Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          mu6zEpVqPDnyz55q8fARWO/TlK+9gukzGJCGMfGInKw=
Subject key identifier:   54:71:19:7F:D6:67:5A:5A:D9:B1:46:11:CE:9B:FB:70:2F:82:69:7F
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       05D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          05C4
Signing time:             Sun 24 Nov 2024 22:28:38 +0000
Manifest this update:     Sun 24 Nov 2024 22:28:37 +0000
Manifest next update:     Sun 01 Dec 2024 22:28:37 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: x0/8O4RoSOeqANmiD6bNaXF/AscKE/9YxLa4aeAOV2w=)
                          2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: n7yymcew5hzT7njduUJvlGlJ1K2WBEkhMccGENvjdEE=)
                          3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: MuATCGcZOkbB2MHaT4sYHUzXSWtgP+zm9vYxzgJtTks=)
                          4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: zyxFYh58VCphZ88XBtO8boEFXBQoIhSIgP+BmjV4mDc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Nov 24 22:28:37 2024 GMT
            Not After : Dec  1 22:28:37 2024 GMT
        Subject: CN=6743a895-be5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:17:23:78:6b:4b:16:5b:9f:da:56:1d:e3:
                    5b:aa:59:d3:a2:83:de:18:f0:81:e6:97:db:04:16:
                    fb:ba:a8:3b:8a:6b:3f:b3:df:31:64:42:e5:d9:4e:
                    74:c8:61:3f:e0:24:2b:5d:56:a9:1a:33:a6:4d:c8:
                    6c:2e:b3:75:bb:1d:fc:5e:4f:d1:71:83:eb:3f:5e:
                    29:e9:a6:42:c8:30:da:0a:9c:b3:1d:c3:b2:d4:63:
                    a7:64:ba:b7:7c:51:19:11:56:2f:aa:a0:10:24:39:
                    92:9c:5a:9d:b7:d5:27:2b:4f:80:88:70:75:1e:0d:
                    0e:39:06:18:fe:53:78:80:f2:e6:2a:de:4f:d0:47:
                    71:83:72:e5:c3:04:59:94:7f:86:79:31:47:10:aa:
                    9b:14:3f:0e:21:52:08:55:49:f8:f6:4c:31:ad:01:
                    de:92:f3:23:c9:42:fd:53:61:9e:13:c1:84:02:c8:
                    d4:7c:d4:36:b9:e1:5d:dc:ea:e9:5a:c5:2a:c9:24:
                    41:3f:0b:85:34:3e:eb:79:54:6f:35:9f:bd:33:67:
                    64:fd:42:b5:8a:74:6f:eb:a6:49:2c:41:d0:80:a4:
                    2e:f9:a1:07:62:2f:ce:58:5d:23:48:df:f1:09:b9:
                    87:37:14:57:e1:49:61:4e:e3:f6:70:ef:64:4b:8d:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:19:7F:D6:67:5A:5A:D9:B1:46:11:CE:9B:FB:70:2F:82:69:7F
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:56:0f:04:fd:00:96:e5:b5:c6:62:fe:25:12:6b:52:a9:c8:
         60:2a:fd:20:bd:a2:3d:d6:3e:88:ca:91:d3:6e:90:38:ab:b4:
         b3:4c:23:95:0b:d5:33:5c:e5:4d:a9:7d:b1:0c:f6:3f:75:1d:
         58:b7:25:68:c7:d1:e1:d1:d1:28:a2:72:88:78:a8:8d:11:e9:
         30:47:cd:38:a9:32:85:01:c6:d2:3b:bc:fe:b4:08:50:c1:2b:
         4f:3e:1c:2f:ea:f6:1e:6a:e3:3c:f3:2a:93:aa:7c:0c:8f:e4:
         07:ca:9b:80:a5:21:59:cf:d7:1a:4c:10:8d:18:20:47:68:51:
         ad:9f:4c:aa:c4:6d:00:36:14:64:52:6e:2f:88:af:f7:04:67:
         be:bb:3e:9a:68:b7:a6:ba:43:c6:6c:54:fb:11:4b:7b:78:e4:
         fb:69:76:e5:51:5a:28:ab:12:48:d0:f4:1d:5b:1b:9d:79:35:
         49:48:8e:79:ec:e6:c6:7f:5f:d0:b3:8a:c3:99:46:e0:09:fd:
         55:33:d3:47:5b:43:55:00:cb:47:ac:ef:7c:da:37:8e:1a:db:
         92:22:e4:cd:f7:e8:5b:72:48:03:82:9b:86:a8:f8:b4:ab:7c:
         ec:99:d9:c2:92:ba:c8:f0:ce:76:0f:87:b6:24:85:d0:ab:5c:
         c1:10:f8:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjQxMTI0MjIyODM3WhcNMjQxMjAxMjIyODM3WjAYMRYwFAYD
VQQDEw02NzQzYTg5NS1iZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfYXI3hrSxZbn9pWHeNbqlnTooPeGPCB5pfbBBb7uqg7ims/s98xZELl2U50
yGE/4CQrXVapGjOmTchsLrN1ux38Xk/RcYPrP14p6aZCyDDaCpyzHcOy1GOnZLq3
fFEZEVYvqqAQJDmSnFqdt9UnK0+AiHB1Hg0OOQYY/lN4gPLmKt5P0Edxg3LlwwRZ
lH+GeTFHEKqbFD8OIVIIVUn49kwxrQHekvMjyUL9U2GeE8GEAsjUfNQ2ueFd3Orp
WsUqySRBPwuFND7reVRvNZ+9M2dk/UK1inRv66ZJLEHQgKQu+aEHYi/OWF0jSN/x
CbmHNxRX4UlhTuP2cO9kS42wEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRxGX/W
Z1pa2bFGEc6b+3Avgml/MB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW
TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYVg8E/QCW5bXGYv4lEmtSqchgKv0gvaI91j6IypHTbpA4q7SzTCOV
C9UzXOVNqX2xDPY/dR1YtyVox9Hh0dEoonKIeKiNEekwR804qTKFAcbSO7z+tAhQ
wStPPhwv6vYeauM88yqTqnwMj+QHypuApSFZz9caTBCNGCBHaFGtn0yqxG0ANhRk
Um4viK/3BGe+uz6aaLemukPGbFT7EUt7eOT7aXblUVooqxJI0PQdWxudeTVJSI55
7ObGf1/Qs4rDmUbgCf1VM9NHW0NVAMtHrO982jeOGtuSIuTN9+hbckgDgpuGqPi0
q3zsmdnCkrrI8M52D4e2JIXQq1zBEPht
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:45 2024 by rpki-client on console-fra.rpki-client.org