Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          Onxz7p52p8OEVA+M0CtyV+W59vWO3UezWPhcHqh2Oh0=
Subject key identifier:   65:DD:7E:77:23:B9:08:47:DB:6D:45:4F:41:A9:25:01:B4:59:6D:2E
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          48
Signing time:             Thu 19 Sep 2024 05:44:12 +0000
Manifest this update:     Thu 19 Sep 2024 05:44:11 +0000
Manifest next update:     Thu 26 Sep 2024 05:44:11 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: Cxcbj3ykTFojaTJ34Lj6/0ibQgRLZu39hicYHyfbhy0=)
                          2: 1E792ABE35F911EF9E12FD70C4F9AE02.roa (hash: SSrsMT+MsifXEZigg/3tEfQ8xvez6W91bst1f8XBmqU=)
                          3: 01935FDC35F911EFBF29CF70C4F9AE02.roa (hash: OIK0wz8AgNykEH5wxa89kT57n1qLZMAZrtTx9EHsCj0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 05:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Sep 19 05:44:11 2024 GMT
            Not After : Sep 26 05:44:11 2024 GMT
        Subject: CN=66ebba2b-8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:da:12:b5:3e:a3:65:f9:a0:f8:13:1b:d8:
                    74:b8:46:73:dc:8a:4b:15:ce:1f:85:e0:8d:c3:fc:
                    a9:d9:ba:20:06:a1:55:8b:4e:98:15:61:a5:fa:70:
                    77:a4:74:3e:1d:bb:5c:d2:3f:d2:12:ed:60:9f:66:
                    b9:f8:95:9f:c6:84:e6:cb:0e:75:6e:55:82:4e:c9:
                    d8:a5:b6:d3:69:6f:e5:0f:30:64:17:01:6c:22:2a:
                    d8:d2:c8:c1:cf:86:24:f1:17:c4:2b:1e:6d:06:d7:
                    10:41:4e:4f:da:f6:e3:91:51:a1:7b:6b:56:82:73:
                    64:0d:ed:7d:87:dd:ed:cf:61:4e:d7:a9:e8:9b:bd:
                    6e:8b:1a:4e:0f:eb:fe:41:f6:81:3e:57:57:6e:cb:
                    72:af:b1:6a:71:25:17:0d:fd:85:8b:50:5b:f1:9a:
                    44:59:c4:43:ec:09:f4:44:44:8d:b5:26:a7:81:8a:
                    85:d9:37:86:15:58:f1:79:ba:4b:4e:47:5a:97:c1:
                    89:8b:c7:43:91:98:59:d9:4e:7c:f7:78:1c:fa:75:
                    0b:fa:cb:f8:21:0e:3f:da:4e:88:2c:dc:55:d7:44:
                    f7:d9:23:d6:8d:0d:d3:d2:f6:69:06:0c:be:bc:8c:
                    95:d0:c8:38:e1:ce:c7:5d:83:d9:d1:41:6a:0e:ee:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:7E:77:23:B9:08:47:DB:6D:45:4F:41:A9:25:01:B4:59:6D:2E
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:a7:c8:ca:9d:d6:0f:b3:fb:93:a6:3b:5f:0a:56:c1:9e:
         7d:19:98:2f:d2:a4:a0:8a:4b:c8:26:84:39:09:5e:cd:51:af:
         fa:b3:ac:69:f9:7f:45:30:2b:f4:49:03:de:c4:84:8c:fb:d2:
         d1:b6:1b:59:d1:5e:77:21:55:22:9a:7c:e6:7b:af:62:7a:67:
         01:89:b4:bd:62:a7:5b:8c:c5:8f:4b:96:23:df:46:b8:bb:e1:
         73:01:19:bf:f3:0e:a5:30:1a:44:d2:43:ff:48:c9:f3:e1:cf:
         ab:b0:5e:5b:a7:de:bf:25:8b:6d:fa:99:3c:6c:54:de:eb:a1:
         48:89:97:e0:f6:16:18:f4:b8:c0:6a:c0:6b:55:bd:7a:c7:c8:
         3e:84:35:d2:fd:3a:42:f1:d8:fd:42:63:ba:08:a3:45:92:7b:
         37:f8:49:e1:64:b9:ee:18:29:2b:93:8f:f2:0f:16:c2:17:cd:
         3f:a6:71:6c:de:79:bf:d3:94:31:62:8a:49:ca:7d:f9:1f:6c:
         dd:dd:1c:61:db:4c:41:f1:6b:04:63:79:de:66:66:93:39:e8:
         2f:84:40:62:f7:32:ee:6b:b1:b9:df:23:eb:48:7e:a4:24:e3:
         b3:3e:37:ce:d6:53:b7:f4:51:6e:08:d4:a3:77:a8:64:b6:6f:
         91:6d:b8:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDVENzExMC8GA1UEBRMoQUE0NDA1QjFCRkE5NkM5QzY5QjAyOTAzM0VGNDgxRDhG
NThBNzdFNTAeFw0yNDA5MTkwNTQ0MTFaFw0yNDA5MjYwNTQ0MTFaMBgxFjAUBgNV
BAMTDTY2ZWJiYTJiLTg2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC80toStT6jZfmg+BMb2HS4RnPciksVzh+F4I3D/KnZuiAGoVWLTpgVYaX6cHek
dD4du1zSP9IS7WCfZrn4lZ/GhObLDnVuVYJOydilttNpb+UPMGQXAWwiKtjSyMHP
hiTxF8QrHm0G1xBBTk/a9uORUaF7a1aCc2QN7X2H3e3PYU7XqeibvW6LGk4P6/5B
9oE+V1duy3KvsWpxJRcN/YWLUFvxmkRZxEPsCfRERI21JqeBioXZN4YVWPF5uktO
R1qXwYmLx0ORmFnZTnz3eBz6dQv6y/ghDj/aTogs3FXXRPfZI9aNDdPS9mkGDL68
jJXQyDjhzsddg9nRQWoO7rC1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZd1+dyO5
CEfbbUVPQaklAbRZbS4wHwYDVR0jBBgwFoAUqkQFsb+pbJxpsCkDPvSB2PWKd+Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNUQ3Lzk2QTM2QUE4MTZE
ODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2Qt
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcWtRRnNiLXBiSnhwc0NrRFB2U0IyUFdLZC1VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
NUQ3Lzk2QTM2QUE4MTZEODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1wYkp4
cHNDa0RQdlNCMlBXS2QtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALMPp8jKndYPs/uTpjtfClbBnn0ZmC/SpKCKS8gmhDkJXs1Rr/qzrGn5
f0UwK/RJA97EhIz70tG2G1nRXnchVSKafOZ7r2J6ZwGJtL1ip1uMxY9LliPfRri7
4XMBGb/zDqUwGkTSQ/9IyfPhz6uwXlun3r8li236mTxsVN7roUiJl+D2Fhj0uMBq
wGtVvXrHyD6ENdL9OkLx2P1CY7oIo0WSezf4SeFkue4YKSuTj/IPFsIXzT+mcWze
eb/TlDFiiknKffkfbN3dHGHbTEHxawRjed5mZpM56C+EQGL3Mu5rsbnfI+tIfqQk
47M+N87WU7f0UW4I1KN3qGS2b5FtuCc=
-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:51 2024 by rpki-client on console-fra.rpki-client.org