Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
File:                     4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json)
Hash identifier:          Tj+7srk5hOsstHfjf8uaIjJV8lpbiClEKgQ3zBPmkkE=
Subject key identifier:   E8:5B:76:E4:54:55:C3:CA:C4:B8:01:6B:E1:CF:58:D7:4B:F7:9E:91
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       35C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
Manifest number:          34E3
Signing time:             Wed 20 Nov 2024 14:29:15 +0000
Manifest this update:     Wed 20 Nov 2024 14:29:15 +0000
Manifest next update:     Wed 27 Nov 2024 14:29:15 +0000
Files and hashes:         1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: kXaai+Gb9NV2p7yPf8phYfpn8esF5MT7SMJXGauVXUs=)
                          2: 77E06D1AA40311EF8998B635C4F9AE02.roa (hash: 9HjOiTTPdQPnwPhOAc/iWZi4RJ25zyBHEgfyIlNASEA=)
                          3: 3DAE10449AB111EF8F48A638C4F9AE02.roa (hash: OsqohpJtpvG+LCXDvKB7fj7XRJ+Ygy1HNOnkyD1YdgE=)
                          4: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=)
                          5: 4F17591C7A4011EFBD861118C4F9AE02.roa (hash: tuME09BR1YGFAnql3LFRzhwbKyOA+0gHS+nharCOusg=)
                          6: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=)
                          7: 82714490765211EF8ADD7474C4F9AE02.roa (hash: JEKBigdfq5ibMAGzfaPDiwOq8XtNE9Mn0hljSNM2b7s=)
                          8: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=)
                          9: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=)
                          10: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=)
                          11: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=)
                          12: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=)
                          13: 99CB464692B711EF93751E25C4F9AE02.roa (hash: QKiM8VrFZnL/Lc0r4N9mlIoRTYDOc6hhP7chqPzAaR8=)
                          14: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=)
                          15: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=)
                          16: 747C7164462C11ED90035452C4F9AE02.roa (hash: yNkp/KPSLhUlv+dxzffeqFiT5gCKYMvPJXUBj6wHW0A=)
                          17: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=)
                          18: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=)
                          19: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=)
                          20: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=)
                          21: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=)
                          22: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=)
                          23: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=)
                          24: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13760 (0x35c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Nov 20 14:29:15 2024 GMT
            Not After : Nov 27 14:29:15 2024 GMT
        Subject: CN=673df23b-28b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:cc:09:bb:39:b1:8b:5c:3d:82:55:ca:61:
                    12:49:a4:75:62:9f:ab:3e:30:6d:5b:83:df:32:a7:
                    f1:c6:41:ce:2e:08:a8:b2:62:43:64:b6:28:83:83:
                    10:6b:d5:57:6f:4a:ef:36:02:54:7e:fe:03:f1:59:
                    c9:21:1e:51:2e:d1:8a:88:e9:97:c0:03:6c:48:82:
                    ed:6a:f9:d3:09:99:66:90:81:0d:ec:bf:b0:5a:72:
                    30:c2:9a:a0:20:3a:d4:21:97:c0:c5:36:be:02:11:
                    2f:06:f4:ea:96:51:65:28:45:36:d3:e6:92:54:30:
                    cc:45:b2:59:ff:c9:ca:6f:70:04:c0:c4:14:7d:35:
                    9d:c3:5d:ba:96:52:df:63:7d:c8:14:bb:c0:25:c3:
                    ce:14:ae:de:9d:8c:82:53:9b:b3:19:d3:54:e4:f8:
                    1c:35:9d:52:4f:ed:eb:72:38:bc:de:ec:c0:8d:72:
                    53:35:db:c2:f4:52:23:5c:fe:c4:aa:61:01:3f:f7:
                    37:f9:7c:6e:8b:84:74:8d:9f:78:89:e4:93:07:e6:
                    70:40:46:a3:43:a5:48:1e:20:e4:d9:29:14:65:f2:
                    e3:1d:05:5d:c0:aa:c9:86:69:a7:51:5d:f6:7e:9e:
                    50:47:00:c4:e6:b8:fb:16:dd:29:b2:1e:65:46:1e:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:76:E4:54:55:C3:CA:C4:B8:01:6B:E1:CF:58:D7:4B:F7:9E:91
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:6c:92:3d:f8:4f:7f:45:ae:a9:79:7c:11:07:dd:aa:76:
         00:3c:80:0c:99:99:0e:bf:9e:1a:ba:3d:a6:aa:c1:51:cb:fa:
         9f:7f:d8:1f:84:a6:27:1f:e2:cc:ca:75:a6:2b:a5:b0:e0:a4:
         c4:9e:2b:40:f1:bf:98:58:ad:2f:73:ef:9e:00:5f:26:84:77:
         1c:2b:df:0f:c3:d4:f4:16:77:53:4e:61:55:57:27:6d:65:8f:
         8e:1f:1e:be:b3:9c:4e:c5:4f:0c:54:83:be:23:f6:c6:53:20:
         ff:2d:3d:3b:cc:7d:72:50:63:2f:f8:3c:bd:b9:71:49:1c:10:
         3d:ff:93:a5:c6:9a:d6:67:e7:b2:73:40:ed:d9:bb:c5:0a:04:
         b2:e3:e7:f2:16:08:ee:e5:5b:c6:f6:aa:6c:57:64:c7:a4:f9:
         61:ae:b7:24:91:95:0a:52:e0:7c:aa:bc:a8:d1:56:18:75:b2:
         33:c4:53:8b:62:f3:22:65:f4:c1:eb:8e:80:05:00:db:4f:ee:
         51:84:7c:91:98:66:6e:07:a4:cc:38:39:e1:1e:3e:0d:ec:a6:
         f5:30:99:e2:cd:0b:91:b3:d3:22:0b:77:fe:88:d4:50:1f:16:
         aa:7f:2b:00:ce:27:a7:ac:ff:b4:98:16:a2:4e:42:39:ba:a5:
         7f:a8:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:08 2024 by rpki-client on console-ams.rpki-client.org