Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
File:                     zFYVfHLcxpczY2dD21AIdZMtpB8.mft (raw, json)
Hash identifier:          whYHqATWNf+qScW7O0NkAnZkpux/x6bGG5/7107LgfA=
Subject key identifier:   E4:4A:F6:24:8C:CF:48:82:40:B6:BF:B1:23:4A:41:A4:79:34:F5:39
Authority key identifier: CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F
Certificate issuer:       /CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
Certificate serial:       05C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
Manifest number:          05C0
Signing time:             Fri 22 Nov 2024 22:37:36 +0000
Manifest this update:     Fri 22 Nov 2024 22:37:35 +0000
Manifest next update:     Fri 29 Nov 2024 22:37:35 +0000
Files and hashes:         1: zFYVfHLcxpczY2dD21AIdZMtpB8.crl (hash: mYRCUOf30IvgjKZTl6Zeveu1yEK4BOJUfogZcGCbPBU=)
                          2: A210E7309CAB11EBAB87D43AC4F9AE02.roa (hash: G4Iff29ujs2wSeu37iPDIUnNuvGFMJft5LK0116SXEs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6CD6/serialNumber=CC56157C72DCC69733636743DB500875932DA41F
        Validity
            Not Before: Nov 22 22:37:35 2024 GMT
            Not After : Nov 29 22:37:35 2024 GMT
        Subject: CN=674107af-c54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:24:e3:3a:3c:3e:28:a0:fb:a4:49:e5:b9:
                    ae:9c:73:1d:f6:e4:19:7a:8a:f3:b1:44:d1:d8:77:
                    40:1a:98:94:5d:8a:64:cd:99:e4:3a:69:90:a6:4f:
                    2b:f3:1a:12:cf:44:23:36:db:24:dd:e6:8a:e4:12:
                    fe:02:80:82:fa:48:47:38:42:f1:4e:1c:54:fc:f8:
                    9f:de:61:ab:77:fa:54:9f:b7:25:2b:a9:af:46:fe:
                    00:96:03:42:1d:32:95:51:d1:1c:d6:1d:40:7e:11:
                    6f:4f:d9:f6:eb:b1:13:90:4c:24:81:22:32:9c:6d:
                    28:9d:7d:d6:cf:eb:87:1e:65:ee:4f:eb:95:53:01:
                    0f:b9:96:3d:36:3b:2d:52:7d:28:cb:8f:5a:49:ef:
                    a3:19:f4:50:ce:11:15:1f:94:81:d8:50:f1:93:2b:
                    ef:20:4f:60:c6:10:8e:b7:ae:2a:ef:f5:68:54:67:
                    c2:8d:84:b0:33:64:00:c7:5f:26:70:95:da:45:19:
                    57:f7:f6:d6:10:39:80:bf:81:a2:95:e3:2f:d1:f7:
                    71:f2:3f:0b:97:d4:ba:67:b4:0e:0b:e6:2f:49:a7:
                    13:98:46:09:eb:79:2f:e1:6c:1d:e4:eb:d2:06:e9:
                    9c:ff:68:b6:64:0f:54:51:33:43:35:2c:70:de:a9:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:F6:24:8C:CF:48:82:40:B6:BF:B1:23:4A:41:A4:79:34:F5:39
            X509v3 Authority Key Identifier:
