Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File:                     99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier:          pFFSDSu44xku9UQ+n3uptehk2ZIc0PQSsXsd0Yo7wFc=
Subject key identifier:   08:46:D6:4F:B9:50:53:07:AD:61:25:0D:E4:73:62:05:43:3A:2A:25
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       1492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number:          146B
Signing time:             Wed 20 Nov 2024 16:51:14 +0000
Manifest this update:     Wed 20 Nov 2024 16:51:14 +0000
Manifest next update:     Wed 27 Nov 2024 16:51:14 +0000
Files and hashes:         1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: 8zSCymoLC0Wo3ZYAN5JfrOVfXVD7X5Ol4ZXSmXRdCx8=)
                          2: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: uS/KrDEFC7iqKMiS9Y2U7HdiB60w0wJhc2LLnQsQVWs=)
                          3: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: R6pljQF1v0TIi/bTrrOuqqi1FBdqbzDk+zTv0UZCDuI=)
                          4: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: /hWvI/RGNzRFNiiVo7H5wl0U608wQrrqfT3hjh2kWqo=)
                          5: A2DA1898656911E889701022C4F9AE02.roa (hash: QYbquK62XWSTn4PRkMXoR4nfMTLLaW92RH4A36uEYDs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5266 (0x1492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Nov 20 16:51:14 2024 GMT
            Not After : Nov 27 16:51:14 2024 GMT
        Subject: CN=673e1382-672b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f0:ce:63:3f:58:6f:bb:64:77:8f:80:37:ea:
                    1b:2e:3f:c0:a3:d3:4d:0e:e0:70:8c:22:a2:d7:0d:
                    f7:46:09:d7:03:d8:43:8c:a5:3a:ff:d0:f6:13:82:
                    3d:3e:b0:cc:af:c8:26:76:7a:d7:56:4f:26:fd:86:
                    be:0d:da:1a:91:6a:d4:f2:c2:c1:6b:9e:fe:02:eb:
                    32:05:a8:d7:9c:71:5b:1b:0a:ea:1c:06:b2:46:3d:
                    47:ea:37:04:c7:f7:0d:9e:7e:3d:03:5f:cc:d6:f8:
                    cd:7e:92:0f:20:f6:4f:11:0c:fb:cc:c3:ea:cc:0f:
                    2e:17:03:39:1e:40:a4:f8:92:b3:30:b0:c0:2c:52:
                    54:a5:73:6f:18:b7:36:96:c7:36:da:34:2c:a8:69:
                    a9:5b:48:1a:79:5f:53:6c:8a:fd:e4:39:29:0d:56:
                    2f:c5:db:74:6d:ca:28:39:ea:3f:34:45:f8:1b:62:
                    b2:df:52:ee:c2:2a:55:c8:30:b5:ff:8d:ee:5e:84:
                    2c:bf:f5:a8:32:53:65:74:6f:82:dd:9d:6f:44:bc:
                    1f:55:52:04:67:17:25:57:f0:98:45:75:46:e5:f7:
                    ed:21:b6:1f:8b:28:01:38:28:ce:7a:d7:94:c6:78:
                    e1:9d:35:54:95:7d:14:3f:3b:fc:65:de:1b:99:9b:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:D6:4F:B9:50:53:07:AD:61:25:0D:E4:73:62:05:43:3A:2A:25
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4b:88:c7:60:22:92:a7:b7:71:12:fc:14:59:6d:25:d7:a9:
         31:e1:4a:a8:f7:6e:51:f7:d7:ee:dc:00:b2:0e:75:86:5e:f8:
         bf:5c:2c:82:cf:be:12:5f:b7:70:bb:3b:57:47:fb:84:77:91:
         65:b4:1f:94:a5:79:c9:3a:86:b9:9a:10:5a:35:f2:dd:65:ee:
         47:c2:5f:b9:d9:5d:32:50:f5:68:13:18:af:af:01:b4:ee:bc:
         b1:86:af:d5:6a:03:59:83:c6:89:ac:dc:0b:7c:a9:49:b1:2a:
         1b:fc:31:ab:3b:57:d2:3b:b3:cb:2b:57:ab:67:72:7f:9a:49:
         e6:5e:59:ec:c9:b9:e2:a2:2e:75:28:e6:59:30:d0:2c:9b:65:
         80:8a:34:9b:fa:c9:8d:bc:b1:75:c7:f6:8d:32:4f:99:18:c8:
         74:67:93:28:17:4e:b2:04:b8:c3:12:83:83:f4:4b:f4:f6:e3:
         45:82:16:aa:ab:20:f6:37:aa:f8:73:92:7d:69:b3:6b:d2:1c:
         fd:ff:0a:18:e2:67:57:3a:f5:62:93:7d:c6:11:ee:3c:ac:f4:
         79:41:d7:60:4f:8a:ca:3e:f2:f7:ff:77:5d:c3:72:b3:c8:30:
         2a:0b:71:00:e5:51:eb:fe:ab:d0:f7:c4:da:ed:24:2b:ac:3d:
         79:fc:57:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2
MTE5QzM0QTYwHhcNMjQxMTIwMTY1MTE0WhcNMjQxMTI3MTY1MTE0WjAYMRYwFAYD
VQQDEw02NzNlMTM4Mi02NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9fDOYz9Yb7tkd4+AN+obLj/Ao9NNDuBwjCKi1w33RgnXA9hDjKU6/9D2E4I9
PrDMr8gmdnrXVk8m/Ya+DdoakWrU8sLBa57+AusyBajXnHFbGwrqHAayRj1H6jcE
x/cNnn49A1/M1vjNfpIPIPZPEQz7zMPqzA8uFwM5HkCk+JKzMLDALFJUpXNvGLc2
lsc22jQsqGmpW0gaeV9TbIr95DkpDVYvxdt0bcooOeo/NEX4G2Ky31LuwipVyDC1
/43uXoQsv/WoMlNldG+C3Z1vRLwfVVIEZxclV/CYRXVG5fftIbYfiygBOCjOeteU
xnjhnTVUlX0UPzv8Zd4bmZuPiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhG1k+5
UFMHrWElDeRzYgVDOiolMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB
NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDg0NS9EQzcxMDBFQTVBNTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZq
MU10ai01TGt5Z2RoR2NOS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeS4jHYCKSp7dxEvwUWW0l16kx4Uqo925R99fu3ACyDnWGXvi/XCyC
z74SX7dwuztXR/uEd5FltB+UpXnJOoa5mhBaNfLdZe5Hwl+52V0yUPVoExivrwG0
7ryxhq/VagNZg8aJrNwLfKlJsSob/DGrO1fSO7PLK1erZ3J/mknmXlnsybnioi51
KOZZMNAsm2WAijSb+smNvLF1x/aNMk+ZGMh0Z5MoF06yBLjDEoOD9Ev09uNFghaq
qyD2N6r4c5J9abNr0hz9/woY4mdXOvVik33GEe48rPR5QddgT4rKPvL3/3ddw3Kz
yDAqC3EA5VHr/qvQ98Ta7SQrrD15/FeZ
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:54 2024 by rpki-client on console-fra.rpki-client.org