Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          mrwpUvgX9YYAN8gQ75FAQRG/BOf6rFXulo+h0oUvwWM=
Subject key identifier:   BC:42:D1:C2:21:CB:D1:61:4B:2E:31:7D:1C:D5:91:82:DC:92:E2:7A
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          0886
Signing time:             Sun 24 Nov 2024 20:08:38 +0000
Manifest this update:     Sun 24 Nov 2024 20:08:38 +0000
Manifest next update:     Sun 01 Dec 2024 20:08:38 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: DKm/P639VEyBCEXXElDDrK/ZyLQ0j4RkmLxAqZubtDA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Nov 24 20:08:38 2024 GMT
            Not After : Dec  1 20:08:38 2024 GMT
        Subject: CN=674387c6-6ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:e7:bc:e0:c0:d6:c1:da:65:f7:57:55:93:
                    01:6a:c6:db:62:7b:11:53:e7:e1:f7:56:28:31:75:
                    16:59:5f:f4:f6:6f:70:d4:56:25:5a:e1:fd:59:82:
                    ae:48:99:3c:35:97:cc:58:3d:1e:e7:e7:db:7e:30:
                    7c:b5:66:53:42:f8:a5:ef:67:c5:74:54:05:42:d9:
                    68:3b:c1:68:0a:51:c6:38:a3:6a:09:48:b5:0b:1f:
                    be:00:0a:a1:3e:50:70:53:3e:79:9f:ba:b1:34:d9:
                    02:c6:84:25:dd:2f:2a:a1:a4:fa:08:63:62:7a:b2:
                    34:7a:c3:3e:fb:db:b6:e7:49:27:03:9f:f9:85:0b:
                    be:f4:af:9f:48:a0:26:e6:65:f2:00:0e:d0:71:53:
                    65:23:8e:c8:c6:bd:1c:08:b3:1c:09:95:00:5a:c1:
                    52:0b:b4:cf:f3:1a:5e:81:b1:ab:7c:2a:c9:d4:94:
                    b7:5f:18:b4:a7:38:9d:ff:27:66:eb:c8:cb:ba:68:
                    a0:c3:f2:7a:7a:42:69:13:0e:d7:e7:7d:c7:c8:d7:
                    3c:d8:a5:7a:5b:63:88:ce:e5:ce:02:85:40:01:b7:
                    a5:d2:d0:94:10:7b:51:19:0b:c2:32:27:bb:e4:14:
                    08:e0:38:c7:95:12:87:fc:f6:c7:8d:d8:5d:ab:38:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:D1:C2:21:CB:D1:61:4B:2E:31:7D:1C:D5:91:82:DC:92:E2:7A
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:90:3c:f3:ab:ae:a8:86:dc:1a:b9:ea:f1:65:04:4e:fe:
         3a:ae:5a:61:1b:61:9d:c3:63:9f:bd:04:47:f3:05:ce:50:72:
         61:92:82:01:57:73:0b:29:46:ee:fd:ae:bc:c0:6e:20:de:94:
         5f:61:cb:42:06:00:a5:ef:05:06:d0:e8:d2:dd:c4:b2:d8:dc:
         29:4a:4e:1c:c9:9a:93:4c:52:2e:b5:25:05:22:a2:3e:2a:ad:
         f9:4c:a6:8d:98:dc:32:2d:ac:06:68:9f:4e:99:74:33:4e:4b:
         85:f7:97:97:1f:8d:9a:2d:13:10:f8:a0:ae:44:2b:66:32:ad:
         dc:ca:97:99:39:cf:45:04:eb:eb:70:bf:c2:3f:0f:d0:98:7a:
         de:2a:ef:7c:b9:51:82:44:15:4d:de:d8:f5:43:9f:80:cd:3a:
         b2:61:3b:ab:09:b9:19:86:78:83:34:bb:57:62:91:71:07:88:
         cd:a9:f0:8a:23:a6:a1:11:69:a6:d3:7d:ad:9a:f5:9c:ce:ea:
         6e:ee:1a:98:19:79:ee:36:4d:ba:8f:20:27:a0:f7:50:19:12:
         af:93:6c:dc:d8:ad:a1:55:32:e3:f5:02:39:1e:be:9f:3c:30:
         ea:49:dc:13:94:29:8c:72:55:58:b4:68:b5:e5:3b:10:2b:73:
         8f:12:10:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNFMTYxMTAvBgNVBAUTKEI5QTBCRUZGOTJBRjdDREUxOTAwODUwNTJGMUY0RjFG
OTJCREE0RjIwHhcNMjQxMTI0MjAwODM4WhcNMjQxMjAxMjAwODM4WjAYMRYwFAYD
VQQDEw02NzQzODdjNi02Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxG3nvODA1sHaZfdXVZMBasbbYnsRU+fh91YoMXUWWV/09m9w1FYlWuH9WYKu
SJk8NZfMWD0e5+fbfjB8tWZTQvil72fFdFQFQtloO8FoClHGOKNqCUi1Cx++AAqh
PlBwUz55n7qxNNkCxoQl3S8qoaT6CGNierI0esM++9u250knA5/5hQu+9K+fSKAm
5mXyAA7QcVNlI47Ixr0cCLMcCZUAWsFSC7TP8xpegbGrfCrJ1JS3Xxi0pzid/ydm
68jLumigw/J6ekJpEw7X533HyNc82KV6W2OIzuXOAoVAAbel0tCUEHtRGQvCMie7
5BQI4DjHlRKH/PbHjdhdqzidKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxC0cIh
y9FhSy4xfRzVkYLckuJ6MB8GA1UdIwQYMBaAFLmgvv+Sr3zeGQCFBS8fTx+SvaTy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9ENTA5NEZBNkFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZONFpBSVVGTHg5UEg1Szlw
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VhQy1fNUt2Zk40WkFJVUZMeDlQSDVLOXBQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0UxNi9ENTA5NEZBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi91YUMtXzVLdmZO
NFpBSVVGTHg5UEg1SzlwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8epA886uuqIbcGrnq8WUETv46rlphG2Gdw2OfvQRH8wXOUHJhkoIB
V3MLKUbu/a68wG4g3pRfYctCBgCl7wUG0OjS3cSy2NwpSk4cyZqTTFIutSUFIqI+
Kq35TKaNmNwyLawGaJ9OmXQzTkuF95eXH42aLRMQ+KCuRCtmMq3cypeZOc9FBOvr
cL/CPw/QmHreKu98uVGCRBVN3tj1Q5+AzTqyYTurCbkZhniDNLtXYpFxB4jNqfCK
I6ahEWmm032tmvWczupu7hqYGXnuNk26jyAnoPdQGRKvk2zc2K2hVTLj9QI5Hr6f
PDDqSdwTlCmMclVYtGi15TsQK3OPEhCZ
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:10 2024 by rpki-client on console-fra.rpki-client.org