Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
File:                     blskgROGqkqC2B9yxd0kmShvv9Q.mft (raw, json)
Hash identifier:          zLgY47VTjjDd6ExR6d0ngan3FUp+UI2DITnvNqil1NI=
Subject key identifier:   5B:62:6D:60:86:A6:F3:54:2E:5D:B0:E9:5E:90:E9:1A:14:A8:13:A6
Authority key identifier: 6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4
Certificate issuer:       /CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
Certificate serial:       0687
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
Manifest number:          067E
Signing time:             Fri 22 Nov 2024 21:51:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:51:48 +0000
Manifest next update:     Fri 29 Nov 2024 21:51:48 +0000
Files and hashes:         1: blskgROGqkqC2B9yxd0kmShvv9Q.crl (hash: yykEAq4L6WdZAYHVM5dNvDeYcQnUOaJRIh298JzZZTs=)
                          2: 3B9F9ED8FE9811EC9965A444C4F9AE02.roa (hash: ouFtzZYfiljlKOGtN7Lx+V8FqeIl/9AyXBh/466AOWs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl
                          rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175251/serialNumber=6E5B24811386AA4A82D81F72C5DD2499286FBFD4
        Validity
            Not Before: Nov 22 21:51:48 2024 GMT
            Not After : Nov 29 21:51:48 2024 GMT
        Subject: CN=6740fcf4-202b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:ac:69:3d:a8:2b:35:56:06:47:5c:94:c3:
                    f3:0a:b8:1c:c5:59:1d:6c:26:fc:8a:59:97:8f:fe:
                    9c:7a:f5:67:77:29:35:40:e5:87:0e:20:21:51:fa:
                    7d:08:15:58:24:5c:81:3e:78:09:5a:21:44:bd:70:
                    7f:5f:13:17:2c:20:80:58:b6:11:20:1e:77:05:37:
                    34:bc:d8:93:1a:7b:b4:53:f7:dc:91:7d:62:fd:9c:
                    26:c5:8b:fa:6f:24:36:61:82:94:e6:b1:d2:02:33:
                    6e:a3:92:cb:eb:7b:47:16:a8:3b:3f:68:a2:70:44:
                    05:cb:05:b2:2d:68:4c:6e:a2:a0:6c:0e:03:55:cb:
                    18:16:8b:ea:8b:9b:95:94:b1:a3:99:88:ca:00:9c:
                    8e:94:c9:6a:d7:7b:f0:a4:8b:cf:38:07:ef:a3:84:
                    8f:eb:85:64:55:e7:ce:00:7a:e6:6f:db:49:95:fc:
                    5f:14:2b:9a:8f:8b:fb:e1:a8:ce:ba:42:8a:01:c8:
                    bc:2a:98:7f:cd:16:91:f0:40:fe:52:c2:20:4b:b2:
                    fb:e5:21:2f:08:b5:c0:b0:6c:3b:1d:d0:88:e7:cf:
                    88:4a:98:f6:96:54:93:3a:75:bc:93:2c:4e:80:25:
                    18:fa:e9:f7:84:1b:e9:45:db:45:df:c2:3f:5a:c0:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:6D:60:86:A6:F3:54:2E:5D:B0:E9:5E:90:E9:1A:14:A8:13:A6
            X509v3 Authority Key Identifier:
