Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          2nhI27AOAQm5wMLfX6o8K9EkcOA3Lb4AbkB8YCd/gvk=
Subject key identifier:   84:69:D3:C1:FB:54:4F:EB:3A:A7:D4:A3:FB:A4:05:CF:F0:D8:BE:2E
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0749
Signing time:             Fri 22 Nov 2024 21:12:41 +0000
Manifest this update:     Fri 22 Nov 2024 21:12:41 +0000
Manifest next update:     Fri 29 Nov 2024 21:12:41 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: P2BJtp4hK9QLLK5KMeTng5LpzFsWSm9YfCZzOnZMHng=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: zrrI6AtdyN6IWstAzQnI1Tab8e42Oncb5pCDnEH10Zg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Nov 22 21:12:41 2024 GMT
            Not After : Nov 29 21:12:41 2024 GMT
        Subject: CN=6740f3c9-f044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:8e:e2:d2:46:64:33:df:6b:31:36:14:e4:
                    ef:fc:08:5e:4e:93:92:13:1f:81:27:b6:3e:6f:c4:
                    24:53:db:17:1b:e0:55:67:12:93:d0:bd:e5:1c:73:
                    5b:9c:67:0c:ae:6d:44:11:ea:02:f1:3c:ab:c3:a5:
                    52:82:31:dc:c8:55:b3:53:16:98:48:db:02:4d:a3:
                    36:ab:ef:77:a6:99:87:44:e5:ba:8e:e2:97:3d:5e:
                    f4:61:37:cd:8c:dd:11:05:c1:d5:53:f6:a2:7f:c1:
                    7e:62:4b:d8:84:9e:33:df:2a:30:db:fa:5f:63:2e:
                    c8:ec:8c:fe:9f:30:b6:fb:0c:29:0c:b2:b2:8a:a2:
                    63:ac:0f:58:32:a1:7e:c3:2d:63:46:b1:52:a6:c9:
                    9c:11:1e:4f:eb:41:f8:81:87:03:c6:0c:88:01:c0:
                    3c:30:17:45:57:a9:cf:2b:98:f0:df:b8:7b:35:76:
                    32:08:6c:3c:41:53:9c:fa:31:b7:d6:59:85:01:15:
                    a3:5b:75:21:74:46:30:7e:67:e4:44:b9:18:1e:bf:
                    ef:d4:91:1e:ae:3d:06:4b:59:90:44:16:26:ed:15:
                    07:e6:73:31:66:0c:ed:fc:a8:9b:31:20:e9:80:65:
                    fa:63:b1:75:05:fb:75:ce:f0:ed:0d:15:85:3b:ed:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:D3:C1:FB:54:4F:EB:3A:A7:D4:A3:FB:A4:05:CF:F0:D8:BE:2E
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:47:33:0f:a0:99:5b:32:76:1d:17:14:4a:18:dc:02:f4:d2:
         32:78:b2:e7:7e:ce:9f:85:b1:50:1e:59:75:81:f8:21:60:a9:
         65:51:65:dc:bd:9c:1f:2a:90:b6:8a:97:56:33:32:3b:9a:fe:
         e0:63:d8:79:dd:9a:19:40:48:7d:eb:16:3f:1f:dc:74:fb:b0:
         dc:08:59:2c:f9:44:7a:e8:6e:7e:c2:d3:20:a9:fb:fe:26:28:
         9d:6d:87:0e:12:33:31:30:a4:12:de:e0:df:8c:89:0f:ae:30:
         17:bc:c1:f1:e0:97:8f:b6:9a:ba:ab:fc:d6:28:0f:70:98:09:
         95:46:19:24:2d:d2:d8:fa:3f:0c:a1:56:3c:f1:16:ca:79:af:
         b4:4b:b4:2c:b2:a3:93:71:c3:64:0b:ca:d0:f8:4e:77:74:08:
         07:6f:fc:cb:51:f2:24:54:b9:d5:3c:b3:ab:6c:51:92:c8:c8:
         4c:53:64:2c:af:df:90:59:ec:18:fe:e6:13:dc:cb:78:1d:2d:
         bb:2a:31:b4:62:81:0f:60:d8:ed:7f:b7:7a:24:c2:ce:27:44:
         5f:62:92:24:fb:e6:74:aa:c9:28:99:54:d1:6d:56:43:a9:d0:
         05:d0:7b:15:26:fa:0d:5d:b7:44:ba:95:6e:de:c9:c5:09:b9:
         ca:8a:56:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy
QzE3NkIzNzYwHhcNMjQxMTIyMjExMjQxWhcNMjQxMTI5MjExMjQxWjAYMRYwFAYD
VQQDEw02NzQwZjNjOS1mMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3aGO4tJGZDPfazE2FOTv/AheTpOSEx+BJ7Y+b8QkU9sXG+BVZxKT0L3lHHNb
nGcMrm1EEeoC8Tyrw6VSgjHcyFWzUxaYSNsCTaM2q+93ppmHROW6juKXPV70YTfN
jN0RBcHVU/aif8F+YkvYhJ4z3yow2/pfYy7I7Iz+nzC2+wwpDLKyiqJjrA9YMqF+
wy1jRrFSpsmcER5P60H4gYcDxgyIAcA8MBdFV6nPK5jw37h7NXYyCGw8QVOc+jG3
1lmFARWjW3UhdEYwfmfkRLkYHr/v1JEerj0GS1mQRBYm7RUH5nMxZgzt/KibMSDp
gGX6Y7F1Bft1zvDtDRWFO+3ANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRp08H7
VE/rOqfUo/ukBc/w2L4uMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5
MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR
UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWRzMPoJlbMnYdFxRKGNwC9NIyeLLnfs6fhbFQHll1gfghYKllUWXc
vZwfKpC2ipdWMzI7mv7gY9h53ZoZQEh96xY/H9x0+7DcCFks+UR66G5+wtMgqfv+
JiidbYcOEjMxMKQS3uDfjIkPrjAXvMHx4JePtpq6q/zWKA9wmAmVRhkkLdLY+j8M
oVY88RbKea+0S7QssqOTccNkC8rQ+E53dAgHb/zLUfIkVLnVPLOrbFGSyMhMU2Qs
r9+QWewY/uYT3Mt4HS27KjG0YoEPYNjtf7d6JMLOJ0RfYpIk++Z0qskomVTRbVZD
qdAF0HsVJvoNXbdEupVu3snFCbnKilZl
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org