Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.mft
File:                     9rOizh3CE312nFExGImuDM0gTY4.mft (raw, json)
Hash identifier:          0ZDYogRMGt8uXK6d0/pFUwMvHltKyaI1ORt28J2Caxo=
Subject key identifier:   4B:23:FD:FC:24:CC:B0:17:66:BF:8C:C9:72:F5:2B:E6:3F:E2:3D:4C
Authority key identifier: F6:B3:A2:CE:1D:C2:13:7D:76:9C:51:31:18:89:AE:0C:CD:20:4D:8E
Certificate issuer:       /CN=A918369A/serialNumber=F6B3A2CE1DC2137D769C51311889AE0CCD204D8E
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.mft
Manifest number:          56
Signing time:             Thu 21 Nov 2024 05:13:33 +0000
Manifest this update:     Thu 21 Nov 2024 05:13:32 +0000
Manifest next update:     Thu 28 Nov 2024 05:13:32 +0000
Files and hashes:         1: 9rOizh3CE312nFExGImuDM0gTY4.crl (hash: uFS0fL4wTa9H2uUZ7AFLFJ28Hj96GBGa4I0/UyCqMUQ=)
                          2: 4CE83578247111EFB791AA5FC4F9AE02.roa (hash: hZgi/dYJ7uzfy6oclXkFTnS07+g/zy8EpdDFFy5r1gk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.crl
                          rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918369A/serialNumber=F6B3A2CE1DC2137D769C51311889AE0CCD204D8E
        Validity
            Not Before: Nov 21 05:13:32 2024 GMT
            Not After : Nov 28 05:13:32 2024 GMT
        Subject: CN=673ec17d-1a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:23:ed:d2:09:cd:1c:cc:17:ac:7b:ab:ee:
                    fe:23:7d:40:3c:f4:a9:97:1d:c1:0e:32:0f:7f:bf:
                    a6:87:ee:06:48:5c:e2:5a:c7:e5:9c:b8:7a:60:00:
                    aa:59:8e:d8:12:44:e8:62:66:61:5c:10:6c:81:42:
                    00:62:67:73:cf:70:fc:55:b8:6f:5d:98:47:11:e0:
                    53:c1:e6:0d:00:b2:9b:0e:ed:f0:49:0b:c7:1d:30:
                    22:d8:12:ce:7d:fe:42:99:55:83:09:3d:5c:c0:96:
                    39:10:0d:7f:ff:9c:94:5b:5b:67:a2:ae:49:0b:fc:
                    58:76:80:ac:32:0e:30:99:dd:f0:eb:16:7f:08:ca:
                    6c:ea:38:e6:4b:45:9d:21:22:a7:72:14:87:88:16:
                    50:45:78:db:8c:0f:55:47:40:ad:b3:f1:a2:59:55:
                    b3:7e:d4:98:36:e7:29:4b:1d:b6:6a:a4:18:7f:d9:
                    ca:f8:e1:f8:ee:bd:e6:28:ff:b8:da:f2:3b:97:c4:
                    ae:47:30:04:cc:db:b2:44:1d:bc:6c:07:c5:ee:90:
                    6c:2c:87:c6:12:b5:bf:a0:b9:a7:a3:4a:54:c7:77:
                    83:35:11:fe:26:34:96:fa:62:18:6e:67:39:9f:85:
                    8a:00:72:e3:b4:b3:34:26:8b:5c:20:a7:88:a6:db:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:FD:FC:24:CC:B0:17:66:BF:8C:C9:72:F5:2B:E6:3F:E2:3D:4C
            X509v3 Authority Key Identifier:
