Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
File:                     OOHW4K0CW7AuZUgYPvKoIABQo2U.mft (raw, json)
Hash identifier:          IrasiuMhnYsUCY1XA7986nUpD4b1qzIhvrf5O9S4ROk=
Subject key identifier:   25:26:90:E8:27:B3:24:2B:A4:F0:A8:7C:53:8F:69:E8:CF:12:44:E7
Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65
Certificate issuer:       /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
Certificate serial:       3430
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
Manifest number:          342C
Signing time:             Fri 22 Nov 2024 14:30:58 +0000
Manifest this update:     Fri 22 Nov 2024 14:30:58 +0000
Manifest next update:     Fri 29 Nov 2024 14:30:58 +0000
Files and hashes:         1: OOHW4K0CW7AuZUgYPvKoIABQo2U.crl (hash: H1gmoTQgaYDHTil05Q5lV7EIxVy2kqE7IsngKRbRGCo=)
                          2: E89AA63C3A3411EDA5928760C4F9AE02.roa (hash: 05APYQJe4DJPEEjidbXlOzb6+S6p4c1Z55iGoGM7Isg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl
                          rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13360 (0x3430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365
        Validity
            Not Before: Nov 22 14:30:58 2024 GMT
            Not After : Nov 29 14:30:58 2024 GMT
        Subject: CN=674095a2-e6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:29:7e:1b:3f:d3:41:cf:80:a3:b9:ed:97:
                    b7:31:97:18:ae:62:01:de:4d:ed:50:81:26:cb:ba:
                    35:78:34:53:32:96:87:7b:51:36:37:63:32:67:46:
                    1f:71:f5:a6:20:ff:0c:34:c5:12:3e:01:c9:54:36:
                    d9:6d:d7:7e:47:ea:8e:ff:f9:ca:dc:a9:b7:fc:2b:
                    63:61:fb:d3:bc:86:0d:80:31:fb:74:d3:c7:04:d5:
                    fd:42:d9:39:be:8f:ad:2a:42:df:ba:50:6e:7b:f6:
                    23:fe:dd:07:1a:13:70:b2:e9:6f:3d:57:e7:79:ee:
                    0e:a9:78:81:58:45:95:5a:a6:54:9a:62:be:fa:0f:
                    c2:20:96:b9:3c:e8:33:d3:96:96:ad:8c:fb:a6:a3:
                    82:7b:25:aa:f6:8b:c4:75:0e:c8:ad:cd:5f:a1:ce:
                    d0:dc:17:e1:a3:19:03:9f:fe:44:03:6f:1c:1b:7c:
                    f6:6e:43:1b:1b:82:1f:91:9b:cd:2d:c1:e5:46:5a:
                    a3:46:87:58:8c:23:1b:af:dd:81:e2:0f:d7:b7:93:
                    a7:9a:1f:62:bd:73:e7:ca:dd:e9:25:49:f5:c6:59:
                    d9:93:46:1d:ec:a5:44:03:96:26:7a:42:39:90:9d:
                    a2:7d:08:62:a2:d3:4b:63:bc:8d:de:fb:f7:78:f6:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:26:90:E8:27:B3:24:2B:A4:F0:A8:7C:53:8F:69:E8:CF:12:44:E7
            X509v3 Authority Key Identifier:
                keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:4e:04:b8:07:fb:83:a4:e5:23:30:0f:6d:65:a3:35:45:
         f1:12:d7:56:a4:70:6f:b4:e9:8e:a2:33:6a:cb:f3:de:1d:c5:
         16:5f:d9:b1:ba:a6:b7:4a:d4:a7:95:f5:0a:48:63:02:5f:6a:
         03:0c:18:e0:46:82:85:14:c2:76:9c:21:d3:d3:11:6b:55:e1:
         35:46:1f:53:0c:e8:17:f4:e2:0c:37:e1:8c:9a:41:85:cf:0b:
         11:2b:8a:01:e5:d7:d5:aa:1b:05:07:57:09:4d:8d:fc:a8:7d:
         be:db:0d:98:90:c4:47:d2:49:09:72:29:ce:d6:db:80:da:b1:
         c4:1a:ed:a8:93:70:ba:ab:31:c7:24:e7:c5:68:e2:84:0a:47:
         f7:a0:5d:b7:4f:49:d4:e6:3a:7c:6d:13:63:d1:57:f0:a0:e4:
         d4:f9:8d:2f:fd:b0:4d:d0:66:a2:35:49:e0:7b:c2:35:5a:96:
         e3:e7:94:8e:68:1f:8a:d3:fa:de:db:56:48:f1:bb:55:23:a3:
         be:ac:16:9f:ec:67:fc:b6:48:3d:86:11:eb:d1:9b:42:97:d6:
         3b:91:72:14:fb:e1:16:dc:2d:60:55:b3:bf:dd:e0:7c:ed:a7:
         27:cc:dd:e8:6d:11:1b:88:21:36:72:69:47:43:be:96:73:ac:
         71:96:74:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw
MDA1MEEzNjUwHhcNMjQxMTIyMTQzMDU4WhcNMjQxMTI5MTQzMDU4WjAYMRYwFAYD
VQQDEw02NzQwOTVhMi1lNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzT0pfhs/00HPgKO57Ze3MZcYrmIB3k3tUIEmy7o1eDRTMpaHe1E2N2MyZ0Yf
cfWmIP8MNMUSPgHJVDbZbdd+R+qO//nK3Km3/CtjYfvTvIYNgDH7dNPHBNX9Qtk5
vo+tKkLfulBue/Yj/t0HGhNwsulvPVfnee4OqXiBWEWVWqZUmmK++g/CIJa5POgz
05aWrYz7pqOCeyWq9ovEdQ7Irc1foc7Q3BfhoxkDn/5EA28cG3z2bkMbG4IfkZvN
LcHlRlqjRodYjCMbr92B4g/Xt5Onmh9ivXPnyt3pJUn1xlnZk0Yd7KVEA5YmekI5
kJ2ifQhiotNLY7yN3vv3ePaS2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUmkOgn
syQrpPCofFOPaejPEkTnMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE
ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUVDNC84QTlBODM2ODFEODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3
QXVaVWdZUHZLb0lBQlFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBA004EuAf7g6TlIzAPbWWjNUXxEtdWpHBvtOmOojNqy/PeHcUWX9mx
uqa3StSnlfUKSGMCX2oDDBjgRoKFFMJ2nCHT0xFrVeE1Rh9TDOgX9OIMN+GMmkGF
zwsRK4oB5dfVqhsFB1cJTY38qH2+2w2YkMRH0kkJcinO1tuA2rHEGu2ok3C6qzHH
JOfFaOKECkf3oF23T0nU5jp8bRNj0VfwoOTU+Y0v/bBN0GaiNUnge8I1Wpbj55SO
aB+K0/re21ZI8btVI6O+rBaf7Gf8tkg9hhHr0ZtCl9Y7kXIU++EW3C1gVbO/3eB8
7acnzN3obREbiCE2cmlHQ76Wc6xxlnQx
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:35 2024 by rpki-client on console-fra.rpki-client.org