Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
File:                     K51tfdq8UiVfPM15zup2289DW50.mft (raw, json)
Hash identifier:          Rj9Q4VIUYHQmEXNayYQjvrVDqkZqrezgsI1om+cVdrM=
Subject key identifier:   1F:4E:6E:01:8B:0D:B5:2B:91:24:65:64:82:2E:C4:F3:73:9D:90:97
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Certificate issuer:       /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial:       0346
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
Manifest number:          0340
Signing time:             Sat 23 Nov 2024 00:36:03 +0000
Manifest this update:     Sat 23 Nov 2024 00:36:03 +0000
Manifest next update:     Sat 30 Nov 2024 00:36:03 +0000
Files and hashes:         1: K51tfdq8UiVfPM15zup2289DW50.crl (hash: DLeFjJdJdYWpDQSOz7LI5/UpUYB4+R1kjQ0XuYe0hjs=)
                          2: FA7C5B6C996611EC8E565E60C4F9AE02.roa (hash: +uerZ4p7F+Vm00t2ExwtEHci3gF68oIn9kIwMZzlj2E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
                          rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
        Validity
            Not Before: Nov 23 00:36:03 2024 GMT
            Not After : Nov 30 00:36:03 2024 GMT
        Subject: CN=67412373-a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:dc:b3:98:e5:fb:39:00:74:fb:00:02:83:
                    cf:82:49:bc:34:f4:ad:e4:c1:c2:68:72:f1:cd:46:
                    eb:90:b4:30:2d:aa:1f:64:4b:ed:8a:5f:41:4f:f2:
                    99:9d:61:36:37:f3:9d:ae:d6:6f:08:fb:a3:c0:0a:
                    1e:96:46:83:a8:25:0a:b6:ad:f7:4f:21:de:89:30:
                    30:26:74:09:07:4a:f7:1a:be:c4:14:e9:c3:93:6d:
                    d5:3e:6c:a2:b2:57:c2:63:56:00:ea:17:77:15:f8:
                    32:07:db:f4:b4:78:86:8b:93:42:66:a1:ea:f9:89:
                    a1:d5:79:7b:18:5c:0d:71:79:f6:09:29:bb:af:ca:
                    95:11:2c:03:24:17:7a:6c:af:6b:3b:e7:08:28:25:
                    2b:52:97:aa:94:99:5b:a0:82:0f:8e:b1:94:91:35:
                    51:ac:a9:5a:69:bd:75:4e:8d:4a:23:e8:16:dd:cf:
                    57:54:d0:7e:12:f8:19:f7:df:d2:8d:46:3d:8f:b7:
                    46:be:55:41:bc:dd:c8:eb:66:fe:a8:a2:de:d5:36:
                    04:7d:b5:ca:f9:ef:97:dc:bf:bf:44:5b:81:20:7f:
                    4e:03:8f:83:7c:a1:c6:67:37:c9:e1:a4:df:61:b6:
                    a7:63:62:c2:b7:ad:23:00:b7:43:63:03:67:8a:8f:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:6E:01:8B:0D:B5:2B:91:24:65:64:82:2E:C4:F3:73:9D:90:97
            X509v3 Authority Key Identifier:
                keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:88:2d:cd:fb:09:c7:66:fb:e2:aa:57:2e:a2:27:5b:5d:
         6f:8a:82:de:74:e8:5b:84:25:48:a9:58:d1:a7:24:71:09:0f:
         21:6c:1c:b7:8f:46:1c:8f:13:61:74:cc:23:e7:df:c0:0d:54:
         c2:4e:9d:a8:e3:3f:7f:95:ef:46:7b:15:04:ab:51:9d:44:84:
         42:c0:ca:13:a6:2f:ff:86:93:0a:e4:fb:44:91:bd:49:89:15:
         57:9c:cc:c4:ec:72:44:67:42:c6:5c:65:00:fd:3f:ce:69:9b:
         d6:d6:77:10:08:b8:be:50:bc:e9:96:f3:b4:f3:01:70:b8:f9:
         2f:29:ac:ee:cc:16:f2:d5:e1:73:4f:b4:6d:29:35:51:71:d2:
         3a:ae:c5:af:c3:ef:4b:61:01:56:b1:ac:f3:1f:02:7b:99:57:
         87:b4:42:bb:00:fe:7c:33:72:ff:65:1b:15:8e:0c:b5:27:bc:
         bb:2b:58:41:0a:4c:0b:2c:9f:c9:c2:09:ff:58:79:3b:ec:f2:
         c1:4c:27:a3:cd:ad:61:14:80:76:3b:e3:e3:a0:cc:a4:49:c4:
         09:6a:a5:11:fe:a3:98:59:7b:ff:bc:6b:60:37:6c:c9:7a:1d:
         8a:dc:fc:f8:40:07:c3:06:99:27:94:dc:3b:c5:fe:35:ea:af:
         14:f9:ff:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNENjMxMTAvBgNVBAUTKDJCOUQ2RDdEREFCQzUyMjU1RjNDQ0Q3OUNFRUE3NkRC
Q0Y0MzVCOUQwHhcNMjQxMTIzMDAzNjAzWhcNMjQxMTMwMDAzNjAzWjAYMRYwFAYD
VQQDEw02NzQxMjM3My1hNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcDcs5jl+zkAdPsAAoPPgkm8NPSt5MHCaHLxzUbrkLQwLaofZEvtil9BT/KZ
nWE2N/OdrtZvCPujwAoelkaDqCUKtq33TyHeiTAwJnQJB0r3Gr7EFOnDk23VPmyi
slfCY1YA6hd3FfgyB9v0tHiGi5NCZqHq+Ymh1Xl7GFwNcXn2CSm7r8qVESwDJBd6
bK9rO+cIKCUrUpeqlJlboIIPjrGUkTVRrKlaab11To1KI+gW3c9XVNB+EvgZ99/S
jUY9j7dGvlVBvN3I62b+qKLe1TYEfbXK+e+X3L+/RFuBIH9OA4+DfKHGZzfJ4aTf
YbanY2LCt60jALdDYwNnio+l1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9ObgGL
DbUrkSRlZIIuxPNznZCXMB8GA1UdIwQYMBaAFCudbX3avFIlXzzNec7qdtvPQ1ud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Q2My84QUYwNjdDNDk5
NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVpVmZQTTE1enVwMjI4OURX
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1MXRmZHE4VWlWZlBNMTV6dXAyMjg5RFc1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0Q2My84QUYwNjdDNDk5NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVp
VmZQTTE1enVwMjI4OURXNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZsYgtzfsJx2b74qpXLqInW11vioLedOhbhCVIqVjRpyRxCQ8hbBy3
j0YcjxNhdMwj59/ADVTCTp2o4z9/le9GexUEq1GdRIRCwMoTpi//hpMK5PtEkb1J
iRVXnMzE7HJEZ0LGXGUA/T/OaZvW1ncQCLi+ULzplvO08wFwuPkvKazuzBby1eFz
T7RtKTVRcdI6rsWvw+9LYQFWsazzHwJ7mVeHtEK7AP58M3L/ZRsVjgy1J7y7K1hB
CkwLLJ/Jwgn/WHk77PLBTCejza1hFIB2O+PjoMykScQJaqUR/qOYWXv/vGtgN2zJ
eh2K3Pz4QAfDBpknlNw7xf416q8U+f+w
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org