                keyid:F6:B3:A2:CE:1D:C2:13:7D:76:9C:51:31:18:89:AE:0C:CD:20:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rOizh3CE312nFExGImuDM0gTY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918369A/C72C518A247011EFB98E625EC4F9AE02/9rOizh3CE312nFExGImuDM0gTY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:63:bf:c7:8b:62:63:50:c3:3a:55:18:96:11:1b:cb:9c:
         3c:7d:dc:0f:b2:97:c9:5d:2d:f4:76:fa:75:4e:75:64:f4:15:
         a2:2a:72:65:a6:64:53:13:48:1a:db:a9:2c:c3:14:75:1a:0e:
         3c:59:33:76:92:95:2a:11:9f:ed:0f:b7:47:71:03:4f:45:ad:
         9d:dd:62:3b:fb:86:13:47:77:1b:e0:db:6b:a0:71:9a:ae:5e:
         86:e8:6f:48:93:13:92:b2:d5:2b:0c:fb:aa:d0:9c:6d:5e:18:
         a5:44:1d:1c:35:79:a8:fc:19:bb:d9:3d:51:8a:f8:a8:72:f8:
         70:97:ff:f1:f2:b5:95:03:67:fc:68:d1:31:a0:df:50:73:39:
         6d:8d:cb:e1:a9:a5:c0:2f:2c:ab:47:87:64:47:26:5e:f2:9a:
         1f:b7:56:30:ce:9a:b0:10:3c:e3:79:f3:68:b4:21:58:c1:01:
         d1:46:fc:60:3a:50:29:be:47:08:06:0a:4d:5c:0d:94:62:ab:
         ff:36:f3:19:f5:91:e7:71:4c:bf:6b:dc:c4:1b:98:13:ec:f4:
         20:33:02:98:3f:3d:a6:e5:b8:9c:d9:29:1f:36:b9:26:10:a1:
         b0:53:e8:71:8b:41:41:ba:1d:fb:09:92:a1:62:db:7d:2a:9a:
         9c:57:1e:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MzY5QTExMC8GA1UEBRMoRjZCM0EyQ0UxREMyMTM3RDc2OUM1MTMxMTg4OUFFMEND
RDIwNEQ4RTAeFw0yNDExMjEwNTEzMzJaFw0yNDExMjgwNTEzMzJaMBgxFjAUBgNV
BAMTDTY3M2VjMTdkLTFhOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIGiPt0gnNHMwXrHur7v4jfUA89KmXHcEOMg9/v6aH7gZIXOJax+WcuHpgAKpZ
jtgSROhiZmFcEGyBQgBiZ3PPcPxVuG9dmEcR4FPB5g0AspsO7fBJC8cdMCLYEs59
/kKZVYMJPVzAljkQDX//nJRbW2eirkkL/Fh2gKwyDjCZ3fDrFn8IymzqOOZLRZ0h
IqdyFIeIFlBFeNuMD1VHQK2z8aJZVbN+1Jg25ylLHbZqpBh/2cr44fjuveYo/7ja
8juXxK5HMATM27JEHbxsB8XukGwsh8YStb+guaejSlTHd4M1Ef4mNJb6YhhuZzmf
hYoAcuO0szQmi1wgp4im23eJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSyP9/CTM
sBdmv4zJcvUr5j/iPUwwHwYDVR0jBBgwFoAU9rOizh3CE312nFExGImuDM0gTY4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNjlBL0M3MkM1MThBMjQ3
MDExRUZCOThFNjI1RUM0RjlBRTAyLzlyT2l6aDNDRTMxMm5GRXhHSW11RE0wZ1RZ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOXJPaXpoM0NFMzEybkZFeEdJbXVETTBnVFk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
NjlBL0M3MkM1MThBMjQ3MDExRUZCOThFNjI1RUM0RjlBRTAyLzlyT2l6aDNDRTMx
Mm5GRXhHSW11RE0wZ1RZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH0GY7/Hi2JjUMM6VRiWERvLnDx93A+yl8ldLfR2+nVOdWT0FaIqcmWm
ZFMTSBrbqSzDFHUaDjxZM3aSlSoRn+0Pt0dxA09FrZ3dYjv7hhNHdxvg22ugcZqu
Xobob0iTE5Ky1SsM+6rQnG1eGKVEHRw1eaj8GbvZPVGK+Khy+HCX//HytZUDZ/xo
0TGg31BzOW2Ny+GppcAvLKtHh2RHJl7ymh+3VjDOmrAQPON582i0IVjBAdFG/GA6
UCm+RwgGCk1cDZRiq/828xn1kedxTL9r3MQbmBPs9CAzApg/PabluJzZKR82uSYQ
obBT6HGLQUG6HfsJkqFi230qmpxXHrw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org