Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File:                     Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier:          rPvzYZ39nNhSyGBVvvLTZYtPw6I/XebK9IF/3ZpJw2g=
Subject key identifier:   8E:59:61:C3:92:BC:F3:A5:FE:D8:D7:10:1B:39:2B:AF:A7:97:F0:E8
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer:       /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number:          06D0
Signing time:             Fri 22 Nov 2024 21:41:15 +0000
Manifest this update:     Fri 22 Nov 2024 21:41:14 +0000
Manifest next update:     Fri 29 Nov 2024 21:41:14 +0000
Files and hashes:         1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: 3F59MYvpJyswh2DaZIBgrq/WidJEwYd+lGFNIrsOdjw=)
                          2: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: cR9HV4rxiZkRev09g9uB9No5I0ecIOFxwxebh4lOO6g=)
                          3: F704E032765811EE8C17A621C4F9AE02.roa (hash: jaF3A9cUsRhUGHc64JXnfHLoj/WN7EYD3IvlJOsMOnc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
        Validity
            Not Before: Nov 22 21:41:14 2024 GMT
            Not After : Nov 29 21:41:14 2024 GMT
        Subject: CN=6740fa7a-181c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:06:59:b0:3d:9c:fa:3f:f8:ae:7f:d1:25:
                    2d:a3:db:03:1d:5d:bb:35:41:9b:2e:94:ed:0e:2f:
                    23:50:ad:e1:a8:97:7d:1e:f4:43:d4:eb:86:2c:ab:
                    15:b8:88:de:d4:74:df:40:75:07:1b:3c:07:c7:d5:
                    ad:55:43:47:b6:0d:e4:0d:6a:b2:3b:44:27:18:51:
                    c4:59:e2:b3:19:b7:6e:f3:f6:64:49:97:a6:8a:87:
                    5f:32:ed:1b:17:a7:06:98:e5:de:e9:0d:63:59:55:
                    0d:e8:60:36:ca:98:4b:50:46:b5:0e:42:d4:8e:92:
                    88:d1:ce:19:41:c4:f0:b0:06:ac:8f:aa:a1:ae:1f:
                    6b:76:95:f8:0c:27:fc:14:32:85:97:fc:b7:7c:bf:
                    21:8a:de:82:6b:b3:1f:98:7b:7e:40:60:e2:de:22:
                    c7:72:a3:4a:55:7b:b1:5d:87:63:8d:cd:cc:41:5e:
                    c8:0a:d6:ae:e8:38:5d:38:03:73:17:76:c1:ac:d0:
                    17:57:c7:a3:67:d3:a2:b7:e9:61:ad:01:b4:2f:4e:
                    fb:4f:03:73:54:69:79:2f:3b:d9:f7:bd:1d:b0:89:
                    df:e3:18:84:f5:a3:de:ba:75:f4:16:9c:5c:c8:2d:
                    2b:89:32:cb:04:3d:a5:cd:8d:3c:68:d0:36:2d:08:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:61:C3:92:BC:F3:A5:FE:D8:D7:10:1B:39:2B:AF:A7:97:F0:E8
            X509v3 Authority Key Identifier:
                keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:f1:ad:20:c7:87:09:20:c6:38:07:57:c6:69:ee:02:aa:
         44:c7:30:0a:ea:ff:0c:7f:40:d0:c0:fa:5f:83:6e:c8:d5:d5:
         e4:a5:70:83:b5:8a:7a:6e:1e:45:f6:6e:d9:ad:3f:69:1c:84:
         ab:35:bc:ca:fa:25:55:89:7d:62:98:b1:c3:38:ba:8b:3d:c6:
         8a:07:c8:9b:b7:e7:fc:18:6b:91:9e:9e:2e:1f:27:92:fb:fe:
         73:a2:b7:9e:17:57:45:0d:8e:df:e7:4c:96:d2:41:e1:38:c7:
         5a:3d:04:65:bd:dd:11:39:e0:2d:74:ff:89:91:67:d8:78:85:
         e9:84:c8:c5:ca:1d:e0:0e:3e:56:94:3a:d9:06:5e:76:1d:8e:
         ea:bc:67:c9:e1:f7:6e:28:4a:e0:f1:40:75:fc:f0:7e:c9:a6:
         89:53:d4:bc:80:52:c8:7d:1a:a7:e8:f2:ee:56:8b:f2:ed:fc:
         12:5e:d7:e2:65:29:2c:65:a8:e4:c3:6c:02:46:1b:16:49:89:
         07:46:08:c3:d4:9b:1f:34:77:a9:55:8c:9e:16:81:59:b9:eb:
         99:7e:b6:c6:ee:9f:bd:1b:05:b7:09:7a:4c:8a:0f:bd:05:af:
         2c:54:0c:23:53:ef:60:ab:d5:7e:a9:3b:4e:e1:5a:74:f4:15:
         3f:22:c6:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I1QzIxMTAvBgNVBAUTKDFFRUQyNjNGMDQyOEQ4NEUzRkJFNTE3NTNEMTZENEIz
RDYyNzk3QzQwHhcNMjQxMTIyMjE0MTE0WhcNMjQxMTI5MjE0MTE0WjAYMRYwFAYD
VQQDEw02NzQwZmE3YS0xODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIIGWbA9nPo/+K5/0SUto9sDHV27NUGbLpTtDi8jUK3hqJd9HvRD1OuGLKsV
uIje1HTfQHUHGzwHx9WtVUNHtg3kDWqyO0QnGFHEWeKzGbdu8/ZkSZemiodfMu0b
F6cGmOXe6Q1jWVUN6GA2yphLUEa1DkLUjpKI0c4ZQcTwsAasj6qhrh9rdpX4DCf8
FDKFl/y3fL8hit6Ca7MfmHt+QGDi3iLHcqNKVXuxXYdjjc3MQV7ICtau6DhdOANz
F3bBrNAXV8ejZ9Oit+lhrQG0L077TwNzVGl5LzvZ970dsInf4xiE9aPeunX0Fpxc
yC0riTLLBD2lzY08aNA2LQg0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5ZYcOS
vPOl/tjXEBs5K6+nl/DoMB8GA1UdIwQYMBaAFB7tJj8EKNhOP75RdT0W1LPWJ5fE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjVDMi83NzlEMDRBMDM2
NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJFNF92bEYxUFJiVXM5WW5s
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1MG1Qd1FvMkU0X3ZsRjFQUmJVczlZbmw4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjVDMi83NzlEMDRBMDM2NDExMUVCODQ5OUQyMTlDNEY5QUUwMi9IdTBtUHdRbzJF
NF92bEYxUFJiVXM5WW5sOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXzvGtIMeHCSDGOAdXxmnuAqpExzAK6v8Mf0DQwPpfg27I1dXkpXCD
tYp6bh5F9m7ZrT9pHISrNbzK+iVViX1imLHDOLqLPcaKB8ibt+f8GGuRnp4uHyeS
+/5zoreeF1dFDY7f50yW0kHhOMdaPQRlvd0ROeAtdP+JkWfYeIXphMjFyh3gDj5W
lDrZBl52HY7qvGfJ4fduKErg8UB1/PB+yaaJU9S8gFLIfRqn6PLuVovy7fwSXtfi
ZSksZajkw2wCRhsWSYkHRgjD1JsfNHepVYyeFoFZueuZfrbG7p+9GwW3CXpMig+9
Ba8sVAwjU+9gq9V+qTtO4Vp09BU/IsZU
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org