Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          IdgR94ybzVOH/X0ReTi6pb0N2mM2w1MNHdv8lmGrBM0=
Subject key identifier:   5A:89:53:8F:7A:D3:1A:53:A8:79:08:E2:B1:C2:18:01:4C:C3:94:7C
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          36
Signing time:             Thu 21 Nov 2024 05:39:57 +0000
Manifest this update:     Thu 21 Nov 2024 05:39:56 +0000
Manifest next update:     Thu 28 Nov 2024 05:39:56 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: pxbYHqnDz3mwtMTDU1SXS0XndfXUEMzf2f1TDGfj8cM=)
                          2: 4DAE4D285BA111EFB0EA6762C4F9AE02.roa (hash: QksoSQ9jMmemj98hDslE2nRWQrvkkYqF2CX6YbV85U4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Nov 21 05:39:56 2024 GMT
            Not After : Nov 28 05:39:56 2024 GMT
        Subject: CN=673ec7ac-1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:88:69:bb:bc:6e:ce:6a:c9:7c:09:01:71:
                    b3:ae:e4:61:14:6a:eb:64:87:95:c6:16:bb:f1:f1:
                    5f:23:8b:ad:f0:1a:be:ff:92:7e:08:46:63:5e:fa:
                    e1:85:d7:c9:a4:d3:a8:5f:b5:22:f4:6d:54:94:4b:
                    18:b4:95:32:bc:04:e3:c1:43:d5:7c:5a:fc:d7:c7:
                    ae:f4:e7:a6:28:6a:e6:34:a0:ca:a8:03:bf:db:e2:
                    33:b6:e0:ab:ef:c3:9e:0a:be:07:5b:15:97:ee:c8:
                    5e:1f:2c:b5:77:ea:b0:bc:0b:25:23:f6:81:9e:f8:
                    34:05:79:43:d4:ee:bc:b4:ba:ce:24:65:1e:0d:3c:
                    8d:c1:4e:0f:61:ae:3d:41:fa:9a:9c:d3:30:86:79:
                    b8:34:2a:d9:7e:20:74:99:d7:92:2d:40:88:64:2a:
                    9d:8c:07:48:04:55:c5:79:29:cb:97:4f:cd:90:c8:
                    12:1c:25:4d:f6:ce:cc:33:e9:55:1c:97:4d:b8:97:
                    a3:08:a5:9f:d0:75:9b:05:1e:b4:6a:f4:26:6f:a2:
                    68:13:23:6d:29:dc:00:4e:44:19:03:db:40:1b:8b:
                    7e:53:05:0e:d6:9b:6d:c7:52:08:fe:1a:70:83:02:
                    dc:82:8a:76:c7:d8:d3:ea:a0:89:ef:2a:68:dc:55:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:89:53:8F:7A:D3:1A:53:A8:79:08:E2:B1:C2:18:01:4C:C3:94:7C
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:63:2f:8d:a7:b0:fb:2f:75:d2:18:45:8c:08:d0:1f:98:93:
         cd:2d:53:84:80:94:2a:b5:9b:9b:21:68:4f:0e:f7:c4:79:7d:
         44:26:e4:35:2d:5e:bc:a6:4a:f2:e7:6c:57:62:8b:bc:bc:f7:
         f0:c6:1a:6e:a5:f1:a8:9c:93:fc:ea:7f:7b:c0:74:bd:ec:1e:
         f1:16:9b:1d:bd:c5:2a:e8:f4:3c:07:d0:66:be:69:00:5d:00:
         8d:75:ec:52:1b:69:8f:d6:8c:0a:3b:b9:8e:23:b6:31:74:f7:
         20:0a:80:9e:26:b0:86:d0:ef:f1:68:d1:56:5e:b6:bf:eb:d1:
         2c:10:d1:9a:09:f9:22:6e:9f:a8:8b:18:fc:ee:4f:ec:81:d2:
         2d:ae:62:09:0c:d6:5f:46:4b:35:a2:14:67:3a:1c:0b:8e:c7:
         b8:57:51:f1:df:58:a7:09:4c:e0:4d:e0:1b:14:2d:bd:ac:d9:
         07:77:87:e3:05:d4:08:6d:7d:0f:56:6d:4d:fd:e9:93:05:d1:
         f7:89:aa:51:44:74:aa:28:38:1d:9e:81:24:31:a3:15:49:df:
         36:5d:19:9c:b7:34:a3:8f:66:3b:f8:85:62:7b:e2:07:36:20:
         a3:d5:69:8e:b9:bb:e3:d9:70:69:1e:de:76:a6:3f:c9:5d:75:
         65:36:38:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjFBNzExMC8GA1UEBRMoQkFFRjc4Rjc4REM3Q0JGOUI3MzEyNzBBQUIxMDY5RjVF
MzQzM0NCQjAeFw0yNDExMjEwNTM5NTZaFw0yNDExMjgwNTM5NTZaMBgxFjAUBgNV
BAMTDTY3M2VjN2FjLTEzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtMYhpu7xuzmrJfAkBcbOu5GEUautkh5XGFrvx8V8ji63wGr7/kn4IRmNe+uGF
18mk06hftSL0bVSUSxi0lTK8BOPBQ9V8WvzXx67056YoauY0oMqoA7/b4jO24Kvv
w54KvgdbFZfuyF4fLLV36rC8CyUj9oGe+DQFeUPU7ry0us4kZR4NPI3BTg9hrj1B
+pqc0zCGebg0Ktl+IHSZ15ItQIhkKp2MB0gEVcV5KcuXT82QyBIcJU32zswz6VUc
l024l6MIpZ/QdZsFHrRq9CZvomgTI20p3ABORBkD20Abi35TBQ7Wm23HUgj+GnCD
AtyCinbH2NPqoInvKmjcVQHLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWolTj3rT
GlOoeQjiscIYAUzDlHwwHwYDVR0jBBgwFoAUuu94943Hy/m3MScKqxBp9eNDPLsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MUE3LzBGNDk5MjA0NUJB
MTExRUY5QTc5RTk2MUM0RjlBRTAyL3V1OTQ5NDNIeV9tM01TY0txeEJwOWVORFBM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdXU5NDk0M0h5X20zTVNjS3F4QnA5ZU5EUExzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
MUE3LzBGNDk5MjA0NUJBMTExRUY5QTc5RTk2MUM0RjlBRTAyL3V1OTQ5NDNIeV9t
M01TY0txeEJwOWVORFBMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJVjL42nsPsvddIYRYwI0B+Yk80tU4SAlCq1m5shaE8O98R5fUQm5DUt
XrymSvLnbFdii7y89/DGGm6l8aick/zqf3vAdL3sHvEWmx29xSro9DwH0Ga+aQBd
AI117FIbaY/WjAo7uY4jtjF09yAKgJ4msIbQ7/Fo0VZetr/r0SwQ0ZoJ+SJun6iL
GPzuT+yB0i2uYgkM1l9GSzWiFGc6HAuOx7hXUfHfWKcJTOBN4BsULb2s2Qd3h+MF
1AhtfQ9WbU396ZMF0feJqlFEdKooOB2egSQxoxVJ3zZdGZy3NKOPZjv4hWJ74gc2
IKPVaY65u+PZcGke3namP8lddWU2OJ4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org