Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
File:                     AI8syGQkHehjXpOldED5wusli7M.mft (raw, json)
Hash identifier:          5f470Q4Nb0WlTNUZndkgAGBwTJjj5kdljU51h73o+kI=
Subject key identifier:   90:A4:4E:5D:20:3B:87:7A:B4:FE:C7:FE:92:E8:EF:33:7B:40:C7:C3
Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3
Certificate issuer:       /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
Manifest number:          8C
Signing time:             Thu 21 Nov 2024 04:37:47 +0000
Manifest this update:     Thu 21 Nov 2024 04:37:46 +0000
Manifest next update:     Thu 28 Nov 2024 04:37:46 +0000
Files and hashes:         1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: 1yjhVfOvqYqo/s0pdNAB+a+4GV0ZyhfC04QwITF0I0g=)
                          2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: wIfhQ+g9F9NVqk8nq5n90WhcuB/KJzwzyp/RW8x0Uho=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl
                          rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3
        Validity
            Not Before: Nov 21 04:37:46 2024 GMT
            Not After : Nov 28 04:37:46 2024 GMT
        Subject: CN=673eb91a-caac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:3b:4f:86:9e:25:65:fc:c2:ed:8c:0e:99:
                    d0:ea:40:68:89:45:af:36:6e:f6:c9:53:55:2f:78:
                    e0:b1:5c:dd:3e:11:41:6b:24:fb:96:e6:2f:ea:60:
                    8b:52:46:28:b3:ef:cb:ad:66:05:bf:84:65:a5:6f:
                    b2:e7:1f:84:d3:52:b1:09:42:d2:f0:80:bd:57:1c:
                    1c:ab:f5:1f:66:6c:31:57:6b:5d:1b:ad:4c:7c:62:
                    ba:2c:e3:31:20:2f:f3:ae:7d:00:a5:31:1d:79:ee:
                    1c:be:fb:ae:63:d7:50:1b:13:c6:37:d6:f2:75:00:
                    fd:87:c3:e4:be:9b:18:94:48:41:7c:9e:3f:9d:f4:
                    17:5d:39:98:72:11:3d:f4:2a:4a:ef:b6:09:c3:83:
                    99:e0:62:71:eb:5a:42:2d:3c:58:22:31:54:40:31:
                    48:3d:2b:c4:a2:df:86:79:1e:17:59:b9:3f:a8:5b:
                    20:1c:e1:90:92:03:d8:c4:c5:48:b6:7f:76:3c:d2:
                    a7:6a:99:74:f4:3f:d5:e4:14:45:e6:7f:c3:3c:01:
                    84:0d:b2:8a:04:57:65:ea:87:d6:8e:d4:a0:d7:5f:
                    26:a6:45:ab:8e:4e:9d:50:b9:99:a2:20:ca:95:c1:
                    89:fa:24:49:b6:a8:35:7c:b1:80:c9:b8:a2:1b:d5:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A4:4E:5D:20:3B:87:7A:B4:FE:C7:FE:92:E8:EF:33:7B:40:C7:C3
            X509v3 Authority Key Identifier:
                keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:40:01:a5:51:a1:30:e6:a2:55:e9:37:4b:71:5d:d7:b3:07:
         ea:83:ad:49:bb:18:ed:ad:a7:5e:ac:fe:b9:cd:27:5f:5d:85:
         94:a2:8b:aa:a3:a7:40:23:75:10:74:05:95:2a:5b:5e:de:27:
         80:18:4b:b7:0b:c0:c5:09:af:77:7a:19:05:a8:35:42:3f:ce:
         db:77:a8:be:66:1e:ea:d1:d9:08:6f:c9:5b:dc:57:86:ec:c7:
         7c:5f:04:d9:26:0f:e5:93:63:05:4c:54:9a:a7:05:bb:7f:fc:
         4b:74:1f:51:2d:e5:1c:78:60:e6:1c:94:9c:fe:80:ff:12:9f:
         bf:cb:06:b9:23:a1:98:b3:7d:48:48:5a:57:30:a3:03:2f:e3:
         8d:e9:db:85:3d:68:00:20:64:9a:5d:5d:9b:11:c1:5e:69:bb:
         3e:3c:af:f1:95:c2:8a:77:fe:5e:bb:ce:92:1d:71:a6:5f:05:
         f1:ee:69:21:c5:4c:74:07:5c:a1:4f:e6:7a:0c:5f:96:71:35:
         15:b1:a0:4a:11:3c:40:43:4d:33:94:20:8d:36:69:2b:b5:e0:
         4f:0c:4a:1a:35:03:19:22:54:10:1e:2e:b4:41:18:06:70:8f:
         bd:1f:72:ea:3c:b0:e2:4c:5f:db:2f:5f:a8:72:2a:a8:75:bc:
         48:8e:b5:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy
RUIyNThCQjMwHhcNMjQxMTIxMDQzNzQ2WhcNMjQxMTI4MDQzNzQ2WjAYMRYwFAYD
VQQDEw02NzNlYjkxYS1jYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsi47T4aeJWX8wu2MDpnQ6kBoiUWvNm72yVNVL3jgsVzdPhFBayT7luYv6mCL
UkYos+/LrWYFv4RlpW+y5x+E01KxCULS8IC9Vxwcq/UfZmwxV2tdG61MfGK6LOMx
IC/zrn0ApTEdee4cvvuuY9dQGxPGN9bydQD9h8PkvpsYlEhBfJ4/nfQXXTmYchE9
9CpK77YJw4OZ4GJx61pCLTxYIjFUQDFIPSvEot+GeR4XWbk/qFsgHOGQkgPYxMVI
tn92PNKnapl09D/V5BRF5n/DPAGEDbKKBFdl6ofWjtSg118mpkWrjk6dULmZoiDK
lcGJ+iRJtqg1fLGAybiiG9VsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCkTl0g
O4d6tP7H/pLo7zN7QMfDMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF
Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl
aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFQAGlUaEw5qJV6TdLcV3Xswfqg61JuxjtraderP65zSdfXYWUoouq
o6dAI3UQdAWVKlte3ieAGEu3C8DFCa93ehkFqDVCP87bd6i+Zh7q0dkIb8lb3FeG
7Md8XwTZJg/lk2MFTFSapwW7f/xLdB9RLeUceGDmHJSc/oD/Ep+/ywa5I6GYs31I
SFpXMKMDL+ON6duFPWgAIGSaXV2bEcFeabs+PK/xlcKKd/5eu86SHXGmXwXx7mkh
xUx0B1yhT+Z6DF+WcTUVsaBKETxAQ00zlCCNNmkrteBPDEoaNQMZIlQQHi60QRgG
cI+9H3LqPLDiTF/bL1+ociqodbxIjrWi
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org