBzgb4TmuH8mm
0t1q4BwFhzr5Mgu4CZhe7JoZkJBDIVrNjnX6qXBBePzc9CKwVNh28z146R3lV9Vc
Px6yhUwTHhKgUGdO7YC6ZR6X54jmVplOw1mrSLjXyNQ/hkIBynq/6wkgUr3vuzzm
1JrbS7JgRnlvLwdSZ+X0AHBCnIFb9XYqgybuDN874bfVa3xpjvuZcxTQTc7n9S0O
mWm1Mg2L4J3uio92KQvloa8pnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzArCbg
Xwi0Rty0GL0o4bsLfNq4MB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw
X1ZDRnZrUm1CU0U1RDdFekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjiR3xS68iwygGAg+Rc5VV/wADKNsA/O/iX7Ot8zuJ1jGfLvJWE/nQ
NtwyKeJIg3x5f9JVhMLNWQfNnPveVg2bRjw3wROHPqPJuGLNqmcHlQ6nvie/L5Li
57g7xGWfBHLmpr++tO3YstuqWRj8/kkPoj//KegiFr9JZZVeECYiO0RERRQqauUw
PMRGjZNfEmzuacw4qb2HVHwhVBBaV3p1fNJpY+6bUayo5wgoEClwyujsH3HUdTBg
vAxTWQwpjNcveK1+0xjVif8ZTw+yzdh4osf7oFiwn8sEcdzuP6NcHEXXY2tNBQFM
T7v2q5Mzpnb1WkVMQMh13eQqqECnx/vz
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org