Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File:                     CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier:          0havdR9V7XjGFWxBwh8s/uX7tEMfOB0bRKT2LbGK+bE=
Subject key identifier:   76:6A:91:FA:A7:D6:F0:B7:88:6D:AD:CE:67:EC:64:41:55:38:D4:11
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer:       /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number:          07
Signing time:             Sat 23 Nov 2024 06:06:07 +0000
Manifest this update:     Sat 23 Nov 2024 06:06:06 +0000
Manifest next update:     Sat 30 Nov 2024 06:06:06 +0000
Files and hashes:         1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: JTUK3FJ+l8JBAZ9nhQZPXV8VUWCAGhlFqYu6et75SvI=)
                          2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
        Validity
            Not Before: Nov 23 06:06:06 2024 GMT
            Not After : Nov 30 06:06:06 2024 GMT
        Subject: CN=674170cf-eb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:68:3e:fe:3a:d5:f4:67:80:f7:84:08:32:
                    a9:82:33:d2:24:70:8b:be:f4:2d:5b:3c:17:7f:76:
                    27:e9:4d:16:87:d4:86:96:5c:11:81:0d:43:cb:1d:
                    22:c1:d9:70:30:e2:2a:cd:cb:84:c9:ed:76:98:f5:
                    eb:7d:b5:bc:4e:ec:05:30:5a:ee:3c:91:40:11:4d:
                    5e:4c:ea:bd:00:a0:36:75:9b:5a:ac:4a:3c:af:e7:
                    8c:16:d5:ec:bb:65:33:c5:b2:6d:e9:df:a7:55:f5:
                    37:01:b3:b3:43:e0:ef:51:5e:7d:5b:06:93:3a:72:
                    56:a5:c0:4b:0d:eb:fb:25:75:87:14:9d:1b:0c:37:
                    29:8c:88:cf:9f:93:52:aa:53:53:07:1a:7a:30:7a:
                    a9:14:96:03:c4:83:f9:fc:62:92:f7:1f:72:05:90:
                    54:68:68:59:6e:20:b4:28:9d:f5:12:62:98:c2:38:
                    3c:69:d4:96:33:79:e4:a1:9d:98:89:ea:d8:a4:cb:
                    d4:0d:9c:76:06:39:d2:96:2c:c5:39:a8:82:07:1c:
                    6a:5f:9e:b7:ba:20:7f:7f:6f:96:ba:7f:bb:9c:e3:
                    d3:fc:f2:38:d4:d5:14:cf:c6:af:c3:32:f8:04:11:
                    65:6d:68:5c:b2:91:92:62:c0:fa:5f:2d:20:33:b0:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:91:FA:A7:D6:F0:B7:88:6D:AD:CE:67:EC:64:41:55:38:D4:11
            X509v3 Authority Key Identifier:
                keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:e4:19:51:f6:86:73:35:2b:17:6c:9c:6b:67:8f:12:b7:
         3f:98:57:ef:4b:5e:36:cc:7c:c0:fd:ec:1e:36:b6:b6:e8:3f:
         f3:e6:d7:fd:2f:b3:73:ab:74:49:3b:d1:4c:a9:dd:db:04:0e:
         5e:f6:6d:13:f2:93:20:50:41:80:fc:4f:d6:a2:b9:96:3c:71:
         a8:bb:0e:6b:db:c9:d6:b7:3c:e9:ab:c7:68:fd:4e:a1:f6:bd:
         a7:aa:ac:23:0c:3f:44:8a:b2:4a:92:28:50:1a:fe:f4:6a:6a:
         78:53:23:6a:aa:94:b1:1f:de:55:b7:02:60:0f:8a:ca:26:a4:
         91:9d:21:7e:1c:88:1b:4d:f9:0a:e8:df:f7:5f:dc:7c:ec:bb:
         8f:0d:d8:9d:a5:0d:94:25:8c:2e:1b:55:03:4f:2e:58:cd:3f:
         48:21:78:6a:70:37:6b:93:d9:f1:f3:9d:6b:85:e9:02:4c:04:
         39:9b:8f:9d:08:ad:1d:99:c2:e0:c4:37:63:22:c4:3b:94:5b:
         61:2d:bd:2b:34:48:e9:44:74:52:5f:b9:1f:58:d2:20:10:f0:
         ab:aa:10:3a:d7:10:01:f5:2d:dd:87:ac:8b:16:5c:9b:2b:2d:
         51:48:d0:17:96:0f:b5:e6:99:7f:45:18:3f:27:f5:96:3b:13:
         c0:8a:c1:26
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDE2NDExMC8GA1UEBRMoMDk0QzhCQzVEQURDQ0Q5QzJGQjNDRjQ1RDE0NjRERUVD
RjNBMUM2MDAeFw0yNDExMjMwNjA2MDZaFw0yNDExMzAwNjA2MDZaMBgxFjAUBgNV
BAMTDTY3NDE3MGNmLWViMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNU2g+/jrV9GeA94QIMqmCM9IkcIu+9C1bPBd/difpTRaH1IaWXBGBDUPLHSLB
2XAw4irNy4TJ7XaY9et9tbxO7AUwWu48kUARTV5M6r0AoDZ1m1qsSjyv54wW1ey7
ZTPFsm3p36dV9TcBs7ND4O9RXn1bBpM6clalwEsN6/sldYcUnRsMNymMiM+fk1Kq
U1MHGnoweqkUlgPEg/n8YpL3H3IFkFRoaFluILQonfUSYpjCODxp1JYzeeShnZiJ
6tiky9QNnHYGOdKWLMU5qIIHHGpfnre6IH9/b5a6f7uc49P88jjU1RTPxq/DMvgE
EWVtaFyykZJiwPpfLSAzsFrJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdmqR+qfW
8LeIba3OZ+xkQVU41BEwHwYDVR0jBBgwFoAUCUyLxdrczZwvs89F0UZN7s86HGAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0FFNzIyODlDQTE4
MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhH
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ1V5THhkcmN6Wnd2czg5RjBVWk43czg2SEdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
MTY0L0FFNzIyODlDQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3
dnM4OUYwVVpON3M4NkhHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADJK5BlR9oZzNSsXbJxrZ48Stz+YV+9LXjbMfMD97B42trboP/Pm1/0v
s3OrdEk70Uyp3dsEDl72bRPykyBQQYD8T9aiuZY8cai7Dmvbyda3POmrx2j9TqH2
vaeqrCMMP0SKskqSKFAa/vRqanhTI2qqlLEf3lW3AmAPisompJGdIX4ciBtN+Qro
3/df3Hzsu48N2J2lDZQljC4bVQNPLljNP0gheGpwN2uT2fHznWuF6QJMBDmbj50I
rR2ZwuDEN2MixDuUW2EtvSs0SOlEdFJfuR9Y0iAQ8KuqEDrXEAH1Ld2HrIsWXJsr
LVFI0BeWD7XmmX9FGD8n9ZY7E8CKwSY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org