Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File:                     ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier:          BPxeFEWw0rbbg+ZVpEuSh5p3/PT00pqWsDnm0U4a/yY=
Subject key identifier:   48:08:9E:89:FB:6C:EC:AB:D8:04:C8:71:78:6B:D9:83:66:69:D6:C6
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number:          021C
Signing time:             Fri 22 Nov 2024 06:26:13 +0000
Manifest this update:     Fri 22 Nov 2024 06:26:13 +0000
Manifest next update:     Fri 29 Nov 2024 06:26:13 +0000
Files and hashes:         1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: Gg0twWd+RkkYxl5K7oSzC787MZrUnDJDqOpiaAXk5M4=)
                          2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: W41UGNX+U3pkh1MUhjtjxt+m5tecoSOo5ggoTHhxJd0=)
                          3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: nMxWe2kO7DPOaQFUeR91icyhuLOvB3F+0nx9gT0fM2I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: Nov 22 06:26:13 2024 GMT
            Not After : Nov 29 06:26:13 2024 GMT
        Subject: CN=67402405-6596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:5a:c8:44:7a:46:ed:16:9f:68:b9:4e:69:
                    f7:d3:39:89:ff:49:a9:28:b7:de:c3:17:27:da:2e:
                    21:89:fa:7e:58:e2:c2:ae:e4:9d:55:1e:70:e4:5f:
                    8e:79:30:30:f0:99:78:21:b8:f0:90:7c:a5:a8:ff:
                    37:28:83:54:56:8d:b2:2a:9c:fd:51:d4:08:5b:80:
                    4b:d9:81:d2:43:9c:07:74:f0:e2:76:43:6c:0a:8d:
                    d4:02:9f:35:84:69:b5:a8:83:b9:2f:e7:54:a8:41:
                    5d:cc:14:dd:d4:5c:ee:34:38:c8:11:67:dc:fe:04:
                    32:1e:f6:50:ec:7d:73:07:41:c7:0b:1d:63:ba:66:
                    e4:4b:62:d1:1f:84:07:a5:26:50:39:ca:b0:2e:ba:
                    7b:1a:56:e4:9b:3f:c4:7f:d8:a5:3c:db:6e:6c:49:
                    22:4a:b2:68:8b:56:77:7e:52:75:1f:f0:35:51:a2:
                    c4:cb:b7:0c:17:8e:a7:75:74:30:48:8b:fe:94:72:
                    f9:50:10:3a:8c:5c:23:02:4b:2c:36:62:b6:a5:ff:
                    e6:36:d4:75:08:ec:ee:0b:2b:29:e0:11:09:a1:7d:
                    91:c0:b2:24:d9:65:f6:50:63:0d:33:dc:82:67:cd:
                    ce:81:81:17:f7:37:83:5e:09:9b:11:b6:2a:5c:05:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:9E:89:FB:6C:EC:AB:D8:04:C8:71:78:6B:D9:83:66:69:D6:C6
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:8a:d2:bb:14:e9:59:b0:3a:68:29:06:91:24:5a:cb:f4:
         a7:a8:b1:3d:69:45:ff:ff:7a:47:1e:b8:5e:c6:62:4f:5d:34:
         65:b2:0f:36:bf:b4:65:2c:50:58:ec:fb:8c:de:8f:17:3d:aa:
         e7:ae:f3:41:e2:88:53:3e:eb:41:15:a2:cb:aa:22:8a:47:93:
         59:21:dc:ab:f8:1e:df:90:56:9e:95:79:cf:13:09:e9:5c:c5:
         d1:23:85:c8:bf:ca:01:6b:6b:db:a9:c0:c2:ba:b5:4e:c7:08:
         58:b8:2b:a6:5a:e1:ba:0a:76:dd:8e:8c:e0:65:2e:bb:c3:17:
         f2:12:3e:70:e2:5b:24:0e:e1:1c:d7:f1:05:56:0d:d4:c6:55:
         b3:c8:64:ff:72:36:09:b5:00:1c:7b:71:e7:d5:b0:02:24:30:
         59:32:c2:cd:0c:59:7e:a7:f7:d1:aa:b9:64:5b:f4:20:8f:e8:
         b3:34:4f:f2:e9:b9:47:16:95:80:2c:12:a4:1e:9f:1d:2e:2c:
         39:a0:5b:70:ea:12:4e:f2:de:b3:32:4a:70:45:74:26:a1:ce:
         a9:96:15:92:70:b6:d4:0a:87:7b:93:6d:7b:d8:6a:78:fd:27:
         03:44:0e:87:49:95:9c:3f:62:ae:ad:8b:c2:3d:05:05:21:10:
         e8:6d:e0:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RUMyRDExMC8GA1UEBRMoMzA0RDY0RTNGMTA1MTI5N0U0QjYyQUM3REUzNDgwRjQ3
QTI5QUUwRjAeFw0yNDExMjIwNjI2MTNaFw0yNDExMjkwNjI2MTNaMBgxFjAUBgNV
BAMTDTY3NDAyNDA1LTY1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgGVrIRHpG7RafaLlOaffTOYn/Sakot97DFyfaLiGJ+n5Y4sKu5J1VHnDkX455
MDDwmXghuPCQfKWo/zcog1RWjbIqnP1R1AhbgEvZgdJDnAd08OJ2Q2wKjdQCnzWE
abWog7kv51SoQV3MFN3UXO40OMgRZ9z+BDIe9lDsfXMHQccLHWO6ZuRLYtEfhAel
JlA5yrAuunsaVuSbP8R/2KU8225sSSJKsmiLVnd+UnUf8DVRosTLtwwXjqd1dDBI
i/6UcvlQEDqMXCMCSyw2Yral/+Y21HUI7O4LKyngEQmhfZHAsiTZZfZQYw0z3IJn
zc6BgRf3N4NeCZsRtipcBcFbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSAieifts
7KvYBMhxeGvZg2Zp1sYwHwYDVR0jBBgwFoAUME1k4/EFEpfktirH3jSA9Hoprg8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFQzJELzgyQjcyNUU4QkNF
MzExRUQ4NDlGOTMzMUM0RjlBRTAyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJn
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTUUxazRfRUZFcGZrdGlySDNqU0E5SG9wcmc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
QzJELzgyQjcyNUU4QkNFMzExRUQ4NDlGOTMzMUM0RjlBRTAyL01FMWs0X0VGRXBm
a3RpckgzalNBOUhvcHJnOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF31itK7FOlZsDpoKQaRJFrL9KeosT1pRf//ekceuF7GYk9dNGWyDza/
tGUsUFjs+4zejxc9queu80HiiFM+60EVosuqIopHk1kh3Kv4Ht+QVp6Vec8TCelc
xdEjhci/ygFra9upwMK6tU7HCFi4K6Za4boKdt2OjOBlLrvDF/ISPnDiWyQO4RzX
8QVWDdTGVbPIZP9yNgm1ABx7cefVsAIkMFkyws0MWX6n99GquWRb9CCP6LM0T/Lp
uUcWlYAsEqQenx0uLDmgW3DqEk7y3rMySnBFdCahzqmWFZJwttQKh3uTbXvYanj9
JwNEDodJlZw/Yq6ti8I9BQUhEOht4II=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:10 2024 by rpki-client on console-fra.rpki-client.org