                keyid:6E:5B:24:81:13:86:AA:4A:82:D8:1F:72:C5:DD:24:99:28:6F:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/blskgROGqkqC2B9yxd0kmShvv9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175251/81BFA32253EF11EB97D38C16C4F9AE02/blskgROGqkqC2B9yxd0kmShvv9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:92:f0:fc:bb:9a:30:01:ae:1a:4f:86:58:13:f8:1c:4d:
         9c:c6:0a:f3:6e:c9:e0:19:29:e3:8f:ba:96:fe:55:18:68:de:
         af:4f:10:77:f9:50:ce:bc:70:92:bd:24:a5:e0:97:ff:b7:5e:
         05:24:d0:96:f1:d7:de:5d:7e:24:bf:b7:f7:06:ab:4b:da:73:
         40:80:ba:58:81:c4:e2:1e:e2:66:c5:ca:8a:04:d1:42:cd:1b:
         bd:75:e8:d6:ac:b6:60:56:d8:92:ae:dd:85:6a:79:b2:29:e8:
         45:96:c8:69:ea:8b:11:64:82:aa:68:46:b3:e9:11:24:09:26:
         de:c5:ee:e3:39:28:b0:c5:7d:88:08:f1:cb:f2:19:41:ca:15:
         b8:a0:8f:3a:af:84:29:fd:dc:5b:af:08:c4:0e:a2:53:fc:bf:
         01:34:6f:94:7c:16:85:ff:f6:50:92:f4:53:32:14:d3:b5:b4:
         a2:05:97:37:f5:19:c6:d9:4d:c1:ea:ea:3b:39:7d:9a:f3:c8:
         d1:0b:d3:f4:11:70:f1:65:48:81:ed:27:a8:5e:ea:f7:2e:4c:
         29:21:8b:71:d1:2e:cf:3d:43:44:45:f8:49:9c:2f:57:00:a5:
         15:56:e7:78:7f:79:c1:7c:06:8e:d0:cd:e7:c9:3c:9d:45:47:
         d6:ee:a9:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyNTExMTAvBgNVBAUTKDZFNUIyNDgxMTM4NkFBNEE4MkQ4MUY3MkM1REQyNDk5
Mjg2RkJGRDQwHhcNMjQxMTIyMjE1MTQ4WhcNMjQxMTI5MjE1MTQ4WjAYMRYwFAYD
VQQDEw02NzQwZmNmNC0yMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlqsaT2oKzVWBkdclMPzCrgcxVkdbCb8ilmXj/6cevVndyk1QOWHDiAhUfp9
CBVYJFyBPngJWiFEvXB/XxMXLCCAWLYRIB53BTc0vNiTGnu0U/fckX1i/ZwmxYv6
byQ2YYKU5rHSAjNuo5LL63tHFqg7P2iicEQFywWyLWhMbqKgbA4DVcsYFovqi5uV
lLGjmYjKAJyOlMlq13vwpIvPOAfvo4SP64VkVefOAHrmb9tJlfxfFCuaj4v74ajO
ukKKAci8Kph/zRaR8ED+UsIgS7L75SEvCLXAsGw7HdCI58+ISpj2llSTOnW8kyxO
gCUY+un3hBvpRdtF38I/WsB1vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtibWCG
pvNULl2w6V6Q6RoUqBOmMB8GA1UdIwQYMBaAFG5bJIEThqpKgtgfcsXdJJkob7/U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI1MS84MUJGQTMyMjUz
RUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3FrcUMyQjl5eGQwa21TaHZ2
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Jsc2tnUk9HcWtxQzJCOXl4ZDBrbVNodnY5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTI1MS84MUJGQTMyMjUzRUYxMUVCOTdEMzhDMTZDNEY5QUUwMi9ibHNrZ1JPR3Fr
cUMyQjl5eGQwa21TaHZ2OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOwJLw/LuaMAGuGk+GWBP4HE2cxgrzbsngGSnjj7qW/lUYaN6vTxB3
+VDOvHCSvSSl4Jf/t14FJNCW8dfeXX4kv7f3BqtL2nNAgLpYgcTiHuJmxcqKBNFC
zRu9dejWrLZgVtiSrt2FanmyKehFlshp6osRZIKqaEaz6REkCSbexe7jOSiwxX2I
CPHL8hlByhW4oI86r4Qp/dxbrwjEDqJT/L8BNG+UfBaF//ZQkvRTMhTTtbSiBZc3
9RnG2U3B6uo7OX2a88jRC9P0EXDxZUiB7SeoXur3LkwpIYtx0S7PPUNERfhJnC9X
AKUVVud4f3nBfAaO0M3nyTydRUfW7qlD
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org