Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          +nkJAFSxWyVXWL5L5caJPdesNHTZVYwEDuipBybRS6M=
Subject key identifier:   13:AF:E0:31:EF:9D:5D:47:67:2D:DD:01:EE:32:23:24:19:F8:0A:11
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          086D
Signing time:             Fri 22 Nov 2024 20:23:27 +0000
Manifest this update:     Fri 22 Nov 2024 20:23:27 +0000
Manifest next update:     Fri 29 Nov 2024 20:23:27 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: T7Tm2VJtg/Y2E9O4c2pgnSEzAaJ6oqJH/N7bJ3ggLEM=)
                          2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: vous3xXvjFiAXL/Nl/pupAEtSC4yfMyFz8lsRruGfJA=)
                          3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: uzwGZx0lOKgMiII26y/rxgrO7suGbXUTp9/KngrkqPU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Nov 22 20:23:27 2024 GMT
            Not After : Nov 29 20:23:27 2024 GMT
        Subject: CN=6740e83f-aa0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:6b:b4:3e:2b:64:39:36:6a:2d:61:80:f5:
                    18:4e:ee:b9:18:6b:05:0b:53:d1:b0:80:8c:53:cc:
                    e2:1f:cd:e6:75:93:89:44:3e:5d:89:7d:dd:87:00:
                    a6:cf:b9:4f:46:8d:0e:2a:1b:74:45:eb:10:8f:31:
                    23:ab:ea:b6:66:db:ac:ca:bd:e3:31:ba:50:c0:97:
                    58:12:b8:9f:63:e7:43:42:8c:a2:94:83:4e:2b:3d:
                    c2:f4:ab:50:cf:ad:b0:66:61:26:75:93:74:da:3c:
                    18:7e:5e:c4:32:47:10:7c:88:d9:66:94:05:53:58:
                    d3:b0:1c:6a:ed:6f:ba:49:46:5a:a8:03:88:b8:3a:
                    7a:54:89:77:08:d9:44:cd:2d:0c:48:c0:38:ed:40:
                    f0:25:ef:3d:7b:a2:ed:89:c8:a3:80:03:9e:46:d0:
                    85:9b:ea:6d:87:9b:c7:e4:b4:47:2f:6d:43:60:de:
                    5c:66:e9:bc:6d:fc:1a:ab:45:1e:06:8b:07:6e:69:
                    91:ce:c9:7b:97:be:ad:ca:ca:f3:f0:0e:4a:f7:b6:
                    4a:c9:70:4a:a4:87:7c:cb:db:2d:b3:9a:85:5d:8e:
                    9e:07:ba:c4:20:cc:cf:26:28:c8:e0:cc:7d:20:f6:
                    da:0b:3e:5c:d8:de:c2:24:81:35:7b:06:1f:a9:22:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:E0:31:EF:9D:5D:47:67:2D:DD:01:EE:32:23:24:19:F8:0A:11
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:fa:42:bf:be:2b:c4:8a:06:4f:c2:0e:ac:12:40:71:5a:
         43:19:0d:24:6f:7a:47:dd:6a:05:aa:49:1d:73:ab:c3:46:de:
         df:4b:f8:6d:bc:9e:26:59:43:3e:c3:2b:42:a8:5b:fe:dc:82:
         07:e6:b4:40:8b:30:bf:87:db:63:4a:35:45:0d:93:17:9c:18:
         92:39:2d:a5:d1:f6:ad:56:c1:16:43:ad:f6:5f:ac:f6:bf:be:
         16:af:38:47:68:bf:24:ab:0d:d2:3a:5a:4d:b1:b6:b5:1f:ce:
         69:c3:61:c8:8e:8d:4f:81:8e:a8:b0:03:a4:10:14:09:d1:5f:
         c0:7a:b6:ef:65:ee:74:74:90:ff:7c:ba:24:e3:be:a8:3d:ea:
         8b:f4:72:c5:82:11:98:9c:5b:71:98:0f:bd:b8:78:7f:ff:fc:
         c9:80:c7:45:84:93:0e:dc:af:56:c9:ae:f9:bc:be:79:84:14:
         b8:1a:16:59:a4:1a:c2:a9:0b:89:dd:3f:e2:1c:af:aa:45:82:
         fb:71:4a:1d:b2:7e:b9:5c:98:8b:07:e1:f9:ce:50:98:39:78:
         64:30:13:03:b9:41:af:2e:07:af:8c:9d:9c:3d:e8:2a:ef:cb:
         22:1f:3e:8a:7b:cc:19:15:bd:5f:a8:59:f9:44:44:cc:47:ac:
         7d:0d:b7:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE
MDIwRkNBOEEwHhcNMjQxMTIyMjAyMzI3WhcNMjQxMTI5MjAyMzI3WjAYMRYwFAYD
VQQDEw02NzQwZTgzZi1hYTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0gRrtD4rZDk2ai1hgPUYTu65GGsFC1PRsICMU8ziH83mdZOJRD5diX3dhwCm
z7lPRo0OKht0ResQjzEjq+q2Ztusyr3jMbpQwJdYErifY+dDQoyilINOKz3C9KtQ
z62wZmEmdZN02jwYfl7EMkcQfIjZZpQFU1jTsBxq7W+6SUZaqAOIuDp6VIl3CNlE
zS0MSMA47UDwJe89e6LticijgAOeRtCFm+pth5vH5LRHL21DYN5cZum8bfwaq0Ue
BosHbmmRzsl7l76tysrz8A5K97ZKyXBKpId8y9sts5qFXY6eB7rEIMzPJijI4Mx9
IPbaCz5c2N7CJIE1ewYfqSLpAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOv4DHv
nV1HZy3dAe4yIyQZ+AoRMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx
Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa
Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8G/pCv74rxIoGT8IOrBJAcVpDGQ0kb3pH3WoFqkkdc6vDRt7fS/ht
vJ4mWUM+wytCqFv+3IIH5rRAizC/h9tjSjVFDZMXnBiSOS2l0fatVsEWQ632X6z2
v74WrzhHaL8kqw3SOlpNsba1H85pw2HIjo1PgY6osAOkEBQJ0V/AerbvZe50dJD/
fLok476oPeqL9HLFghGYnFtxmA+9uHh///zJgMdFhJMO3K9Wya75vL55hBS4GhZZ
pBrCqQuJ3T/iHK+qRYL7cUodsn65XJiLB+H5zlCYOXhkMBMDuUGvLgevjJ2cPegq
78siHz6Ke8wZFb1fqFn5RETMR6x9Dbfo
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org