Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          yUCHvLjLVsrD3hCv1w6TgCug+Laxl/XvDCF3Be0BZVk=
Subject key identifier:   F4:D4:C5:77:59:81:FA:71:B5:13:0C:F8:2E:C1:3D:B1:F8:50:05:57
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          09
Signing time:             Wed 23 Oct 2024 06:48:49 +0000
Manifest this update:     Wed 23 Oct 2024 06:48:48 +0000
Manifest next update:     Wed 30 Oct 2024 06:48:48 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: t5Gt33l7s05DnR7uxGBALlwbPsK9yApAIKBukhYVQvA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Oct 23 06:48:48 2024 GMT
            Not After : Oct 30 06:48:48 2024 GMT
        Subject: CN=67189c50-08e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:98:04:80:86:63:ca:89:aa:03:ed:90:65:
                    66:73:e8:70:6f:a8:54:4a:02:8d:be:e9:dd:02:69:
                    b7:ea:8f:1c:47:da:39:67:ff:59:f4:92:7f:bf:4e:
                    b1:f8:20:84:7d:61:dd:a7:c8:70:b1:e4:5b:ae:54:
                    d2:7e:28:c3:b5:20:c4:fc:7f:98:f5:c4:59:c9:b7:
                    83:c7:86:7c:ab:ac:72:e0:e0:39:28:97:5a:d8:1f:
                    c9:7d:8c:97:b1:40:21:df:a0:86:e6:24:0a:92:e5:
                    09:17:67:bd:c9:81:70:7e:b1:1b:bc:56:2d:ad:6b:
                    61:39:24:74:f0:b2:a3:ce:a7:d8:7c:33:d5:70:b7:
                    06:87:c9:d2:a3:9d:d9:f8:43:a3:24:bf:f5:4e:d1:
                    80:38:02:04:2b:29:00:54:67:f1:7d:98:95:05:c7:
                    09:e0:c6:13:92:34:ae:62:aa:13:78:1f:5a:bd:6b:
                    b7:99:94:87:82:83:2f:2f:29:32:68:d0:ea:ca:d1:
                    75:f1:32:73:5d:51:70:9e:08:ad:c8:12:6d:e3:3b:
                    7d:9a:f8:d4:7d:0b:1a:d1:7f:f7:77:10:11:c5:b4:
                    dd:0a:98:ef:65:9b:87:4c:e8:10:c7:8e:de:76:64:
                    09:8d:77:3b:83:1b:b2:a2:86:27:1d:5d:37:2b:34:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:C5:77:59:81:FA:71:B5:13:0C:F8:2E:C1:3D:B1:F8:50:05:57
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:b3:6f:d8:c6:ed:a1:7b:d1:4e:09:1a:16:86:e6:43:59:
         bb:de:78:bf:59:b0:59:33:3f:00:c1:48:a8:e5:03:fb:a1:80:
         1a:71:bc:f2:a9:ab:fa:09:22:fb:6d:9c:68:72:05:fa:e4:8e:
         16:4c:d9:01:a1:90:68:5a:94:9d:a7:41:56:f7:c9:df:62:0d:
         30:35:14:f8:09:5e:10:02:1f:1b:61:1d:82:9f:73:35:d8:dc:
         dd:f8:e8:03:ed:10:24:28:fe:37:80:63:6e:67:6a:3c:28:62:
         6c:c1:a8:96:54:c7:1c:0e:02:0a:90:c3:8e:24:71:69:50:14:
         01:ef:fc:3a:4a:72:2b:b0:6e:0c:57:32:24:2a:23:8f:03:8b:
         1c:2c:27:2d:98:bc:f1:d2:ea:6d:7e:54:46:ed:66:71:58:01:
         0d:3c:ff:e6:ca:19:c7:70:10:5e:21:40:28:1d:49:1d:27:52:
         cc:43:09:bd:0a:e5:fb:20:87:d5:fb:1e:b7:8f:3f:d6:13:3c:
         9f:f6:ab:74:05:61:73:b6:df:09:71:57:76:e9:cc:de:5a:68:
         e8:63:5a:84:4e:eb:12:28:ed:8f:bf:92:ea:9a:12:23:d8:e2:
         ce:69:89:48:70:f3:71:e3:16:29:3e:5a:c9:52:ef:dd:0a:10:
         ff:0a:dd:ce
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTFDRjExMC8GA1UEBRMoQUVEODAxMERFNEQyM0ZGNEQwRjkwMDVCQUM5MjVCREI3
RjNERjMwQTAeFw0yNDEwMjMwNjQ4NDhaFw0yNDEwMzAwNjQ4NDhaMBgxFjAUBgNV
BAMTDTY3MTg5YzUwLTA4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2jJgEgIZjyomqA+2QZWZz6HBvqFRKAo2+6d0CabfqjxxH2jln/1n0kn+/TrH4
IIR9Yd2nyHCx5FuuVNJ+KMO1IMT8f5j1xFnJt4PHhnyrrHLg4Dkol1rYH8l9jJex
QCHfoIbmJAqS5QkXZ73JgXB+sRu8Vi2ta2E5JHTwsqPOp9h8M9VwtwaHydKjndn4
Q6Mkv/VO0YA4AgQrKQBUZ/F9mJUFxwngxhOSNK5iqhN4H1q9a7eZlIeCgy8vKTJo
0OrK0XXxMnNdUXCeCK3IEm3jO32a+NR9CxrRf/d3EBHFtN0KmO9lm4dM6BDHjt52
ZAmNdzuDG7KihicdXTcrNAPLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9NTFd1mB
+nG1Ewz4LsE9sfhQBVcwHwYDVR0jBBgwFoAUrtgBDeTSP/TQ+QBbrJJb23898wow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MUNGLzI3NDlDN0JFODZE
NzExRUY4NTRERDQ3QkM0RjlBRTAyL3J0Z0JEZVRTUF9UUS1RQmJySkpiMjM4OTh3
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnRnQkRlVFNQX1RRLVFCYnJKSmIyMzg5OHdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MUNGLzI3NDlDN0JFODZENzExRUY4NTRERDQ3QkM0RjlBRTAyL3J0Z0JEZVRTUF9U
US1RQmJySkpiMjM4OTh3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADvas2/Yxu2he9FOCRoWhuZDWbveeL9ZsFkzPwDBSKjlA/uhgBpxvPKp
q/oJIvttnGhyBfrkjhZM2QGhkGhalJ2nQVb3yd9iDTA1FPgJXhACHxthHYKfczXY
3N346APtECQo/jeAY25najwoYmzBqJZUxxwOAgqQw44kcWlQFAHv/DpKciuwbgxX
MiQqI48DixwsJy2YvPHS6m1+VEbtZnFYAQ08/+bKGcdwEF4hQCgdSR0nUsxDCb0K
5fsgh9X7HrePP9YTPJ/2q3QFYXO23wlxV3bpzN5aaOhjWoRO6xIo7Y+/kuqaEiPY
4s5piUhw83HjFik+WslS790KEP8K3c4=
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org