Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File:                     w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier:          dPOew7C+R1HlH5mAjANblmqPgJlribbHvAgfjPdWeC4=
Subject key identifier:   18:22:87:94:37:52:BB:47:EA:7D:A8:3F:A3:8A:82:CF:71:7A:BB:CC
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number:          CE
Signing time:             Thu 21 Nov 2024 04:19:13 +0000
Manifest this update:     Thu 21 Nov 2024 04:19:12 +0000
Manifest next update:     Thu 28 Nov 2024 04:19:12 +0000
Files and hashes:         1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: RB9tVZP6/sZSx6d53jk29/7R9iuSNOflU8eerm0zIBY=)
                          2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: rIhpQ73oq5Fgm8dhXJGl90QlI4uunxwyPHzOKisnft4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Nov 21 04:19:12 2024 GMT
            Not After : Nov 28 04:19:12 2024 GMT
        Subject: CN=673eb4c1-49c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:ef:ff:36:63:22:a2:6c:bb:8b:cf:f8:83:
                    2f:61:1f:ef:5b:c2:fa:10:29:eb:cb:0d:95:4f:aa:
                    06:6f:9b:af:eb:f7:2d:e6:6a:fd:d1:2a:7a:87:a2:
                    de:77:2f:b1:ce:ed:a7:54:66:53:96:32:92:6f:bf:
                    d1:a2:ed:0f:ea:17:08:99:f9:a8:a8:29:22:9c:43:
                    31:c4:05:90:07:87:99:fa:1b:0f:3e:62:c3:e1:d7:
                    63:b5:33:44:f8:85:d5:d8:4e:b5:19:c6:be:a9:8c:
                    3c:ef:d0:f4:15:3a:04:6f:ea:85:b0:1b:4d:66:c5:
                    ad:3a:d0:04:49:b5:a1:1f:cd:ae:a1:75:cd:02:46:
                    49:c5:bc:56:8f:e0:b0:23:ae:25:0b:4f:01:f9:1f:
                    61:4c:7b:40:30:a0:4b:d7:02:a1:a2:9f:22:97:bb:
                    d3:e7:48:3e:f8:9a:f1:c2:0a:ea:23:2d:78:01:aa:
                    d0:81:6b:36:45:cc:21:1c:67:f3:dc:45:8b:42:fa:
                    64:9c:b0:c3:d5:51:de:f5:9c:86:33:43:64:c8:a2:
                    57:08:e3:85:06:53:76:4b:2c:35:a8:f8:fd:28:38:
                    a2:b0:f3:92:83:0d:19:13:e4:6b:f7:e7:59:c4:ab:
                    6c:03:c1:3c:29:9a:34:46:75:f1:15:37:a3:7d:61:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:22:87:94:37:52:BB:47:EA:7D:A8:3F:A3:8A:82:CF:71:7A:BB:CC
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:77:1d:3c:a4:fa:95:fb:d0:76:23:7b:2b:51:28:d7:57:13:
         89:92:0c:d0:9c:f1:3d:98:e6:1b:de:ee:79:85:17:76:5b:ac:
         81:24:36:67:5d:e6:1b:28:05:05:af:7e:24:f5:8f:70:3f:ed:
         f7:1d:6a:f7:85:da:b8:de:6b:70:97:10:96:8c:c1:9c:bb:55:
         85:89:dc:04:ba:88:04:9c:2a:1f:2d:a7:e6:1d:e4:14:f5:b1:
         a9:cb:37:05:97:dd:b1:73:36:d8:72:0d:7a:ac:c7:11:77:ac:
         e7:6f:7b:e0:86:ce:08:ce:07:c0:b0:d8:b7:0f:1f:c4:fc:f8:
         90:8f:23:cc:bc:4a:b3:55:24:d5:f6:12:91:44:00:da:49:3a:
         76:78:2e:88:bc:f0:30:68:44:9d:d9:60:39:14:a6:a5:b2:0f:
         c8:2a:bf:0d:21:81:48:95:b0:f8:bc:c3:7e:a9:d4:84:eb:db:
         4d:05:ac:6e:f2:7c:4a:76:a7:7d:8c:33:7f:9a:ee:bd:84:46:
         9c:62:59:8c:4d:7a:1e:de:a7:49:ee:8a:a6:f2:5d:9a:c4:1b:
         c1:16:55:78:56:45:e4:80:60:a1:89:9a:7e:f8:92:84:8a:98:
         0a:29:ea:f9:6f:d3:a8:8f:b1:04:2e:61:11:95:b7:f9:9a:ad:
         1b:9d:4b:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF
MkNDQkIyNUEwHhcNMjQxMTIxMDQxOTEyWhcNMjQxMTI4MDQxOTEyWjAYMRYwFAYD
VQQDEw02NzNlYjRjMS00OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsz3v/zZjIqJsu4vP+IMvYR/vW8L6ECnryw2VT6oGb5uv6/ct5mr90Sp6h6Le
dy+xzu2nVGZTljKSb7/Rou0P6hcImfmoqCkinEMxxAWQB4eZ+hsPPmLD4ddjtTNE
+IXV2E61Gca+qYw879D0FToEb+qFsBtNZsWtOtAESbWhH82uoXXNAkZJxbxWj+Cw
I64lC08B+R9hTHtAMKBL1wKhop8il7vT50g++JrxwgrqIy14AarQgWs2RcwhHGfz
3EWLQvpknLDD1VHe9ZyGM0NkyKJXCOOFBlN2Syw1qPj9KDiisPOSgw0ZE+Rr9+dZ
xKtsA8E8KZo0RnXxFTejfWE29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgih5Q3
UrtH6n2oP6OKgs9xervMMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB
QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o
NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJdx08pPqV+9B2I3srUSjXVxOJkgzQnPE9mOYb3u55hRd2W6yBJDZn
XeYbKAUFr34k9Y9wP+33HWr3hdq43mtwlxCWjMGcu1WFidwEuogEnCofLafmHeQU
9bGpyzcFl92xczbYcg16rMcRd6znb3vghs4IzgfAsNi3Dx/E/PiQjyPMvEqzVSTV
9hKRRADaSTp2eC6IvPAwaESd2WA5FKalsg/IKr8NIYFIlbD4vMN+qdSE69tNBaxu
8nxKdqd9jDN/mu69hEacYlmMTXoe3qdJ7oqm8l2axBvBFlV4VkXkgGChiZp++JKE
ipgKKer5b9Ooj7EELmERlbf5mq0bnUuB
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org