Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
File:                     _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json)
Hash identifier:          b0l48SamInTb9gZ2I+ceX7D36ot/7qtzvg/kylZlhI0=
Subject key identifier:   E7:91:B0:B8:2A:50:36:76:5C:3A:BB:C3:74:3C:70:F8:E0:34:87:B4
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Certificate issuer:       /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
Manifest number:          53
Signing time:             Thu 21 Nov 2024 05:18:09 +0000
Manifest this update:     Thu 21 Nov 2024 05:18:08 +0000
Manifest next update:     Thu 28 Nov 2024 05:18:08 +0000
Files and hashes:         1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: tsUFeiyEdYxaFUCAxoHKnngC//4+Nfelr444zt/+FCk=)
                          2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: GayQFIjNRG0i4Xav60C+tvTYkjjCA22TmJl4oiKb6AY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
        Validity
            Not Before: Nov 21 05:18:08 2024 GMT
            Not After : Nov 28 05:18:08 2024 GMT
        Subject: CN=673ec290-f4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:cc:c9:0e:ad:78:d8:79:e7:28:79:4a:6f:
                    9e:4a:51:a4:90:a2:5b:dd:7c:0d:ca:11:df:ef:d0:
                    e0:8f:0d:32:ee:25:94:d9:f9:dc:bc:8c:ac:fa:4b:
                    04:2d:56:79:e2:8f:4b:7b:97:0d:c6:d1:06:68:b7:
                    d0:fa:25:89:18:20:c4:97:0b:89:84:f1:2a:62:8c:
                    a4:fb:16:e5:ad:14:e1:ca:42:e0:0f:22:42:fd:ee:
                    0f:4b:3e:9e:8e:57:68:39:7d:e2:6c:97:3a:d8:ec:
                    33:af:87:c5:b3:d3:8e:61:e4:b3:20:24:d6:84:b1:
                    c8:be:d4:23:de:e9:f8:eb:6a:7e:22:c6:76:52:d6:
                    42:80:19:88:fb:37:ba:50:d7:1e:27:33:1c:f3:77:
                    9d:4d:48:5d:8e:36:1e:c8:86:79:2f:7c:9e:20:0b:
                    46:85:0d:f3:7c:90:9c:5c:8f:4e:94:4d:c7:14:c2:
                    a9:ba:d3:6c:db:fe:a6:94:53:20:1a:26:e4:cf:d1:
                    33:60:e2:be:d5:e6:d4:02:42:30:83:95:04:7d:cc:
                    f3:d7:ac:56:4f:da:72:17:02:75:1f:22:a6:33:a4:
                    44:04:03:75:7a:e4:f1:57:2a:2f:7e:aa:be:11:30:
                    39:5b:66:f4:d1:76:dd:49:18:95:cc:3a:77:50:ac:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:B0:B8:2A:50:36:76:5C:3A:BB:C3:74:3C:70:F8:E0:34:87:B4
            X509v3 Authority Key Identifier:
                keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:87:41:94:f4:1f:12:2f:7f:19:d6:78:de:f8:26:b6:b0:
         75:64:29:bc:4a:ca:35:00:4d:63:2e:18:40:b7:ec:98:46:f0:
         23:aa:37:2c:30:2d:c9:97:8c:5f:9e:c9:66:6b:23:72:00:1f:
         13:05:a2:9c:d9:d6:99:e8:25:1c:e9:ad:11:ae:50:bc:53:7a:
         77:5e:60:ad:61:a9:f1:3e:d4:98:09:7f:04:d3:48:fe:4f:d8:
         c5:e6:b4:d1:75:e7:6e:0c:9b:d0:5c:cd:1f:b7:ba:d6:87:0e:
         66:82:28:17:d6:4b:11:f1:2f:4a:fe:df:04:39:fd:bf:eb:18:
         a2:75:47:8c:bb:47:a4:f9:ee:01:96:f2:4b:84:0b:08:df:72:
         24:26:a4:b5:89:ec:31:32:a8:57:21:e9:8e:ea:87:02:18:63:
         30:a0:40:d9:5d:52:b7:0b:e3:6b:91:ff:da:01:6f:f5:34:d1:
         cb:f6:4a:14:3b:b8:6e:84:06:0d:aa:ad:32:d8:39:83:f3:35:
         e4:b6:38:29:b6:a1:9c:3a:97:3a:30:dd:1c:d4:e2:c2:c0:52:
         49:00:7d:91:50:df:cf:f3:2b:59:bc:0d:cb:ba:68:62:81:9b:
         a6:41:c4:6e:69:fb:00:df:9a:3c:4e:be:e0:01:b4:65:e1:8c:
         87:00:15:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MDRENjExMC8GA1UEBRMoRkYxRkQ1Qzk0RjEyRjM1RkFEMTNBREYyNzk5QTg5OEZE
RTA2Q0FDOTAeFw0yNDExMjEwNTE4MDhaFw0yNDExMjgwNTE4MDhaMBgxFjAUBgNV
BAMTDTY3M2VjMjkwLWY0ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDYMzJDq142HnnKHlKb55KUaSQolvdfA3KEd/v0OCPDTLuJZTZ+dy8jKz6SwQt
Vnnij0t7lw3G0QZot9D6JYkYIMSXC4mE8SpijKT7FuWtFOHKQuAPIkL97g9LPp6O
V2g5feJslzrY7DOvh8Wz045h5LMgJNaEsci+1CPe6fjran4ixnZS1kKAGYj7N7pQ
1x4nMxzzd51NSF2ONh7IhnkvfJ4gC0aFDfN8kJxcj06UTccUwqm602zb/qaUUyAa
JuTP0TNg4r7V5tQCQjCDlQR9zPPXrFZP2nIXAnUfIqYzpEQEA3V65PFXKi9+qr4R
MDlbZvTRdt1JGJXMOndQrHXlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU55GwuCpQ
NnZcOrvDdDxw+OA0h7QwHwYDVR0jBBgwFoAU/x/VyU8S81+tE63yeZqJj94Gyskw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwNEQ2L0I2QzA5MzRDMzFB
OTExRUZCNkZCMUQ2MEM0RjlBRTAyL194X1Z5VThTODEtdEU2M3llWnFKajk0R3lz
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX3hfVnlVOFM4MS10RTYzeWVacUpqOTRHeXNrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw
NEQ2L0I2QzA5MzRDMzFBOTExRUZCNkZCMUQ2MEM0RjlBRTAyL194X1Z5VThTODEt
dEU2M3llWnFKajk0R3lzay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKAYh0GU9B8SL38Z1nje+Ca2sHVkKbxKyjUATWMuGEC37JhG8COqNyww
LcmXjF+eyWZrI3IAHxMFopzZ1pnoJRzprRGuULxTendeYK1hqfE+1JgJfwTTSP5P
2MXmtNF1524Mm9BczR+3utaHDmaCKBfWSxHxL0r+3wQ5/b/rGKJ1R4y7R6T57gGW
8kuECwjfciQmpLWJ7DEyqFch6Y7qhwIYYzCgQNldUrcL42uR/9oBb/U00cv2ShQ7
uG6EBg2qrTLYOYPzNeS2OCm2oZw6lzow3RzU4sLAUkkAfZFQ38/zK1m8Dcu6aGKB
m6ZBxG5p+wDfmjxOvuABtGXhjIcAFeo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org