Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File:                     _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier:          qu/D5rU5i7l7Elnvsd3kFoFVsAqyPHnVt+eGbKeGaPI=
Subject key identifier:   39:27:7A:B2:9E:E1:B6:32:36:8B:57:B6:5B:63:B3:D5:C6:2E:E5:2B
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number:          0C7E
Signing time:             Fri 22 Nov 2024 18:13:48 +0000
Manifest this update:     Fri 22 Nov 2024 18:13:47 +0000
Manifest next update:     Fri 29 Nov 2024 18:13:47 +0000
Files and hashes:         1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: fFaFt2rj3Ob4MfNchc/aZyTDTqHSTYnquESyOgzWrkk=)
                          2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: yrkSxV/0xOMsR3s22LS0pDdoQHJ5ZSDkNDxtDDB9vqw=)
                          3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: g2YYefDebt1ggBsxS/Az3CT7y0MM/TrYsNn5mU9ndnE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Nov 22 18:13:47 2024 GMT
            Not After : Nov 29 18:13:47 2024 GMT
        Subject: CN=6740c9db-c035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:eb:3a:a2:d7:2c:9f:11:9f:78:3e:c2:e5:
                    e4:35:e6:d3:c3:10:24:cf:56:a2:ea:cf:32:e7:96:
                    87:48:63:96:6d:80:37:14:48:cf:5a:0b:be:9a:83:
                    78:2e:06:1e:b5:63:3a:de:21:aa:c4:25:bf:21:0c:
                    cf:1c:59:d4:6c:f9:fb:d9:84:54:48:a3:bc:07:1e:
                    68:b1:5e:d9:23:99:24:1a:00:a4:fe:bd:10:07:df:
                    84:1a:84:3b:10:f8:b4:30:91:ca:7b:4c:0c:6e:48:
                    02:90:10:37:d4:49:ae:36:96:e0:96:dc:d1:51:0a:
                    ed:84:20:b4:ac:4a:f8:a5:64:83:a2:d3:dd:82:0f:
                    c4:14:8c:0d:ab:14:a5:4f:49:a8:96:46:30:a0:d5:
                    ed:8c:34:56:24:06:d6:58:e4:c7:4e:4f:20:86:26:
                    1f:35:72:e5:e1:c1:ba:3f:e1:7d:50:f8:45:61:44:
                    75:15:e1:7f:1b:60:17:c8:5e:01:cb:0f:85:6b:43:
                    34:ff:59:65:21:f6:1e:4f:c3:09:84:35:e5:9b:24:
                    fd:0e:06:e8:b1:88:39:fb:8a:13:4a:3b:8e:81:b1:
                    2a:e5:34:a1:87:a0:38:c4:e2:85:d9:5e:8a:1d:8e:
                    c7:67:87:c4:11:44:67:7f:87:6c:31:c6:9b:22:ac:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:27:7A:B2:9E:E1:B6:32:36:8B:57:B6:5B:63:B3:D5:C6:2E:E5:2B
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:e3:0f:fd:9e:5a:fd:b8:65:e2:5f:07:e6:69:e1:94:cd:
         eb:6e:7f:6d:c8:ec:c0:0d:63:9d:ff:31:0c:df:0a:9c:e3:4a:
         5d:f6:52:85:ab:2c:f7:14:49:62:80:28:55:66:bd:72:9b:68:
         11:d0:8d:d5:8f:6b:c2:5e:a6:47:1b:eb:70:ba:f6:e9:fa:4d:
         d0:14:da:1a:7d:13:d9:99:bd:4f:db:fd:78:14:d7:a0:96:81:
         ca:5c:89:23:3a:44:e8:9e:7a:2e:83:c9:e8:ce:fd:b2:de:7b:
         c0:51:0f:45:90:b6:f4:8c:06:a9:a2:93:e6:a7:aa:9e:89:19:
         7c:27:3d:dd:57:dc:b8:81:d3:a5:9c:2c:61:ee:aa:81:c8:4b:
         35:98:05:f6:4e:1c:75:be:f7:b3:f5:22:f1:13:4f:00:21:0d:
         13:bd:b0:7d:d3:b7:cb:c9:a3:51:b3:dc:75:2a:48:1b:e7:29:
         3c:66:41:26:36:de:8f:45:fd:06:fc:49:8a:51:6d:0a:ab:c3:
         a8:0e:a9:48:e2:f7:46:42:d6:a5:a2:95:5b:4d:f1:0b:d3:98:
         5b:9c:8c:47:2d:9c:fc:ec:0b:34:1d:eb:bd:99:21:90:8b:40:
         af:47:d3:3c:ca:15:26:57:8e:98:fd:62:95:2a:eb:04:0f:ca:
         5e:59:1b:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE
MDc1REQxOUIwHhcNMjQxMTIyMTgxMzQ3WhcNMjQxMTI5MTgxMzQ3WjAYMRYwFAYD
VQQDEw02NzQwYzlkYi1jMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt/rOqLXLJ8Rn3g+wuXkNebTwxAkz1ai6s8y55aHSGOWbYA3FEjPWgu+moN4
LgYetWM63iGqxCW/IQzPHFnUbPn72YRUSKO8Bx5osV7ZI5kkGgCk/r0QB9+EGoQ7
EPi0MJHKe0wMbkgCkBA31EmuNpbgltzRUQrthCC0rEr4pWSDotPdgg/EFIwNqxSl
T0molkYwoNXtjDRWJAbWWOTHTk8ghiYfNXLl4cG6P+F9UPhFYUR1FeF/G2AXyF4B
yw+Fa0M0/1llIfYeT8MJhDXlmyT9DgbosYg5+4oTSjuOgbEq5TShh6A4xOKF2V6K
HY7HZ4fEEURnf4dsMcabIqxXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDknerKe
4bYyNotXtltjs9XGLuUrMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2
NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls
OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYS+MP/Z5a/bhl4l8H5mnhlM3rbn9tyOzADWOd/zEM3wqc40pd9lKF
qyz3FEligChVZr1ym2gR0I3Vj2vCXqZHG+twuvbp+k3QFNoafRPZmb1P2/14FNeg
loHKXIkjOkTonnoug8nozv2y3nvAUQ9FkLb0jAapopPmp6qeiRl8Jz3dV9y4gdOl
nCxh7qqByEs1mAX2Thx1vvez9SLxE08AIQ0TvbB907fLyaNRs9x1Kkgb5yk8ZkEm
Nt6PRf0G/EmKUW0Kq8OoDqlI4vdGQtalopVbTfEL05hbnIxHLZz87As0Heu9mSGQ
i0CvR9M8yhUmV46Y/WKVKusED8peWRs1
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org