Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          beEh7B3vc9GMuiPDeU2wvgVSSGhFaC7jb5paOp6ATP0=
Subject key identifier:   9D:4B:2D:3D:0A:1B:DD:40:05:83:B6:95:F2:A3:0A:13:E3:EF:19:FA
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          38
Signing time:             Thu 21 Nov 2024 05:35:35 +0000
Manifest this update:     Thu 21 Nov 2024 05:35:35 +0000
Manifest next update:     Thu 28 Nov 2024 05:35:35 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: t2q7/rUkOT7XuCjwgz97/I1/CITDejepqyXqPgweUCs=)
                          2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Nov 21 05:35:35 2024 GMT
            Not After : Nov 28 05:35:35 2024 GMT
        Subject: CN=673ec6a7-8258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:61:33:83:33:98:bb:2a:cd:34:bc:fd:3b:
                    11:5d:c6:58:78:49:cc:f4:7e:cc:b4:2b:bf:59:3d:
                    e2:99:ff:37:2f:ef:bf:65:70:f3:4d:0b:de:c5:91:
                    09:37:78:3e:a8:2e:43:e6:3e:6b:e6:db:d2:6a:f8:
                    d5:42:cd:46:76:f2:f5:b8:61:7b:85:d0:c3:28:01:
                    b1:69:b3:09:e1:c1:bf:25:f6:78:ac:26:e8:1f:7b:
                    3c:34:6c:d7:7a:7e:f6:80:2e:81:8a:f2:97:7d:a7:
                    45:1e:73:db:ac:46:8b:a5:35:61:d4:86:e2:e6:65:
                    5d:ff:e1:47:6a:f0:f0:eb:9f:5f:d2:89:87:ea:e8:
                    0c:79:cb:90:87:54:ea:2a:ba:6e:5c:81:aa:f6:d9:
                    5f:13:84:29:37:a2:3c:e5:79:67:e6:d7:04:31:14:
                    a6:21:4e:3e:98:26:a0:14:1c:94:c3:8e:83:2a:7b:
                    43:48:89:70:ab:16:5a:91:5d:71:36:3b:ed:9f:d9:
                    cb:34:9e:14:5b:2e:62:f3:6a:e0:6d:5b:f1:85:f4:
                    a0:36:dc:6f:cf:3e:e2:2f:e0:7a:48:de:ea:61:05:
                    cc:67:ff:0d:98:18:05:94:50:85:d5:36:da:ba:4e:
                    32:cc:15:aa:25:72:8a:71:c0:95:cd:b9:b3:55:96:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4B:2D:3D:0A:1B:DD:40:05:83:B6:95:F2:A3:0A:13:E3:EF:19:FA
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:3e:49:4e:67:98:fa:1a:21:04:d6:b1:4d:51:d8:e4:e0:
         0e:32:c1:3b:b1:ae:4e:ea:06:cc:ec:a1:d4:c8:3e:e9:7b:e6:
         94:8f:9a:5f:5d:61:86:73:4d:b3:ec:89:18:9c:e1:8f:e1:bd:
         e6:c0:21:28:55:81:76:76:bc:f7:00:45:27:34:6f:f8:41:ce:
         5c:57:f3:79:2f:95:db:8c:ed:0a:1b:c8:b2:2a:db:38:bb:a3:
         99:2d:a7:9c:73:6e:85:97:14:71:56:56:56:cd:87:a5:96:0a:
         a6:ad:ba:25:25:4e:c4:e1:2d:c6:fd:34:f7:02:c3:85:52:4f:
         8e:67:2f:21:ae:f8:61:01:e3:19:b6:b2:3b:d5:10:76:d1:5e:
         7a:f5:23:73:1e:17:1e:90:3c:11:cf:41:bb:25:2a:26:67:f9:
         3c:09:83:94:07:2a:71:28:05:02:37:99:d3:8c:72:f7:51:28:
         a6:2b:6c:24:ea:81:36:99:c4:da:a6:02:b1:b6:25:5c:bf:cb:
         00:14:a3:5b:82:ca:ef:7c:b2:68:b2:98:7f:16:d6:d2:98:e7:
         ee:4d:74:a0:92:fa:77:33:46:7e:e2:02:23:88:2a:db:be:0d:
         e9:79:5a:00:e7:48:51:d3:87:ee:01:cc:48:66:fa:b3:d9:de:
         45:fb:c1:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QjUzQjExMC8GA1UEBRMoOEQ5NzE3NzI3RDZFOEVFQjIzODA3QjMxM0MwNThEMDM1
NkZGRTE2MjAeFw0yNDExMjEwNTM1MzVaFw0yNDExMjgwNTM1MzVaMBgxFjAUBgNV
BAMTDTY3M2VjNmE3LTgyNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkimEzgzOYuyrNNLz9OxFdxlh4Scz0fsy0K79ZPeKZ/zcv779lcPNNC97FkQk3
eD6oLkPmPmvm29Jq+NVCzUZ28vW4YXuF0MMoAbFpswnhwb8l9nisJugfezw0bNd6
fvaALoGK8pd9p0Uec9usRoulNWHUhuLmZV3/4Udq8PDrn1/SiYfq6Ax5y5CHVOoq
um5cgar22V8ThCk3ojzleWfm1wQxFKYhTj6YJqAUHJTDjoMqe0NIiXCrFlqRXXE2
O+2f2cs0nhRbLmLzauBtW/GF9KA23G/PPuIv4HpI3uphBcxn/w2YGAWUUIXVNtq6
TjLMFaolcopxwJXNubNVlkqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnUstPQob
3UAFg7aV8qMKE+PvGfowHwYDVR0jBBgwFoAUjZcXcn1ujusjgHsxPAWNA1b/4WIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNTNCLzIwMzIzQTgyNTlE
RDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvalpjWGNuMXVqdXNqZ0hzeFBBV05BMWJfNFdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
NTNCLzIwMzIzQTgyNTlERDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVz
amdIc3hQQVdOQTFiXzRXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGX5PklOZ5j6GiEE1rFNUdjk4A4ywTuxrk7qBszsodTIPul75pSPml9d
YYZzTbPsiRic4Y/hvebAIShVgXZ2vPcARSc0b/hBzlxX83kvlduM7QobyLIq2zi7
o5ktp5xzboWXFHFWVlbNh6WWCqatuiUlTsThLcb9NPcCw4VST45nLyGu+GEB4xm2
sjvVEHbRXnr1I3MeFx6QPBHPQbslKiZn+TwJg5QHKnEoBQI3mdOMcvdRKKYrbCTq
gTaZxNqmArG2JVy/ywAUo1uCyu98smiymH8W1tKY5+5NdKCS+nczRn7iAiOIKtu+
Del5WgDnSFHTh+4BzEhm+rPZ3kX7waI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org