Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          I1vSFXQzf9ZTSVkhWAjl2DP16S1TnFZpiZmPmBGWxUY=
Subject key identifier:   12:50:81:C0:4F:33:2E:80:86:96:4D:B9:08:85:EC:71:74:9D:E9:A7
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          14
Signing time:             Thu 19 Sep 2024 06:19:57 +0000
Manifest this update:     Thu 19 Sep 2024 06:19:56 +0000
Manifest next update:     Thu 26 Sep 2024 06:19:56 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: vCbs7/Itai7YrNj/Od49DxHxdLMSGLNthL8Bh3oYdco=)
                          2: 4DAE4D285BA111EFB0EA6762C4F9AE02.roa (hash: QXl/+0aNFkGZ5gCgd4EOstfrcyTbYv8foukH4CbuUJ4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Sep 19 06:19:56 2024 GMT
            Not After : Sep 26 06:19:56 2024 GMT
        Subject: CN=66ebc28c-fa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:d6:5a:4f:13:37:20:c9:8a:49:5e:29:86:
                    49:cc:b3:6a:05:f8:17:3a:7e:a6:40:90:a2:f2:02:
                    15:c4:d5:7e:88:6c:d3:6d:11:db:15:3b:01:02:dc:
                    d5:cb:81:5e:2f:1f:20:01:41:e6:f1:ef:73:2a:d1:
                    bf:45:c6:71:66:67:a9:47:48:5d:bf:ad:6b:c5:f9:
                    a2:fb:37:8d:a8:a8:a0:61:fc:ff:db:cd:eb:1a:6e:
                    20:9c:e3:e9:01:58:30:84:92:fd:4e:a9:90:08:c2:
                    20:3c:b9:e4:d5:3b:18:95:9e:d0:20:2a:ec:7e:dd:
                    db:76:0e:ac:b1:a5:6c:43:7e:25:eb:1d:0e:d5:5a:
                    9f:04:ad:b5:ae:a1:be:26:d0:d7:17:a4:e0:a9:5e:
                    8b:be:8a:eb:f6:66:30:5c:67:36:f8:5f:5d:a1:55:
                    4d:3d:41:95:1f:61:ea:db:39:3e:40:63:87:66:3d:
                    cd:12:4f:24:98:4d:46:54:e1:70:0b:f7:8f:0a:ac:
                    9f:64:a9:9d:fb:96:2c:bd:e7:7b:57:8f:00:1a:09:
                    c2:ba:43:31:6c:f1:aa:54:0c:fc:a5:a3:5e:5e:08:
                    69:73:25:8c:94:2f:cf:20:46:ec:1d:b0:a0:04:83:
                    aa:fe:b5:d7:74:cf:68:3d:86:34:82:00:37:73:b4:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:81:C0:4F:33:2E:80:86:96:4D:B9:08:85:EC:71:74:9D:E9:A7
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:d6:60:13:e5:d8:77:05:30:da:d5:13:40:80:75:bb:f2:
         29:cc:52:91:df:87:bc:60:69:24:12:e5:68:39:04:ef:e1:a2:
         f5:f1:b6:c8:8d:f9:1e:4d:c5:85:73:ad:32:47:28:d0:de:64:
         ee:ba:99:07:fc:09:c4:b9:93:fc:c7:fe:fb:af:ad:fe:9f:0f:
         5a:ba:08:66:db:9b:55:53:59:fa:99:4c:09:0a:23:c1:a7:a1:
         c9:b7:30:78:ec:7d:90:9d:7c:58:b3:94:ff:35:12:71:ee:e8:
         28:a1:e3:ac:f7:04:7f:f4:41:74:8d:e1:38:12:ee:a2:57:e3:
         59:60:e2:d4:f0:7f:4c:8b:e3:73:86:00:62:5d:44:f9:00:48:
         11:00:96:f4:e1:df:75:08:6c:20:c9:ab:b4:bc:cd:6b:72:83:
         cf:81:07:9b:dd:5c:8d:05:6c:e0:d2:2b:e3:17:1d:c9:8e:03:
         2d:9a:0f:9d:6e:35:b2:34:20:16:dd:76:1e:cb:61:68:b5:4c:
         17:63:cf:09:0d:3a:cc:88:31:2d:f6:52:a6:07:77:b8:33:00:
         1d:ac:f2:a9:ba:41:5e:56:05:17:fc:a4:e9:9c:de:e7:72:b9:
         b5:9b:da:7b:39:2d:bf:24:1a:cb:7a:02:32:ed:05:7d:1f:fd:
         f7:70:67:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjFBNzExMC8GA1UEBRMoQkFFRjc4Rjc4REM3Q0JGOUI3MzEyNzBBQUIxMDY5RjVF
MzQzM0NCQjAeFw0yNDA5MTkwNjE5NTZaFw0yNDA5MjYwNjE5NTZaMBgxFjAUBgNV
BAMTDTY2ZWJjMjhjLWZhNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJpNZaTxM3IMmKSV4phknMs2oF+Bc6fqZAkKLyAhXE1X6IbNNtEdsVOwEC3NXL
gV4vHyABQebx73Mq0b9FxnFmZ6lHSF2/rWvF+aL7N42oqKBh/P/bzesabiCc4+kB
WDCEkv1OqZAIwiA8ueTVOxiVntAgKux+3dt2DqyxpWxDfiXrHQ7VWp8ErbWuob4m
0NcXpOCpXou+iuv2ZjBcZzb4X12hVU09QZUfYerbOT5AY4dmPc0STySYTUZU4XAL
948KrJ9kqZ37liy953tXjwAaCcK6QzFs8apUDPylo15eCGlzJYyUL88gRuwdsKAE
g6r+tdd0z2g9hjSCADdztKqDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUElCBwE8z
LoCGlk25CIXscXSd6acwHwYDVR0jBBgwFoAUuu94943Hy/m3MScKqxBp9eNDPLsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MUE3LzBGNDk5MjA0NUJB
MTExRUY5QTc5RTk2MUM0RjlBRTAyL3V1OTQ5NDNIeV9tM01TY0txeEJwOWVORFBM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdXU5NDk0M0h5X20zTVNjS3F4QnA5ZU5EUExzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
MUE3LzBGNDk5MjA0NUJBMTExRUY5QTc5RTk2MUM0RjlBRTAyL3V1OTQ5NDNIeV9t
M01TY0txeEJwOWVORFBMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACoc1mAT5dh3BTDa1RNAgHW78inMUpHfh7xgaSQS5Wg5BO/hovXxtsiN
+R5NxYVzrTJHKNDeZO66mQf8CcS5k/zH/vuvrf6fD1q6CGbbm1VTWfqZTAkKI8Gn
ocm3MHjsfZCdfFizlP81EnHu6Cih46z3BH/0QXSN4TgS7qJX41lg4tTwf0yL43OG
AGJdRPkASBEAlvTh33UIbCDJq7S8zWtyg8+BB5vdXI0FbODSK+MXHcmOAy2aD51u
NbI0IBbddh7LYWi1TBdjzwkNOsyIMS32UqYHd7gzAB2s8qm6QV5WBRf8pOmc3udy
ubWb2ns5Lb8kGst6AjLtBX0f/fdwZ7s=
-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:52 2024 by rpki-client on console-ams.rpki-client.org