                keyid:CC:56:15:7C:72:DC:C6:97:33:63:67:43:DB:50:08:75:93:2D:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYVfHLcxpczY2dD21AIdZMtpB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6CD6/65E6DBD69CA911EB8AFF0F37C4F9AE02/zFYVfHLcxpczY2dD21AIdZMtpB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8f:d0:f2:e5:1a:40:51:e0:b4:05:c8:ee:2f:8c:f1:f3:c1:
         35:fc:42:ad:8a:96:dc:a9:da:18:ab:b5:c4:b2:e5:8b:8e:96:
         8e:97:00:c5:c7:c5:f8:25:96:64:a8:38:30:3f:f1:b2:fd:bb:
         62:1a:4c:12:2c:df:c1:0d:a5:04:8b:0d:2b:d9:99:f8:b2:31:
         1a:32:98:18:e7:01:bf:2e:8a:e2:2d:e4:cb:8b:c6:51:e8:29:
         56:f3:de:03:da:35:8d:74:81:81:f3:09:b6:57:80:29:fe:9a:
         54:e2:18:c5:c7:32:17:9b:02:9f:ea:0c:be:c2:98:32:83:55:
         a4:ad:38:50:e3:4c:e2:f1:9e:0d:95:2f:84:d5:64:c2:34:7e:
         08:e9:d1:72:05:82:ea:82:01:2b:e9:84:78:3c:d2:ba:48:a5:
         db:d7:0e:44:e7:08:fc:7d:7b:12:58:42:00:fc:05:7f:66:86:
         dc:21:09:6b:e8:ad:6e:d6:fc:f2:4c:d9:c6:4b:17:63:3b:6d:
         af:27:4d:43:ef:c3:26:d0:75:a9:9b:63:ad:60:66:37:cc:f4:
         eb:c5:80:f1:22:e6:cb:50:85:a9:67:7c:0f:af:81:4c:5e:19:
         e4:1b:5f:1b:7c:da:05:94:17:83:44:d7:81:63:1d:5d:73:47:
         ad:5e:0f:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZDRDYxMTAvBgNVBAUTKENDNTYxNTdDNzJEQ0M2OTczMzYzNjc0M0RCNTAwODc1
OTMyREE0MUYwHhcNMjQxMTIyMjIzNzM1WhcNMjQxMTI5MjIzNzM1WjAYMRYwFAYD
VQQDEw02NzQxMDdhZi1jNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTMk4zo8Piig+6RJ5bmunHMd9uQZeorzsUTR2HdAGpiUXYpkzZnkOmmQpk8r
8xoSz0QjNtsk3eaK5BL+AoCC+khHOELxThxU/Pif3mGrd/pUn7clK6mvRv4AlgNC
HTKVUdEc1h1AfhFvT9n267ETkEwkgSIynG0onX3Wz+uHHmXuT+uVUwEPuZY9Njst
Un0oy49aSe+jGfRQzhEVH5SB2FDxkyvvIE9gxhCOt64q7/VoVGfCjYSwM2QAx18m
cJXaRRlX9/bWEDmAv4GileMv0fdx8j8Ll9S6Z7QOC+YvSacTmEYJ63kv4Wwd5OvS
Bumc/2i2ZA9UUTNDNSxw3ql0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORK9iSM
z0iCQLa/sSNKQaR5NPU5MB8GA1UdIwQYMBaAFMxWFXxy3MaXM2NnQ9tQCHWTLaQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkNENi82NUU2REJENjlD
QTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hwY3pZMmREMjFBSWRaTXRw
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGWVZmSExjeHBjelkyZEQyMUFJZFpNdHBCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkNENi82NUU2REJENjlDQTkxMUVCOEFGRjBGMzdDNEY5QUUwMi96RllWZkhMY3hw
Y3pZMmREMjFBSWRaTXRwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaj9Dy5RpAUeC0BcjuL4zx88E1/EKtipbcqdoYq7XEsuWLjpaOlwDF
x8X4JZZkqDgwP/Gy/btiGkwSLN/BDaUEiw0r2Zn4sjEaMpgY5wG/LoriLeTLi8ZR
6ClW894D2jWNdIGB8wm2V4Ap/ppU4hjFxzIXmwKf6gy+wpgyg1WkrThQ40zi8Z4N
lS+E1WTCNH4I6dFyBYLqggEr6YR4PNK6SKXb1w5E5wj8fXsSWEIA/AV/ZobcIQlr
6K1u1vzyTNnGSxdjO22vJ01D78Mm0HWpm2OtYGY3zPTrxYDxIubLUIWpZ3wPr4FM
XhnkG18bfNoFlBeDRNeBYx1dc0etXg8p
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org