Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
File:                     ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json)
Hash identifier:          2rS7n0+hohr8BTaj7RKB+99XjEPlrAyXfA6l94Bd4mE=
Subject key identifier:   56:1F:2F:91:8A:7B:8A:8C:88:15:93:0D:CE:14:28:A5:82:BE:83:AC
Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
Certificate issuer:       /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
Manifest number:          8E
Signing time:             Thu 21 Nov 2024 04:36:52 +0000
Manifest this update:     Thu 21 Nov 2024 04:36:51 +0000
Manifest next update:     Thu 28 Nov 2024 04:36:51 +0000
Files and hashes:         1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: YADBQfu46eyi0WeDBtG4JF0Qgvdch2BTb/ypPRV7uXw=)
                          2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: 7KeTZX545IABA5t2arvNc6G1Z+gSO4ocpijqenr2MLo=)
                          3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: D/+xv8jzE11lKaO3hHiOnEDdZgBcBo0atzPE35sFdcc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl
                          rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
        Validity
            Not Before: Nov 21 04:36:51 2024 GMT
            Not After : Nov 28 04:36:51 2024 GMT
        Subject: CN=673eb8e4-ce72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:0b:84:10:45:01:cb:8a:8e:bc:cc:6b:02:
                    6c:63:f9:11:39:70:5d:16:d9:38:c4:96:1c:bb:46:
                    31:5f:09:ab:56:81:89:6e:a7:06:1c:2d:2b:6a:88:
                    e3:38:65:4f:ab:90:e1:8f:79:34:7f:4a:f6:02:35:
                    b3:8f:7a:2b:52:ee:8c:a0:e5:bc:dd:c3:27:02:3f:
                    3d:0b:f6:5d:28:c0:af:29:5f:7b:9d:53:04:bd:9e:
                    68:3c:ed:6a:34:93:a3:4e:1f:f5:94:00:07:76:df:
                    67:d4:0f:d6:bd:24:8e:c5:55:19:74:dc:65:6e:cf:
                    f6:4f:d8:c8:9c:95:83:95:67:55:5f:40:50:f8:ec:
                    42:2c:1c:34:d1:fd:98:f2:fe:b1:74:ad:b9:63:76:
                    71:ff:06:67:1e:29:de:27:93:ba:51:53:d2:06:79:
                    26:86:59:97:e2:35:9e:1f:c0:b9:df:21:7e:e2:7d:
                    ee:6c:c3:d6:e0:4f:db:7f:bd:fc:63:25:36:56:c4:
                    d2:84:05:1c:11:f7:11:f5:08:a2:70:4a:89:2d:b9:
                    f1:fc:96:d3:29:54:b3:77:85:1e:72:ed:ec:f1:ab:
                    cd:be:2d:cc:97:03:d5:ef:17:84:90:32:0d:54:2e:
                    79:36:70:5b:5e:da:4d:e9:0a:af:35:64:bd:86:48:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:2F:91:8A:7B:8A:8C:88:15:93:0D:CE:14:28:A5:82:BE:83:AC
            X509v3 Authority Key Identifier:
                keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:35:57:0f:5c:2e:58:b8:df:cb:c9:bc:f5:71:e9:4d:4d:ae:
         32:64:3e:41:47:2e:0c:95:96:d0:e5:9a:d6:6d:c3:f7:2d:95:
         8c:b9:38:9d:d4:2d:ae:d4:0e:28:63:82:b1:f1:66:f7:6b:33:
         6e:9b:54:ab:cb:c3:e0:42:98:9c:72:7f:97:2d:76:21:5d:ff:
         9c:33:1a:e9:67:4f:0b:48:9b:6c:25:c6:f9:26:60:d9:39:c6:
         a0:3e:03:f3:28:a9:b9:41:b3:1c:74:b7:8b:8c:17:cb:c2:8d:
         0a:7c:6b:30:df:4f:f3:77:db:f6:cd:28:4c:78:a9:3f:75:b3:
         4e:04:75:fc:51:62:46:45:88:08:a7:67:38:da:19:f9:aa:dc:
         27:65:3a:e0:00:72:c5:35:f0:96:ce:3f:22:f1:a9:e2:56:04:
         e1:09:d7:7f:f0:f3:9e:74:8b:3f:e5:ed:ac:4d:1c:b8:53:25:
         a6:ff:10:bd:e5:0e:8c:5a:d7:5b:5c:74:0b:41:0e:dc:bf:bc:
         08:92:4e:4f:d8:5d:60:c5:4c:1f:a1:a8:9a:03:66:3a:37:dc:
         75:07:f8:b0:7d:0a:f6:42:20:d8:10:ba:33:6f:9a:5c:7c:dd:
         13:71:b7:50:96:23:52:40:af:ca:92:ac:d3:9e:b0:e1:61:f6:
         3b:bd:49:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB
OEQyMEVBQTcwHhcNMjQxMTIxMDQzNjUxWhcNMjQxMTI4MDQzNjUxWjAYMRYwFAYD
VQQDEw02NzNlYjhlNC1jZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjgLhBBFAcuKjrzMawJsY/kROXBdFtk4xJYcu0YxXwmrVoGJbqcGHC0raojj
OGVPq5Dhj3k0f0r2AjWzj3orUu6MoOW83cMnAj89C/ZdKMCvKV97nVMEvZ5oPO1q
NJOjTh/1lAAHdt9n1A/WvSSOxVUZdNxlbs/2T9jInJWDlWdVX0BQ+OxCLBw00f2Y
8v6xdK25Y3Zx/wZnHineJ5O6UVPSBnkmhlmX4jWeH8C53yF+4n3ubMPW4E/bf738
YyU2VsTShAUcEfcR9QiicEqJLbnx/JbTKVSzd4Uecu3s8avNvi3MlwPV7xeEkDIN
VC55NnBbXtpN6QqvNWS9hkh9AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYfL5GK
e4qMiBWTDc4UKKWCvoOsMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND
RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN
cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHNVcPXC5YuN/Lybz1celNTa4yZD5BRy4MlZbQ5ZrWbcP3LZWMuTid
1C2u1A4oY4Kx8Wb3azNum1Sry8PgQpiccn+XLXYhXf+cMxrpZ08LSJtsJcb5JmDZ
OcagPgPzKKm5QbMcdLeLjBfLwo0KfGsw30/zd9v2zShMeKk/dbNOBHX8UWJGRYgI
p2c42hn5qtwnZTrgAHLFNfCWzj8i8aniVgThCdd/8POedIs/5e2sTRy4UyWm/xC9
5Q6MWtdbXHQLQQ7cv7wIkk5P2F1gxUwfoaiaA2Y6N9x1B/iwfQr2QiDYELozb5pc
fN0TcbdQliNSQK/KkqzTnrDhYfY7vUkx
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:04 2024 by rpki-client on console-ams.rpki-client.org