Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File:                     wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier:          3LbDK+w2zS5tk3fY1z0LorSlKOkuze/QiYufHZ6Q0p8=
Subject key identifier:   0F:0F:E4:FD:4E:68:15:6B:57:9C:FD:44:F7:77:B1:2B:26:0D:34:37
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer:       /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial:       1729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number:          16F6
Signing time:             Fri 22 Nov 2024 16:39:30 +0000
Manifest this update:     Fri 22 Nov 2024 16:39:29 +0000
Manifest next update:     Fri 29 Nov 2024 16:39:29 +0000
Files and hashes:         1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: y4QKcy+YOk6sjqA5ACJSPiMT45L4FB+F3XVSZy4anIc=)
                          2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: VBATkXjYIVoH0C4iNeRjPySzIZVhyo2JDikcE+6Jvbs=)
                          3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: nGeKeTUPgYPuvBrf2CFwlKqYex4DQBySE4sY9K3KqjM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
                          rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5929 (0x1729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
        Validity
            Not Before: Nov 22 16:39:29 2024 GMT
            Not After : Nov 29 16:39:29 2024 GMT
        Subject: CN=6740b3c1-84b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:99:3c:f9:7c:55:30:83:e4:cd:52:ed:d0:
                    ae:df:b4:d9:71:af:f6:9e:b6:1a:6b:d3:b1:18:1f:
                    bd:75:e2:e2:67:3b:51:e2:3d:c5:15:78:ec:a4:39:
                    e9:02:93:0b:6b:53:a2:49:37:b2:92:89:76:5a:4f:
                    db:9b:5e:10:e1:b2:85:e9:53:44:bf:ee:d6:9e:f9:
                    fa:75:b8:19:43:99:67:ad:f9:2a:34:de:7a:46:d1:
                    00:6f:eb:e8:0c:71:b1:44:e8:3f:a4:e8:0e:c7:79:
                    b8:cf:9e:b9:f5:e9:08:d4:85:b1:3a:56:15:c1:62:
                    1e:8e:bf:a4:07:90:c1:98:d0:30:26:85:b6:a2:59:
                    53:82:11:f1:de:40:1c:11:4d:94:d5:9d:75:8d:82:
                    9e:25:9d:d1:d2:9a:c7:0b:c6:d8:bc:fa:76:c6:1e:
                    a0:e1:42:93:e3:c9:43:df:ba:61:c7:e0:2d:5a:1c:
                    84:5d:92:29:aa:82:f7:a4:e4:a9:61:ec:1d:13:e2:
                    ac:5f:65:b0:1e:81:bd:15:9e:f1:cd:05:2c:cd:d8:
                    3f:84:4b:31:cd:52:fe:27:fd:7e:03:37:14:bb:b1:
                    0d:c9:d6:e3:28:a3:54:08:62:25:b0:b9:57:2c:13:
                    03:e0:08:3f:5b:12:e9:a4:2a:52:50:69:71:86:af:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0F:E4:FD:4E:68:15:6B:57:9C:FD:44:F7:77:B1:2B:26:0D:34:37
            X509v3 Authority Key Identifier:
                keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:36:db:bc:08:94:e9:2a:75:1d:96:1a:7b:d2:51:d2:6e:
         f1:2f:78:99:40:a0:0c:03:0f:49:93:8b:10:50:4e:96:47:27:
         0e:64:51:ab:8a:8a:a8:41:1b:19:86:82:97:d8:ed:f1:bc:14:
         33:31:4a:a8:a6:22:42:6b:ec:98:d5:c2:66:26:b1:e9:54:b7:
         5c:4c:75:90:a1:2b:ad:ac:2b:4d:f2:d7:cc:ad:3f:f4:d2:94:
         00:d9:ec:f9:a1:67:a7:89:eb:5e:ff:ef:c9:35:3c:a4:10:27:
         25:db:d6:0f:d5:5c:5d:b1:41:37:72:87:4f:c4:5c:91:cc:d6:
         95:3f:f3:a9:73:51:ff:cb:d2:5c:ac:93:87:1f:b3:0e:0a:f2:
         bc:26:b5:34:e1:be:9f:5f:12:3b:4d:91:c3:c8:19:dc:2e:d2:
         f5:e9:c6:e5:8a:7e:36:e6:7d:c6:79:f5:27:42:f7:3b:dc:fa:
         58:75:e7:63:60:37:4f:2d:1a:cf:58:9d:4e:3d:8f:cd:68:60:
         cf:fd:08:8d:00:ae:6e:f4:1b:96:a6:78:75:4f:d0:7b:91:1c:
         5e:6a:72:73:1c:b2:45:0d:a5:df:61:39:c5:39:45:92:e6:8b:
         6e:f0:04:24:87:56:4b:8b:98:4f:1d:32:cf:82:3c:1c:e9:0a:
         4e:fd:a9:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC
Qzc5QjlGQzIwHhcNMjQxMTIyMTYzOTI5WhcNMjQxMTI5MTYzOTI5WjAYMRYwFAYD
VQQDEw02NzQwYjNjMS04NGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UaZPPl8VTCD5M1S7dCu37TZca/2nrYaa9OxGB+9deLiZztR4j3FFXjspDnp
ApMLa1OiSTeykol2Wk/bm14Q4bKF6VNEv+7Wnvn6dbgZQ5lnrfkqNN56RtEAb+vo
DHGxROg/pOgOx3m4z5659ekI1IWxOlYVwWIejr+kB5DBmNAwJoW2ollTghHx3kAc
EU2U1Z11jYKeJZ3R0prHC8bYvPp2xh6g4UKT48lD37phx+AtWhyEXZIpqoL3pOSp
YewdE+KsX2WwHoG9FZ7xzQUszdg/hEsxzVL+J/1+AzcUu7ENydbjKKNUCGIlsLlX
LBMD4Ag/WxLppCpSUGlxhq8XaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8P5P1O
aBVrV5z9RPd3sSsmDTQ3MB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw
QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ
WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYLTbbvAiU6Sp1HZYae9JR0m7xL3iZQKAMAw9Jk4sQUE6WRycOZFGr
ioqoQRsZhoKX2O3xvBQzMUqopiJCa+yY1cJmJrHpVLdcTHWQoSutrCtN8tfMrT/0
0pQA2ez5oWeniete/+/JNTykECcl29YP1VxdsUE3codPxFyRzNaVP/Opc1H/y9Jc
rJOHH7MOCvK8JrU04b6fXxI7TZHDyBncLtL16cblin425n3GefUnQvc73PpYdedj
YDdPLRrPWJ1OPY/NaGDP/QiNAK5u9BuWpnh1T9B7kRxeanJzHLJFDaXfYTnFOUWS
5otu8AQkh1ZLi5hPHTLPgjwc6QpO/am5
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org