Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File:                     e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier:          5UrXLiU4zdG6Q/QCoPsNnMcs9guSg2Fe98MBAZ6E8pI=
Subject key identifier:   75:ED:5A:8E:9A:D8:03:AC:03:71:B7:F9:9D:5F:FD:0F:93:10:BB:E4
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number:          0C
Signing time:             Wed 25 Dec 2024 06:12:41 +0000
Manifest this update:     Wed 25 Dec 2024 06:12:41 +0000
Manifest next update:     Wed 01 Jan 2025 06:12:41 +0000
Files and hashes:         1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: 9nwbQixdy4nO5xEUVdvNZ2vEaRLk0yOVNjPbj1fo81k=)
                          2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: vLV5ILypZ5+6/MGlQ4HJDangMObqhJh2n/QaZfHAWOI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jan 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Dec 25 06:12:41 2024 GMT
            Not After : Jan  1 06:12:41 2025 GMT
        Subject: CN=676ba259-4b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:fa:e1:76:0f:58:e9:81:e0:6a:7a:93:2d:
                    12:7e:2f:bd:e1:42:2e:6d:09:96:a5:b0:a1:2f:cc:
                    4f:60:68:58:f4:70:d2:0d:9d:1c:3e:a6:9b:89:ee:
                    f8:49:ae:2f:93:d3:fa:19:28:85:e4:52:7a:5a:97:
                    fe:77:66:10:a8:a4:38:d3:b7:b2:96:d6:24:b1:cd:
                    2a:9d:8e:71:d6:78:58:9c:e2:3e:98:d0:e0:1c:b5:
                    42:b7:1d:1b:de:2b:bc:99:95:54:12:bb:93:18:d2:
                    7c:bc:ba:5f:bd:f2:e5:2b:43:6d:89:13:fc:37:d2:
                    32:40:cd:e6:d4:e3:05:1b:c8:aa:e7:e2:6a:79:b7:
                    ba:f3:66:9a:57:a9:7f:8e:fc:f7:5b:70:c0:c5:c1:
                    1d:22:19:56:5d:70:f3:52:48:9f:72:e5:bf:1e:02:
                    29:29:33:4f:06:aa:59:c8:15:4b:30:b9:99:7e:3e:
                    ff:85:0e:08:8f:53:89:a3:a0:63:83:b5:b6:44:3c:
                    67:c8:d5:7a:1a:f9:02:2c:14:ec:85:83:e7:f3:2d:
                    67:09:17:c8:52:71:ef:d1:2d:d9:4b:38:c1:90:d5:
                    8a:61:d4:12:c1:8d:69:22:4e:d9:a5:bb:2a:86:41:
                    14:c1:42:06:4a:b1:af:c5:ff:da:55:d1:f4:65:7e:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:5A:8E:9A:D8:03:AC:03:71:B7:F9:9D:5F:FD:0F:93:10:BB:E4
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:cf:b1:fa:ae:80:26:cf:d0:6e:41:82:79:c5:7a:65:c5:
         54:42:a4:99:46:41:4b:f9:c1:a8:72:73:0a:58:ed:ed:2a:0b:
         54:48:09:cb:d1:27:70:0b:2f:a1:ea:31:d1:a3:c5:d0:54:1e:
         22:a6:3e:27:bb:74:dc:03:5d:d3:ec:5d:96:f5:73:24:59:70:
         ec:2d:66:3e:9b:ed:d7:aa:ee:53:2c:7e:6d:05:96:d4:ed:cf:
         d3:b5:72:fa:7b:b9:63:98:70:c0:a8:e1:77:ae:56:13:5b:44:
         31:7c:35:a9:e7:2b:91:84:21:88:1f:dc:1d:8b:40:d7:86:d9:
         19:9a:58:df:26:ac:4b:37:df:d3:e3:51:84:2e:f0:8d:5c:e2:
         0b:5f:98:2e:1c:64:c7:48:3e:7c:e4:a9:7d:74:59:b9:d2:30:
         68:74:5d:8b:a7:7d:68:d6:7f:38:70:1a:83:86:fd:4a:ba:a5:
         3f:b2:f9:7e:b0:d4:29:3e:55:85:ea:5a:15:2a:76:48:4d:55:
         a0:b2:1d:b0:f4:2b:d4:70:b5:7f:13:a5:3e:41:f1:95:d5:35:
         9d:da:37:c2:87:08:8e:36:22:51:b0:06:39:98:bc:0c:1b:0b:
         c3:a4:f8:a2:54:60:21:8c:59:b7:ed:61:73:47:42:cf:03:98:
         30:52:97:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QzgzQTExMC8GA1UEBRMoN0I1MzRBRUREMzBGMjQ0NTk1ODgwRDY0RTc2NDZCRDEz
MzM0QUZCNDAeFw0yNDEyMjUwNjEyNDFaFw0yNTAxMDEwNjEyNDFaMBgxFjAUBgNV
BAMTDTY3NmJhMjU5LTRiNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDokPrhdg9Y6YHganqTLRJ+L73hQi5tCZalsKEvzE9gaFj0cNINnRw+ppuJ7vhJ
ri+T0/oZKIXkUnpal/53ZhCopDjTt7KW1iSxzSqdjnHWeFic4j6Y0OActUK3HRve
K7yZlVQSu5MY0ny8ul+98uUrQ22JE/w30jJAzebU4wUbyKrn4mp5t7rzZppXqX+O
/PdbcMDFwR0iGVZdcPNSSJ9y5b8eAikpM08GqlnIFUswuZl+Pv+FDgiPU4mjoGOD
tbZEPGfI1Xoa+QIsFOyFg+fzLWcJF8hSce/RLdlLOMGQ1Yph1BLBjWkiTtmluyqG
QRTBQgZKsa/F/9pV0fRlfp81AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUde1ajprY
A6wDcbf5nV/9D5MQu+QwHwYDVR0jBBgwFoAUe1NK7dMPJEWViA1k52Rr0TM0r7Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDODNBL0NCNjJBMEFBQjY5
RDExRUZBODEzOTg0QkM0RjlBRTAyL2UxTks3ZE1QSkVXVmlBMWs1MlJyMFRNMHI3
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZTFOSzdkTVBKRVdWaUExazUyUnIwVE0wcjdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
ODNBL0NCNjJBMEFBQjY5RDExRUZBODEzOTg0QkM0RjlBRTAyL2UxTks3ZE1QSkVX
VmlBMWs1MlJyMFRNMHI3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFW2z7H6roAmz9BuQYJ5xXplxVRCpJlGQUv5wahycwpY7e0qC1RICcvR
J3ALL6HqMdGjxdBUHiKmPie7dNwDXdPsXZb1cyRZcOwtZj6b7deq7lMsfm0FltTt
z9O1cvp7uWOYcMCo4XeuVhNbRDF8NannK5GEIYgf3B2LQNeG2RmaWN8mrEs339Pj
UYQu8I1c4gtfmC4cZMdIPnzkqX10WbnSMGh0XYunfWjWfzhwGoOG/Uq6pT+y+X6w
1Ck+VYXqWhUqdkhNVaCyHbD0K9RwtX8TpT5B8ZXVNZ3aN8KHCI42IlGwBjmYvAwb
C8Ok+KJUYCGMWbftYXNHQs8DmDBSl8E=
-----END CERTIFICATE-----
Generated at Wed Dec 25 08:01:10 2024 by rpki-client on console-fra.rpki-client.org