Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File:                     EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier:          GQyV+noH2BvMqvBWHddav98XfYTMesVC00k9HKlR/xo=
Subject key identifier:   BA:A0:67:66:50:78:E4:F8:71:9A:21:1F:3D:27:BC:CC:B0:C9:59:78
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number:          05E6
Signing time:             Fri 22 Nov 2024 22:25:17 +0000
Manifest this update:     Fri 22 Nov 2024 22:25:16 +0000
Manifest next update:     Fri 29 Nov 2024 22:25:16 +0000
Files and hashes:         1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: BcMtm6J43qkYIe/12yiQzwom1/IfHLdlq6yYM+lu98k=)
                          2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: pJ8Q6VSAm/7OV0oYIwdLwufm1ts8Sapm0z7tUd9ygLw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Nov 22 22:25:16 2024 GMT
            Not After : Nov 29 22:25:16 2024 GMT
        Subject: CN=674104cd-6057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:b9:86:81:03:df:2a:80:32:2e:c2:2b:e0:
                    ec:b8:dd:24:63:6b:65:bd:4c:d0:67:56:b4:4b:50:
                    f7:7f:cb:c8:4a:08:11:26:79:2b:87:41:be:bc:8b:
                    30:f2:46:d5:86:cf:7f:3c:29:68:a9:28:53:27:bb:
                    45:74:4f:42:9d:3d:25:07:ea:98:2d:c1:92:ac:ac:
                    65:64:fa:66:64:d8:08:b6:c5:30:c6:3f:f2:40:59:
                    b3:2d:72:e2:a2:fa:72:77:11:e1:2e:bc:b5:82:62:
                    fc:49:b1:10:5c:d1:7b:a4:35:2b:90:3c:a0:bb:6f:
                    5c:34:ad:cd:b5:be:88:4d:4a:df:3d:6e:48:ed:cb:
                    6d:f1:2f:e9:92:59:22:e7:62:c0:42:86:63:88:a6:
                    bf:24:30:9b:75:6c:cf:72:ea:41:1e:b9:cb:76:4c:
                    b3:df:03:64:b4:30:69:eb:3a:88:2c:06:33:97:5c:
                    b8:40:40:bf:68:9b:6f:1d:dd:41:de:c7:26:29:64:
                    e5:1e:a1:d6:b6:d4:61:7e:7c:7d:30:22:f0:97:84:
                    d2:07:67:64:f8:b8:f7:5c:4d:5f:9e:83:be:b5:73:
                    c9:32:ef:ea:2c:d5:c2:43:e4:64:0a:e3:5e:d6:fc:
                    30:1c:8c:01:10:7d:2b:2e:5a:4c:8b:bf:06:cb:61:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:67:66:50:78:E4:F8:71:9A:21:1F:3D:27:BC:CC:B0:C9:59:78
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:45:9d:c7:59:5e:bc:ff:95:f3:13:d3:7e:5c:61:c7:e5:
         ea:d9:85:5b:cf:1b:70:c1:e5:80:70:2c:78:78:61:2f:75:50:
         18:ac:21:83:ff:aa:73:82:b3:44:b0:81:ae:71:09:b4:72:24:
         d3:d2:bc:3d:f4:fc:cb:43:be:ab:96:b5:12:c9:f0:22:59:08:
         44:3b:58:7c:b8:3a:44:79:0e:7a:e0:17:26:45:41:6d:0e:66:
         c3:d7:1a:95:f0:a2:6e:53:a2:b7:ea:f5:6c:cf:15:62:51:1e:
         99:79:02:07:78:ff:15:79:83:23:8c:63:e0:21:d3:f0:a5:90:
         57:88:ce:5c:f9:15:7f:5b:34:08:23:f3:d7:24:12:48:8e:c7:
         9e:e8:23:ac:ad:28:f3:9f:ba:76:9d:5b:b1:0b:59:70:db:ad:
         15:06:93:d9:70:b8:13:2c:cb:fc:e8:62:e3:7a:99:79:3d:ac:
         2f:d7:79:d8:8b:23:07:ed:58:f3:bb:ad:31:5c:86:3c:46:27:
         af:dc:d8:48:42:9c:63:fa:38:e8:e6:a9:99:19:a5:ff:ca:ee:
         fb:e1:57:5f:84:f2:3b:fd:43:3e:f1:43:22:da:80:f0:2a:34:
         55:1a:0b:86:69:b8:95:fa:d1:ad:89:aa:38:fb:27:87:b5:ca:
         64:ec:b2:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE
ODBGOEM2Q0IwHhcNMjQxMTIyMjIyNTE2WhcNMjQxMTI5MjIyNTE2WjAYMRYwFAYD
VQQDEw02NzQxMDRjZC02MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPe5hoED3yqAMi7CK+DsuN0kY2tlvUzQZ1a0S1D3f8vISggRJnkrh0G+vIsw
8kbVhs9/PCloqShTJ7tFdE9CnT0lB+qYLcGSrKxlZPpmZNgItsUwxj/yQFmzLXLi
ovpydxHhLry1gmL8SbEQXNF7pDUrkDygu29cNK3Ntb6ITUrfPW5I7ctt8S/pklki
52LAQoZjiKa/JDCbdWzPcupBHrnLdkyz3wNktDBp6zqILAYzl1y4QEC/aJtvHd1B
3scmKWTlHqHWttRhfnx9MCLwl4TSB2dk+Lj3XE1fnoO+tXPJMu/qLNXCQ+RkCuNe
1vwwHIwBEH0rLlpMi78Gy2HBRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqgZ2ZQ
eOT4cZohHz0nvMywyVl4MB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD
NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS
TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7zkWdx1levP+V8xPTflxhx+Xq2YVbzxtwweWAcCx4eGEvdVAYrCGD
/6pzgrNEsIGucQm0ciTT0rw99PzLQ76rlrUSyfAiWQhEO1h8uDpEeQ564BcmRUFt
DmbD1xqV8KJuU6K36vVszxViUR6ZeQIHeP8VeYMjjGPgIdPwpZBXiM5c+RV/WzQI
I/PXJBJIjsee6COsrSjzn7p2nVuxC1lw260VBpPZcLgTLMv86GLjepl5Pawv13nY
iyMH7Vjzu60xXIY8Riev3NhIQpxj+jjo5qmZGaX/yu774VdfhPI7/UM+8UMi2oDw
KjRVGguGabiV+tGtiao4+yeHtcpk7LJl
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org