Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File:                     10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier:          OwBQ3KVNuGem5Me1QPLr4MPU88oMKwLdY4n7h4pcOtU=
Subject key identifier:   F8:55:12:96:2B:A0:11:7E:18:B2:B9:5B:7B:5F:F6:B7:C1:7B:85:E1
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number:          94
Signing time:             Mon 25 Nov 2024 04:30:46 +0000
Manifest this update:     Mon 25 Nov 2024 04:30:46 +0000
Manifest next update:     Mon 02 Dec 2024 04:30:46 +0000
Files and hashes:         1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: FeUo+QTcLUnqazLS13KLsjq0SpahRNPs4vZP1FZ4fQc=)
                          2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: wWpGWXc0da4NayJh8tXlJgOGWzmykFbxwGJAc8cXKN4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Nov 25 04:30:46 2024 GMT
            Not After : Dec  2 04:30:46 2024 GMT
        Subject: CN=6743fd76-8334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:7d:74:70:c9:b4:8e:af:fe:2b:e6:5e:37:
                    5d:b2:b8:42:50:d1:c3:72:96:e8:f5:5d:16:09:5e:
                    e8:9e:7e:af:51:19:ad:1b:43:e6:d1:c1:e6:0d:58:
                    82:9e:12:25:1c:84:10:cb:6a:1d:80:c6:f4:e9:a0:
                    77:f9:59:ac:63:91:45:97:b1:0e:ac:cd:38:c1:b1:
                    26:58:03:b4:4f:10:49:40:84:7c:89:2e:6c:07:5f:
                    b7:af:3b:3b:15:20:c1:7b:03:03:9b:78:dd:08:ab:
                    1d:d5:3a:68:1c:d3:8c:af:7d:ad:83:01:11:0f:41:
                    0f:21:dc:04:85:93:57:f3:5a:62:3b:10:d3:6e:5c:
                    64:20:bb:c8:d9:59:8c:d9:d5:d0:2d:97:fc:fd:ea:
                    9f:9d:c3:d4:1c:2d:b4:c5:44:49:07:01:4d:1e:27:
                    4c:74:46:f4:c3:77:ae:57:87:ae:4f:ca:0d:95:d5:
                    f3:05:49:ba:c0:24:3b:e9:8b:c6:66:9f:d1:59:8e:
                    6c:c1:54:65:68:f5:af:0c:4c:19:58:7a:61:27:d3:
                    e4:01:82:a6:1f:10:95:05:5c:3c:4f:91:36:1f:19:
                    79:ec:52:a3:ae:6d:07:66:d2:85:5a:9d:66:4c:7e:
                    7e:18:44:6b:89:39:f5:ca:c6:cd:70:04:97:ba:7f:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:55:12:96:2B:A0:11:7E:18:B2:B9:5B:7B:5F:F6:B7:C1:7B:85:E1
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:16:7e:c6:3a:c8:32:9d:25:14:09:c8:80:c9:1a:24:52:59:
         c1:b8:98:cf:54:63:71:26:89:98:83:fa:19:64:eb:e8:8c:b5:
         41:ee:f7:c1:9c:c1:40:03:44:03:da:8f:fa:a7:3b:76:08:09:
         1a:e1:02:6e:7d:d0:3c:8e:da:2b:6c:51:bd:27:b6:85:28:af:
         ce:11:82:fb:45:05:a9:94:5d:75:68:e7:ef:b3:12:fc:42:ba:
         29:79:2f:c5:36:a9:79:b8:a9:77:51:d4:c9:05:66:9f:15:6c:
         b5:69:e7:10:3e:16:c5:68:d3:c7:3a:75:1e:a4:37:9e:a6:19:
         eb:ac:3e:c4:7e:c8:ff:86:8c:22:a2:5b:a1:a8:02:fa:31:6f:
         81:dd:e4:69:36:08:74:ef:a9:cc:6d:96:16:56:b0:f8:9e:f2:
         3e:55:54:61:21:9d:3c:42:a4:c2:37:7d:c0:f6:49:99:87:50:
         c3:24:7c:0e:e7:1f:57:77:cc:3a:65:f0:8b:22:de:58:5c:b8:
         46:d8:72:df:68:18:b3:64:18:d3:5d:35:91:21:a9:e7:b8:79:
         92:a8:8e:37:e5:3e:94:b8:97:a1:28:34:99:ab:68:44:50:62:
         03:be:d6:76:f2:46:af:2b:a0:7b:c0:78:12:42:a3:3c:14:7f:
         8b:e9:39:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy
MkZBODcxNEMwHhcNMjQxMTI1MDQzMDQ2WhcNMjQxMjAyMDQzMDQ2WjAYMRYwFAYD
VQQDEw02NzQzZmQ3Ni04MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0W99dHDJtI6v/ivmXjddsrhCUNHDcpbo9V0WCV7onn6vURmtG0Pm0cHmDViC
nhIlHIQQy2odgMb06aB3+VmsY5FFl7EOrM04wbEmWAO0TxBJQIR8iS5sB1+3rzs7
FSDBewMDm3jdCKsd1TpoHNOMr32tgwERD0EPIdwEhZNX81piOxDTblxkILvI2VmM
2dXQLZf8/eqfncPUHC20xURJBwFNHidMdEb0w3euV4euT8oNldXzBUm6wCQ76YvG
Zp/RWY5swVRlaPWvDEwZWHphJ9PkAYKmHxCVBVw8T5E2Hxl57FKjrm0HZtKFWp1m
TH5+GERriTn1ysbNcASXun/OcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhVEpYr
oBF+GLK5W3tf9rfBe4XhMB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy
MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ
V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYFn7GOsgynSUUCciAyRokUlnBuJjPVGNxJomYg/oZZOvojLVB7vfB
nMFAA0QD2o/6pzt2CAka4QJufdA8jtorbFG9J7aFKK/OEYL7RQWplF11aOfvsxL8
QropeS/FNql5uKl3UdTJBWafFWy1aecQPhbFaNPHOnUepDeephnrrD7Efsj/howi
oluhqAL6MW+B3eRpNgh076nMbZYWVrD4nvI+VVRhIZ08QqTCN33A9kmZh1DDJHwO
5x9Xd8w6ZfCLIt5YXLhG2HLfaBizZBjTXTWRIannuHmSqI435T6UuJehKDSZq2hE
UGIDvtZ28kavK6B7wHgSQqM8FH+L6Tmd
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:11 2024 by rpki-client on console-ams.rpki-client.org