Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File:                     QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier:          +5t4tnHdps/Xz++JVFvcR6P9QWQytWozumaUQ3gur6U=
Subject key identifier:   BA:A7:3A:D7:36:DC:C6:8E:18:89:51:79:3B:A3:FF:A5:23:6E:64:F5
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number:          FD
Signing time:             Thu 21 Nov 2024 03:19:28 +0000
Manifest this update:     Thu 21 Nov 2024 03:19:28 +0000
Manifest next update:     Thu 28 Nov 2024 03:19:28 +0000
Files and hashes:         1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: a6QXR9bP98lMpz43ASuPg7gJx+uUkN9KLblzDnX0hU4=)
                          2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: NtVr+Q7HShmkJFOy0YbH7GTXqw6iLfwSuRim5kkOY4k=)
                          3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: f3Z+Plktu1vEK5J7Cr0wnZHXTAmT6g0Q0RBssxjNlNw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Nov 21 03:19:28 2024 GMT
            Not After : Nov 28 03:19:28 2024 GMT
        Subject: CN=673ea6c0-f39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:1d:99:6a:d8:6b:7e:f2:3d:b6:44:f9:77:
                    a4:89:11:53:3c:c8:62:9f:3a:3f:7a:53:37:58:db:
                    b3:0f:0c:e4:fe:5d:45:a6:7b:ed:10:a2:89:bf:a7:
                    31:8e:50:98:22:69:2c:55:b3:e5:00:18:34:b2:3a:
                    57:4f:b3:37:a1:72:9a:cd:07:7f:7a:51:70:e3:3e:
                    c7:b1:8d:00:25:e9:18:35:d3:c7:26:c1:a0:f2:02:
                    31:80:8e:d7:6c:69:85:d7:53:23:42:cd:67:af:86:
                    51:52:45:6e:27:ac:24:24:f5:90:2e:aa:6a:19:8e:
                    c3:31:c8:91:c1:95:c9:4f:a8:e5:6e:25:03:ce:d5:
                    13:03:b6:18:5a:fb:29:d8:20:85:0d:5a:28:0d:33:
                    56:e0:33:a2:00:62:24:6a:58:e2:03:65:29:71:df:
                    2b:d7:b0:69:0f:4b:a5:48:df:b7:06:b9:2f:e5:70:
                    6d:d6:23:97:47:eb:40:c3:c1:b9:b9:1c:ed:37:fa:
                    e9:1e:03:2c:9d:e6:c6:bc:45:6a:60:33:bf:56:e6:
                    d6:19:21:ee:93:37:8d:1a:df:ce:6f:98:0a:63:5c:
                    17:54:88:b9:b8:a3:fa:90:a4:4b:0a:d6:06:bc:44:
                    6d:bb:38:5a:cd:ef:79:df:39:0b:3a:74:a5:48:b2:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:3A:D7:36:DC:C6:8E:18:89:51:79:3B:A3:FF:A5:23:6E:64:F5
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:ee:8f:83:cf:13:ce:2f:bc:e2:b0:54:cb:ab:4a:28:a0:
         d8:5e:66:e0:18:50:42:b6:16:9d:1b:cb:08:93:98:75:a7:e6:
         dc:6e:ca:d4:04:68:ac:d7:41:9f:30:ef:04:0a:53:a9:5e:21:
         ea:4d:6d:23:d8:c6:2f:53:bf:6d:ae:2b:95:73:1a:1b:e0:e1:
         ce:cd:c4:47:1b:28:04:48:09:e2:59:b2:29:ba:f7:c6:b8:fb:
         35:45:46:57:4f:8d:35:e0:2e:26:ad:98:ae:0b:ef:44:8a:37:
         89:3a:e7:4d:34:4f:70:85:63:2a:66:dc:9f:87:d7:59:dd:e0:
         da:37:7c:12:4f:cc:82:dd:8e:b0:63:4a:e1:3e:7c:57:98:09:
         3a:ff:12:16:c2:b0:77:3a:e0:30:a2:fb:ae:b5:62:6d:9e:ac:
         cf:c4:46:1f:6b:85:8c:34:8f:27:03:2f:f6:1f:56:3e:a3:fb:
         cd:02:49:05:22:a9:40:b0:33:d5:3e:c1:27:c0:8a:8d:67:27:
         3c:62:e1:b0:72:71:84:3d:93:6e:68:3d:ea:3d:83:36:2b:94:
         e8:0b:1a:3c:0f:45:f4:6f:9a:7d:b7:07:5b:f9:ae:4f:a2:10:
         73:ba:b6:60:b4:15:12:f8:b1:50:b8:06:c5:3e:60:71:25:67:
         d3:e3:ae:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx
NzkwQjdENDEwHhcNMjQxMTIxMDMxOTI4WhcNMjQxMTI4MDMxOTI4WjAYMRYwFAYD
VQQDEw02NzNlYTZjMC1mMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlcdmWrYa37yPbZE+XekiRFTPMhinzo/elM3WNuzDwzk/l1FpnvtEKKJv6cx
jlCYImksVbPlABg0sjpXT7M3oXKazQd/elFw4z7HsY0AJekYNdPHJsGg8gIxgI7X
bGmF11MjQs1nr4ZRUkVuJ6wkJPWQLqpqGY7DMciRwZXJT6jlbiUDztUTA7YYWvsp
2CCFDVooDTNW4DOiAGIkaljiA2Upcd8r17BpD0ulSN+3Brkv5XBt1iOXR+tAw8G5
uRztN/rpHgMsnebGvEVqYDO/VubWGSHukzeNGt/Ob5gKY1wXVIi5uKP6kKRLCtYG
vERtuzhaze953zkLOnSlSLIHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqnOtc2
3MaOGIlReTuj/6UjbmT1MB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2
MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f
Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcZ+6Pg88Tzi+84rBUy6tKKKDYXmbgGFBCthadG8sIk5h1p+bcbsrU
BGis10GfMO8EClOpXiHqTW0j2MYvU79triuVcxob4OHOzcRHGygESAniWbIpuvfG
uPs1RUZXT4014C4mrZiuC+9EijeJOudNNE9whWMqZtyfh9dZ3eDaN3wST8yC3Y6w
Y0rhPnxXmAk6/xIWwrB3OuAwovuutWJtnqzPxEYfa4WMNI8nAy/2H1Y+o/vNAkkF
IqlAsDPVPsEnwIqNZyc8YuGwcnGEPZNuaD3qPYM2K5ToCxo8D0X0b5p9twdb+a5P
ohBzurZgtBUS+LFQuAbFPmBxJWfT467U
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:14 2024 by rpki-client on console-ams.rpki-client.org