Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          2ddS16VzllHj9CNfRIjPk1oq+6s5l13pzpj6pGUY6c4=
Subject key identifier:   77:F9:BA:3C:F2:9B:2E:17:B0:93:51:F5:7E:B8:19:34:8A:D6:B7:C0
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       15A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          159E
Signing time:             Fri 22 Nov 2024 16:48:45 +0000
Manifest this update:     Fri 22 Nov 2024 16:48:45 +0000
Manifest next update:     Fri 29 Nov 2024 16:48:45 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: imxgvxbPfU5dljgtb6b7PgqfcbP8uspnT82fwXO7Ric=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: /hIx3mzyw1pxmzQaCmAbiibJg316E47fCKoUq9VHgdQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5543 (0x15a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Nov 22 16:48:45 2024 GMT
            Not After : Nov 29 16:48:45 2024 GMT
        Subject: CN=6740b5ed-38e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:94:9c:c6:e6:d9:32:4b:d0:c6:bf:94:1c:
                    14:af:5d:a0:af:24:5e:44:51:99:de:4d:83:9b:3b:
                    24:e3:3a:fd:9b:0b:7a:f1:97:58:f1:b8:63:d5:a6:
                    70:89:68:72:8a:f3:19:63:8b:76:d0:d8:97:26:1b:
                    26:fb:0b:09:b8:ac:8d:95:d9:26:c6:61:12:42:c8:
                    e6:c9:de:30:ad:75:1d:8c:b6:56:75:7e:85:1f:44:
                    3b:41:c6:48:04:03:76:a3:47:b6:f5:09:bb:45:d5:
                    77:3b:68:ed:a8:72:cc:60:cb:78:b9:19:d9:82:16:
                    5e:1f:f5:6f:3f:27:22:f4:e5:09:eb:4e:61:d6:a6:
                    dd:16:a5:d5:45:9f:0b:c1:4f:ee:5d:85:fa:a0:05:
                    35:1b:e8:80:b2:40:94:32:de:be:7a:9d:46:3d:8d:
                    9b:b4:d0:36:c1:b1:5d:3e:76:d1:7c:52:38:ed:3a:
                    7f:92:84:20:71:22:68:21:26:b6:f7:76:9e:75:d3:
                    28:07:a9:b3:50:b2:44:af:04:f6:00:a5:8c:fb:5c:
                    85:ab:46:a2:81:d8:09:5e:9a:cd:d6:d3:23:a5:f7:
                    06:4a:fe:de:ee:79:4f:fa:39:18:14:3f:a5:33:b2:
                    f6:af:cc:15:40:26:9f:26:51:56:d9:ff:24:86:b3:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F9:BA:3C:F2:9B:2E:17:B0:93:51:F5:7E:B8:19:34:8A:D6:B7:C0
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:a0:f1:a4:ad:a9:ea:a0:76:39:ad:3b:a0:85:bb:57:9f:
         25:bc:05:7e:21:52:90:53:00:7f:17:ac:72:59:ab:9c:cf:a4:
         7b:08:77:80:db:fe:a0:70:2a:7b:40:09:72:0b:27:29:c5:f7:
         9c:2f:93:6e:d0:bb:67:b9:3e:ac:b6:11:1f:15:bf:d5:e0:0a:
         37:8a:93:18:8f:c3:45:a0:1d:f5:b3:25:bc:b3:4e:9f:1a:a2:
         2b:56:b0:6e:2d:17:d7:4c:9b:83:38:f5:57:b4:9d:52:21:31:
         61:26:c6:4c:08:e8:2b:cf:ce:36:8e:5d:13:3b:b9:de:6c:df:
         06:c5:fd:4a:63:77:f0:e1:73:01:10:90:29:5f:00:9e:13:09:
         e6:fa:b8:ed:a5:2d:97:d7:0a:6f:9e:fc:93:37:cd:23:cc:8f:
         48:d5:c9:cd:28:b0:b5:03:25:de:c5:f8:d2:89:fc:83:71:f2:
         04:19:3e:2e:cf:eb:2a:f9:dc:9d:6b:47:27:2f:64:91:e8:d4:
         41:61:a5:63:82:03:bd:c6:bd:1e:78:72:b0:33:5e:85:62:2e:
         3c:9b:ac:57:e4:e5:a0:d7:c6:c8:35:5d:d8:3a:cc:c0:19:e3:
         6c:c2:ce:df:f8:9d:75:3a:7c:bc:0e:a6:15:8c:0e:93:6d:c4:
         d7:91:82:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB
MjY3OTdDOTQwHhcNMjQxMTIyMTY0ODQ1WhcNMjQxMTI5MTY0ODQ1WjAYMRYwFAYD
VQQDEw02NzQwYjVlZC0zOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy92UnMbm2TJL0Ma/lBwUr12gryReRFGZ3k2Dmzsk4zr9mwt68ZdY8bhj1aZw
iWhyivMZY4t20NiXJhsm+wsJuKyNldkmxmESQsjmyd4wrXUdjLZWdX6FH0Q7QcZI
BAN2o0e29Qm7RdV3O2jtqHLMYMt4uRnZghZeH/VvPyci9OUJ605h1qbdFqXVRZ8L
wU/uXYX6oAU1G+iAskCUMt6+ep1GPY2btNA2wbFdPnbRfFI47Tp/koQgcSJoISa2
93aeddMoB6mzULJErwT2AKWM+1yFq0aigdgJXprN1tMjpfcGSv7e7nlP+jkYFD+l
M7L2r8wVQCafJlFW2f8khrOXjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf5ujzy
my4XsJNR9X64GTSK1rfAMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE
MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f
TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxnaDxpK2p6qB2Oa07oIW7V58lvAV+IVKQUwB/F6xyWaucz6R7CHeA
2/6gcCp7QAlyCycpxfecL5Nu0LtnuT6sthEfFb/V4Ao3ipMYj8NFoB31syW8s06f
GqIrVrBuLRfXTJuDOPVXtJ1SITFhJsZMCOgrz842jl0TO7nebN8Gxf1KY3fw4XMB
EJApXwCeEwnm+rjtpS2X1wpvnvyTN80jzI9I1cnNKLC1AyXexfjSifyDcfIEGT4u
z+sq+dyda0cnL2SR6NRBYaVjggO9xr0eeHKwM16FYi48m6xX5OWg18bINV3YOszA
GeNsws7f+J11Ony8DqYVjA6TbcTXkYLL
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org