Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          ttGfdIKw+DGYnBUj7YtUuHFa7thcSro1Sh+EExN1/9c=
Subject key identifier:   89:77:A5:2F:F0:E2:54:C4:47:ED:2F:C4:7D:25:98:AF:32:B8:CD:B2
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          32
Signing time:             Sat 09 Nov 2024 05:36:27 +0000
Manifest this update:     Sat 09 Nov 2024 05:36:26 +0000
Manifest next update:     Sat 16 Nov 2024 05:36:26 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: eC6M8nY/96e8O+U2PfTwaonu8DosUl4IDTlzi0hRxuo=)
                          2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 Nov 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Nov  9 05:36:26 2024 GMT
            Not After : Nov 16 05:36:26 2024 GMT
        Subject: CN=672ef4db-f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:26:1b:25:18:50:78:59:34:23:fb:a5:c0:
                    e0:18:54:65:96:95:96:7a:d5:cd:d6:eb:2e:91:a7:
                    ed:e0:d1:cd:41:cf:50:bb:19:7d:b3:50:56:29:21:
                    f5:9a:c3:d4:d6:3a:69:12:38:a0:80:51:fb:01:a2:
                    c4:5a:69:01:c5:f3:fe:aa:e5:71:59:82:43:da:8e:
                    d7:94:c7:e2:03:4f:ad:6e:d7:f7:35:42:f0:98:87:
                    45:64:f7:d7:89:22:88:ff:8c:85:1f:46:09:05:67:
                    62:13:de:42:0d:ed:49:0d:5d:0b:94:2e:53:73:24:
                    55:fe:2c:3e:99:69:31:4b:17:34:6e:58:b5:11:99:
                    54:b7:30:ab:46:ca:91:3a:7e:41:2c:14:45:92:67:
                    88:4b:bf:8a:b1:bf:d6:92:49:e7:2c:da:56:24:07:
                    02:bb:d0:5a:76:de:cc:27:03:43:ea:43:5b:b3:3e:
                    89:3c:41:fb:51:1b:d0:38:0f:55:da:67:ba:a5:3b:
                    a0:ed:8e:46:74:6d:8a:79:93:4d:62:a0:bb:26:0d:
                    00:ee:2b:88:41:ca:61:e6:4f:bd:e7:7c:9b:2d:02:
                    91:22:ec:85:6b:5e:6d:5b:b1:92:57:90:25:8e:a2:
                    f6:69:51:d4:cb:80:ee:f7:54:1f:b9:85:03:75:3d:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:77:A5:2F:F0:E2:54:C4:47:ED:2F:C4:7D:25:98:AF:32:B8:CD:B2
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:ee:e7:f1:7b:99:cf:ae:8a:65:4b:6f:2b:4d:38:e8:7b:
         66:01:bb:e4:5a:6c:4f:cf:b0:81:4c:21:b9:0d:c1:23:83:7f:
         27:e9:99:94:69:eb:07:e0:96:8a:8a:02:7f:7b:4b:f3:71:f4:
         46:04:6a:6e:5e:d9:64:80:36:b2:fb:fd:20:a7:99:e5:48:f7:
         22:07:16:79:db:2c:ad:01:0d:c6:40:ea:ba:68:e9:02:f5:dd:
         6a:d3:ae:1b:95:d7:06:a3:18:91:71:25:55:c5:c7:ec:52:77:
         bc:80:73:21:9a:f4:2a:ad:57:ef:77:35:1a:3c:23:c6:f0:23:
         dc:c7:fc:0d:ca:08:3d:2a:9c:d2:1a:fa:3a:6b:50:96:51:1e:
         25:12:63:03:e2:72:aa:92:6e:12:3c:bf:ad:67:a7:11:9f:0d:
         16:37:58:f2:ea:b6:07:2b:7c:d9:5f:db:50:b3:82:e3:35:ac:
         34:76:78:18:45:d2:10:e1:d3:9a:7b:5e:69:b0:da:51:f1:65:
         b8:05:78:63:bc:3e:c4:06:a0:4b:d6:88:91:06:5c:58:9e:6c:
         85:35:8c:14:6c:05:ce:ca:80:8e:a3:f0:bb:25:05:43:aa:b5:
         6b:2b:f7:49:38:82:7e:8a:6a:fd:37:df:91:5f:db:fa:f9:3d:
         9d:de:c1:6e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QjUzQjExMC8GA1UEBRMoOEQ5NzE3NzI3RDZFOEVFQjIzODA3QjMxM0MwNThEMDM1
NkZGRTE2MjAeFw0yNDExMDkwNTM2MjZaFw0yNDExMTYwNTM2MjZaMBgxFjAUBgNV
BAMTDTY3MmVmNGRiLWYwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8DiYbJRhQeFk0I/ulwOAYVGWWlZZ61c3W6y6Rp+3g0c1Bz1C7GX2zUFYpIfWa
w9TWOmkSOKCAUfsBosRaaQHF8/6q5XFZgkPajteUx+IDT61u1/c1QvCYh0Vk99eJ
Ioj/jIUfRgkFZ2IT3kIN7UkNXQuULlNzJFX+LD6ZaTFLFzRuWLURmVS3MKtGypE6
fkEsFEWSZ4hLv4qxv9aSSecs2lYkBwK70Fp23swnA0PqQ1uzPok8QftRG9A4D1Xa
Z7qlO6DtjkZ0bYp5k01ioLsmDQDuK4hBymHmT73nfJstApEi7IVrXm1bsZJXkCWO
ovZpUdTLgO73VB+5hQN1PZhhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiXelL/Di
VMRH7S/EfSWYrzK4zbIwHwYDVR0jBBgwFoAUjZcXcn1ujusjgHsxPAWNA1b/4WIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNTNCLzIwMzIzQTgyNTlE
RDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvalpjWGNuMXVqdXNqZ0hzeFBBV05BMWJfNFdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
NTNCLzIwMzIzQTgyNTlERDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVz
amdIc3hQQVdOQTFiXzRXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAhP7ufxe5nProplS28rTTjoe2YBu+RabE/PsIFMIbkNwSODfyfpmZRp
6wfgloqKAn97S/Nx9EYEam5e2WSANrL7/SCnmeVI9yIHFnnbLK0BDcZA6rpo6QL1
3WrTrhuV1wajGJFxJVXFx+xSd7yAcyGa9CqtV+93NRo8I8bwI9zH/A3KCD0qnNIa
+jprUJZRHiUSYwPicqqSbhI8v61npxGfDRY3WPLqtgcrfNlf21CzguM1rDR2eBhF
0hDh05p7Xmmw2lHxZbgFeGO8PsQGoEvWiJEGXFiebIU1jBRsBc7KgI6j8LslBUOq
tWsr90k4gn6Kav0335Ff2/r5PZ3ewW4=
-----END CERTIFICATE-----
Generated at Sat Nov 9 08:09:53 2024 by rpki-client on console-ams.rpki-client.org