Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          sMSWqOuaNGIE7mBrSWlfjKVyU6Oxl11TRbt874/eru4=
Subject key identifier:   C2:1B:2A:C1:FD:EB:31:44:C8:28:50:CA:B9:1C:FF:30:26:34:63:27
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0522
Signing time:             Fri 22 Nov 2024 23:09:27 +0000
Manifest this update:     Fri 22 Nov 2024 23:09:26 +0000
Manifest next update:     Fri 29 Nov 2024 23:09:26 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 7nCi1pVcVfhoyxVJO/eVQTzUhX6DAEz3f4SEe50A65s=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=)
                          3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: iJ+3fFN0ePrtmOVIDHG94Bkp4m0H5KVuwmeRjgUmL3I=)
                          4: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: ezrYPRz2mMJqogCAVE9iLagUvmStXqPt/J4TeogUnNU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Nov 22 23:09:26 2024 GMT
            Not After : Nov 29 23:09:26 2024 GMT
        Subject: CN=67410f27-a925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:59:ea:32:4e:26:56:9a:4b:6f:7a:95:19:
                    f3:c2:e1:02:c5:0d:a9:17:c0:5b:16:7d:27:5f:2d:
                    92:24:b9:53:57:65:6c:ce:33:72:78:47:a3:36:0d:
                    8d:5d:3c:03:0d:c6:40:f8:22:63:c0:61:64:a6:5c:
                    e6:68:2a:ad:02:44:68:ad:5f:84:06:51:b5:67:5b:
                    21:cb:53:6d:db:3b:a1:a8:8d:51:8d:62:e2:0f:e2:
                    31:bc:46:b8:b6:d4:73:de:37:99:19:8d:2e:ab:74:
                    8f:03:03:6c:81:99:bb:39:30:fa:25:70:3e:3f:3a:
                    b6:16:42:6f:99:98:24:dc:76:90:77:3c:36:d4:36:
                    80:be:a9:a6:68:70:f3:e3:a0:7a:cd:a4:35:62:ba:
                    fa:c7:75:a1:0a:96:3d:0a:69:e4:ea:36:4e:e8:5e:
                    6c:31:a7:95:f6:80:51:fa:d5:d3:c6:80:4e:4e:df:
                    6e:f6:5f:ae:4f:9b:c8:09:51:77:ae:42:63:65:bc:
                    4d:1a:23:b3:cb:62:21:81:4c:d5:0b:47:62:2e:59:
                    5f:9e:6e:fa:9c:42:7d:7f:f4:fe:3f:e7:73:18:a2:
                    06:03:92:58:e0:c8:ca:b1:36:b8:cb:03:e9:a8:1f:
                    0d:51:c8:79:23:6d:b7:bb:7b:88:32:e9:cd:41:fd:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:2A:C1:FD:EB:31:44:C8:28:50:CA:B9:1C:FF:30:26:34:63:27
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:c0:12:e2:60:6a:25:fd:4a:75:f7:42:27:e9:8e:fe:82:
         66:34:90:52:b0:44:63:97:55:93:ab:07:2e:1d:ee:b1:c9:da:
         5a:ea:70:7d:65:38:6a:0d:74:3e:1e:08:de:e3:40:66:46:9b:
         e8:c1:5b:2e:e9:2a:97:0d:a5:e7:09:76:f7:cf:45:dd:a0:15:
         29:9d:56:f8:37:a1:6c:b0:e5:6a:eb:67:b9:f4:24:37:a2:49:
         e9:b7:02:9f:83:2d:6b:31:62:d1:41:b4:33:80:ae:46:0b:c3:
         9b:e8:30:3f:e3:14:8a:ea:77:db:d0:46:e0:6a:ef:bd:f8:2e:
         8a:dd:cb:09:eb:99:9d:00:a9:8b:4e:58:cc:99:59:b7:a2:3a:
         92:52:d7:af:52:28:d1:76:af:6e:5e:a6:c5:85:1e:0c:9f:c8:
         35:4c:58:9e:5f:25:3e:1d:cf:d5:74:a7:58:25:2a:4a:78:e7:
         90:2c:1b:4c:cf:18:09:89:d2:a5:75:aa:03:bf:ae:70:53:5f:
         f6:f9:1b:e7:21:23:62:28:b2:1f:b5:1d:54:df:a5:3c:f5:6f:
         e5:70:7c:21:60:c2:7f:6e:5f:99:0f:d4:b4:72:d3:e0:0a:4c:
         56:db:8d:6a:52:ea:c5:ef:af:0f:be:38:b7:6c:40:a9:0f:de:
         d6:8f:7f:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjQxMTIyMjMwOTI2WhcNMjQxMTI5MjMwOTI2WjAYMRYwFAYD
VQQDEw02NzQxMGYyNy1hOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDtZ6jJOJlaaS296lRnzwuECxQ2pF8BbFn0nXy2SJLlTV2VszjNyeEejNg2N
XTwDDcZA+CJjwGFkplzmaCqtAkRorV+EBlG1Z1shy1Nt2zuhqI1RjWLiD+IxvEa4
ttRz3jeZGY0uq3SPAwNsgZm7OTD6JXA+Pzq2FkJvmZgk3HaQdzw21DaAvqmmaHDz
46B6zaQ1Yrr6x3WhCpY9Cmnk6jZO6F5sMaeV9oBR+tXTxoBOTt9u9l+uT5vICVF3
rkJjZbxNGiOzy2IhgUzVC0diLllfnm76nEJ9f/T+P+dzGKIGA5JY4MjKsTa4ywPp
qB8NUch5I223u3uIMunNQf2oKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIbKsH9
6zFEyChQyrkc/zAmNGMnMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6rcAS4mBqJf1KdfdCJ+mO/oJmNJBSsERjl1WTqwcuHe6xydpa6nB9
ZThqDXQ+Hgje40BmRpvowVsu6SqXDaXnCXb3z0XdoBUpnVb4N6FssOVq62e59CQ3
oknptwKfgy1rMWLRQbQzgK5GC8Ob6DA/4xSK6nfb0Ebgau+9+C6K3csJ65mdAKmL
TljMmVm3ojqSUtevUijRdq9uXqbFhR4Mn8g1TFieXyU+Hc/VdKdYJSpKeOeQLBtM
zxgJidKldaoDv65wU1/2+RvnISNiKLIftR1U36U89W/lcHwhYMJ/bl+ZD9S0ctPg
CkxW241qUurF768Pvji3bECpD97Wj3+f
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org