Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
File:                     tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json)
Hash identifier:          cllDQBoZjEoBeKtaixZAggp67yRpgmvPXx48J82Hzyo=
Subject key identifier:   0A:E6:DA:23:96:2F:71:9B:69:3A:7B:45:58:58:42:D8:66:D9:FC:25
Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
Certificate issuer:       /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
Manifest number:          DF
Signing time:             Sat 23 Nov 2024 03:37:42 +0000
Manifest this update:     Sat 23 Nov 2024 03:37:42 +0000
Manifest next update:     Sat 30 Nov 2024 03:37:42 +0000
Files and hashes:         1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: c4YhHuLbGFLwoiUkR0m56zLKr0b69E/2P+GELgR1U8Q=)
                          2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: EiQjdRFuXlYtCLTZbFxXGgOgXEXHeuVWajTCS8s1TyA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl
                          rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
        Validity
            Not Before: Nov 23 03:37:42 2024 GMT
            Not After : Nov 30 03:37:42 2024 GMT
        Subject: CN=67414e06-74ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:47:58:62:43:7b:d4:07:84:f7:ee:d6:de:
                    0c:cc:ba:87:5e:9f:48:dc:11:2f:97:71:4c:0c:a4:
                    44:6a:f9:fc:85:25:fa:b5:58:8e:cb:0a:29:26:3a:
                    65:f9:8d:bc:fa:9d:ad:7d:58:13:f9:41:0f:3c:83:
                    5f:93:32:bc:b5:27:a3:bc:4f:62:9d:d2:86:70:64:
                    50:a4:bc:d0:fe:46:23:d7:ad:c3:57:ec:d0:df:82:
                    69:f6:5a:da:0d:79:59:92:5d:b3:11:a5:8d:82:85:
                    16:a3:b8:ea:46:71:fc:28:d9:ba:c4:27:20:50:1e:
                    2f:d1:42:b7:41:3b:91:94:e2:e9:ef:06:fc:2d:60:
                    1e:1b:88:3f:7e:88:ba:36:a9:ea:4a:17:ab:f5:7f:
                    53:a9:b9:fd:f6:cb:10:13:69:01:48:d0:e3:52:45:
                    91:61:bb:57:29:7f:59:5a:a3:04:9d:03:7c:e1:e8:
                    f4:1b:94:3f:1e:d2:ad:86:ce:aa:45:3e:a8:96:71:
                    26:2e:fd:82:a3:ad:a5:9f:91:41:a6:70:94:86:27:
                    6b:f2:52:25:dd:78:b2:19:95:2f:ec:ab:c9:13:0e:
                    ac:fa:50:25:d5:b1:79:4c:16:f3:e6:79:1d:df:76:
                    38:bf:25:ec:bb:b9:61:5a:a6:9b:d9:08:cd:05:8e:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:DA:23:96:2F:71:9B:69:3A:7B:45:58:58:42:D8:66:D9:FC:25
            X509v3 Authority Key Identifier:
                keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:88:77:8b:ea:74:ce:1d:eb:55:9a:bd:2f:45:ae:83:d3:
         d8:65:41:58:31:ea:1e:7e:93:b2:da:19:1b:83:34:d7:33:f4:
         9c:1b:1f:c5:cb:71:0d:12:06:d5:6f:92:be:e7:f3:2a:44:8c:
         d6:c2:b6:ff:24:58:b4:38:56:70:43:c9:3f:ce:77:30:37:e2:
         e0:b6:ed:6d:b8:8d:bc:90:18:96:05:92:c4:4a:2a:2d:80:66:
         9f:cb:f5:f4:0b:e5:cf:19:b4:cd:b2:0d:03:af:5b:79:78:1e:
         1a:09:8d:42:89:ca:8a:6e:97:bf:28:7f:cb:8f:68:80:47:bc:
         2f:00:91:2e:8e:8f:66:29:25:fa:0e:bd:4d:ee:38:00:bd:ee:
         74:19:29:9d:ca:21:49:ed:76:5b:53:12:3d:3e:dd:86:04:30:
         2b:b5:f8:e1:90:85:f2:5f:85:37:64:92:93:2e:7f:3f:b9:e1:
         65:78:ce:0c:4f:d2:a6:fc:8d:8f:28:9e:3e:fc:b0:09:b5:43:
         83:14:29:ee:03:2d:b9:76:dc:83:06:36:e1:1c:9a:fe:0c:23:
         a9:66:10:33:2e:ab:26:54:50:8b:15:16:da:00:32:9a:3d:4f:
         17:c4:d3:10:77:51:11:1d:0f:c0:59:15:64:78:ad:0f:cb:db:
         da:b0:37:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVDRUYxMTAvBgNVBAUTKEI0NEEzMDdBNThDMjZENkZBRTA3RkUzRjI4NUVENkEz
ODJCNENCNDMwHhcNMjQxMTIzMDMzNzQyWhcNMjQxMTMwMDMzNzQyWjAYMRYwFAYD
VQQDEw02NzQxNGUwNi03NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZdHWGJDe9QHhPfu1t4MzLqHXp9I3BEvl3FMDKREavn8hSX6tViOywopJjpl
+Y28+p2tfVgT+UEPPINfkzK8tSejvE9indKGcGRQpLzQ/kYj163DV+zQ34Jp9lra
DXlZkl2zEaWNgoUWo7jqRnH8KNm6xCcgUB4v0UK3QTuRlOLp7wb8LWAeG4g/foi6
NqnqSher9X9Tqbn99ssQE2kBSNDjUkWRYbtXKX9ZWqMEnQN84ej0G5Q/HtKths6q
RT6olnEmLv2Co62ln5FBpnCUhidr8lIl3XiyGZUv7KvJEw6s+lAl1bF5TBbz5nkd
33Y4vyXsu7lhWqab2QjNBY71BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArm2iOW
L3GbaTp7RVhYQthm2fwlMB8GA1UdIwQYMBaAFLRKMHpYwm1vrgf+Pyhe1qOCtMtD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUNFRi8yNzc0OUMzNjU3
NzIxMUVFOURBRTYxNTVDNEY5QUUwMi90RW93ZWxqQ2JXLXVCXzRfS0Y3V280SzB5
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RFb3dlbGpDYlctdUJfNF9LRjdXbzRLMHkwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUNFRi8yNzc0OUMzNjU3NzIxMUVFOURBRTYxNTVDNEY5QUUwMi90RW93ZWxqQ2JX
LXVCXzRfS0Y3V280SzB5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzCIh3i+p0zh3rVZq9L0Wug9PYZUFYMeoefpOy2hkbgzTXM/ScGx/F
y3ENEgbVb5K+5/MqRIzWwrb/JFi0OFZwQ8k/zncwN+Lgtu1tuI28kBiWBZLESiot
gGafy/X0C+XPGbTNsg0Dr1t5eB4aCY1CicqKbpe/KH/Lj2iAR7wvAJEujo9mKSX6
Dr1N7jgAve50GSmdyiFJ7XZbUxI9Pt2GBDArtfjhkIXyX4U3ZJKTLn8/ueFleM4M
T9Km/I2PKJ4+/LAJtUODFCnuAy25dtyDBjbhHJr+DCOpZhAzLqsmVFCLFRbaADKa
PU8XxNMQd1ERHQ/AWRVkeK0Py9vasDf7
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org