Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          kECRBZ16iKRiz1Wx5XxDJxMwPHrZziKk9pGz/qYRgvw=
Subject key identifier:   90:02:14:6A:3F:93:7C:89:3E:A5:FB:0E:BD:03:96:11:39:0C:71:D5
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0C4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0C37
Signing time:             Fri 22 Nov 2024 18:14:41 +0000
Manifest this update:     Fri 22 Nov 2024 18:14:40 +0000
Manifest next update:     Fri 29 Nov 2024 18:14:40 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: GqFw+jBUEAECQ8mEbS5B88ACXCJOOKvyG4HBTDWs7bY=)
                          2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: H+vg/v9F60XyYH+ZRi5aEl8KQ68wK4sTcaU7kwFiu9Y=)
                          3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: orEzO0Lo+YTWNzGK6RrRKjELH1ocy1yMxMa3sa4dePA=)
                          4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: zFrcb85HAJuL6Bhfb2b96V9bEObMT8DTzq80F6Mn5Vo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3149 (0xc4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Nov 22 18:14:40 2024 GMT
            Not After : Nov 29 18:14:40 2024 GMT
        Subject: CN=6740ca11-6c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:fc:2b:4c:d0:6f:b5:24:31:48:09:63:5c:
                    aa:9f:c7:e9:d5:cd:c1:36:ac:e0:30:d7:b2:59:cf:
                    01:e8:2a:c6:84:d4:87:01:23:45:b1:23:35:10:9c:
                    07:ce:2d:1a:51:c1:29:3f:cc:31:8b:7b:24:7b:b5:
                    bd:4c:70:0d:66:dc:17:fe:79:7f:3e:db:b1:56:98:
                    58:d8:fd:49:a6:ef:f2:06:d1:ab:0e:9d:32:b6:0b:
                    b6:4a:5d:0a:e6:c3:22:c9:e8:e6:2c:8c:65:96:19:
                    af:8a:af:59:75:2d:68:43:88:2a:9e:85:6e:55:bc:
                    d6:4d:1f:a8:7a:8f:7c:75:32:ce:09:a0:ba:b2:96:
                    43:7b:27:e1:77:67:e3:30:ce:2f:37:0f:01:c0:47:
                    5c:6d:a6:b5:f1:ff:6c:b6:c5:8e:06:70:50:7e:ef:
                    1b:b3:32:79:b8:65:a1:39:6c:ac:4a:2a:b3:c9:9d:
                    b4:8b:73:fb:cd:6a:47:24:25:0a:e5:9e:1d:6c:0a:
                    00:bc:4e:b8:e7:c0:99:bd:b0:c1:1e:2a:ca:56:90:
                    2b:d9:f8:ed:0d:3b:a8:37:27:00:4b:b5:6f:45:b4:
                    8f:f3:0b:22:cd:85:e5:f2:ce:7a:e3:2d:e2:25:d2:
                    98:cc:71:63:2a:bd:77:8a:be:5f:6f:2c:26:e0:3e:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:14:6A:3F:93:7C:89:3E:A5:FB:0E:BD:03:96:11:39:0C:71:D5
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:54:75:8f:90:bf:16:9d:3b:93:68:7a:b5:f2:21:01:fd:64:
         a3:65:3c:6f:2e:37:af:ee:5c:d6:dc:c2:78:47:42:76:f8:f8:
         5b:33:8d:26:71:25:f0:a5:53:0c:83:3f:c1:bf:10:ca:73:ca:
         88:bb:89:c2:6e:e7:90:2c:21:12:2f:d7:86:99:04:59:03:60:
         e8:da:80:f5:c2:85:72:3e:a7:9a:2b:ba:61:c2:b9:a4:4b:9c:
         b4:b7:28:7a:11:27:7d:0b:b9:c9:b6:b7:71:78:98:54:70:37:
         d5:d0:31:e1:96:cc:15:4c:ce:7b:e2:d5:be:be:88:06:ce:2f:
         39:7a:f5:38:bc:d5:f2:92:41:94:55:53:71:83:36:ba:6a:e9:
         c9:2b:18:18:14:cf:08:a0:3c:e6:e5:ea:fa:54:64:91:55:17:
         d9:8a:12:8a:35:d5:f1:21:2b:65:e4:35:2b:63:9b:9f:35:f4:
         c5:41:b7:47:9c:78:ce:d7:55:27:41:53:9e:08:63:b9:4a:56:
         44:28:2d:fc:4b:fe:d0:8f:6a:22:81:92:8a:85:cd:85:82:41:
         51:69:be:e9:2f:81:95:4a:c4:51:35:d2:30:19:0e:07:00:a8:
         8c:af:33:21:6f:80:46:ca:6f:09:31:a0:0b:bb:3e:98:62:a3:
         dc:0f:d3:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0
M0U3RTdBREIwHhcNMjQxMTIyMTgxNDQwWhcNMjQxMTI5MTgxNDQwWjAYMRYwFAYD
VQQDEw02NzQwY2ExMS02YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLH8K0zQb7UkMUgJY1yqn8fp1c3BNqzgMNeyWc8B6CrGhNSHASNFsSM1EJwH
zi0aUcEpP8wxi3ske7W9THANZtwX/nl/PtuxVphY2P1Jpu/yBtGrDp0ytgu2Sl0K
5sMiyejmLIxllhmviq9ZdS1oQ4gqnoVuVbzWTR+oeo98dTLOCaC6spZDeyfhd2fj
MM4vNw8BwEdcbaa18f9stsWOBnBQfu8bszJ5uGWhOWysSiqzyZ20i3P7zWpHJCUK
5Z4dbAoAvE6458CZvbDBHirKVpAr2fjtDTuoNycAS7VvRbSP8wsizYXl8s564y3i
JdKYzHFjKr13ir5fbywm4D6vqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJACFGo/
k3yJPqX7Dr0DlhE5DHHVMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2
ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzA5NC8wMUY4RUI5MkY2ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wt
cjJERGpuYVZzRHRENS1ldHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCVHWPkL8WnTuTaHq18iEB/WSjZTxvLjev7lzW3MJ4R0J2+PhbM40m
cSXwpVMMgz/BvxDKc8qIu4nCbueQLCESL9eGmQRZA2Do2oD1woVyPqeaK7phwrmk
S5y0tyh6ESd9C7nJtrdxeJhUcDfV0DHhlswVTM574tW+vogGzi85evU4vNXykkGU
VVNxgza6aunJKxgYFM8IoDzm5er6VGSRVRfZihKKNdXxIStl5DUrY5ufNfTFQbdH
nHjO11UnQVOeCGO5SlZEKC38S/7Qj2oigZKKhc2FgkFRab7pL4GVSsRRNdIwGQ4H
AKiMrzMhb4BGym8JMaALuz6YYqPcD9Pf
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org