Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          iHQeZFvO5JujI/iexEiXnYWG9QQ1co3GF+oCIRZH1YM=
Subject key identifier:   3A:ED:56:B0:14:41:C8:56:AB:52:12:07:0C:62:D3:FC:8F:A6:06:75
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0CD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0C83
Signing time:             Fri 22 Nov 2024 18:10:37 +0000
Manifest this update:     Fri 22 Nov 2024 18:10:36 +0000
Manifest next update:     Fri 29 Nov 2024 18:10:36 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: pZSRzkQ2/9eczYS7fv8leXxgZqnXrh+ngju2Miyofyw=)
                          2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: OEeulBe+c5wW7GbGzbuk4OL54v4TtW6TzQZ66hJIVjE=)
                          3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: DHq4vpf9ugtdy4nIBB3Os9RcxkAru4Vji5vbqHP9/Gw=)
                          4: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: 6AuQCNi7iK15RtzvfV//IUBY8nRAT2OpYlqzTxVMIs4=)
                          5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: xe8tXj4235DpBxvk3dCbLG/ZYpgkbMB7h4fUqe0TWDY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: Nov 22 18:10:36 2024 GMT
            Not After : Nov 29 18:10:36 2024 GMT
        Subject: CN=6740c91c-6bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:84:d8:cb:09:b8:94:9e:d3:b8:4e:97:fd:
                    de:19:4a:37:ca:6b:0a:9a:88:0b:31:1a:3c:d8:38:
                    c8:67:57:c0:b3:59:d5:88:f4:11:35:98:8b:b5:d4:
                    d4:ef:9f:e0:ab:b4:75:f3:58:14:f1:6c:85:d6:16:
                    a3:d6:aa:99:22:51:d8:36:f5:6e:9f:e0:c8:72:bd:
                    89:23:f6:06:9d:d3:09:5a:b5:52:e4:f9:17:16:ba:
                    73:09:f2:57:6c:ce:c4:34:05:80:2f:f9:4c:4d:e5:
                    fe:35:61:bc:67:c1:e4:2f:dd:f8:b0:dd:19:b4:a3:
                    5d:9a:d6:8c:99:e7:80:49:fb:a8:50:1b:25:47:10:
                    a4:2d:86:94:17:7e:ab:26:6c:f5:45:53:92:91:2e:
                    89:67:e2:25:9c:86:97:34:77:06:1c:31:20:ab:b5:
                    3b:ce:cd:94:3e:d9:7c:53:3f:87:04:e6:c6:24:d9:
                    1c:dc:cd:df:75:9f:94:da:63:88:8d:64:74:cb:be:
                    10:af:df:72:f3:1c:c8:be:f4:69:47:33:64:a7:97:
                    08:0d:fc:a4:ca:60:45:7e:34:5c:a9:9b:2d:d1:c9:
                    e5:7e:f9:56:8e:4f:87:27:81:01:fc:1e:06:06:11:
                    1f:d1:30:94:50:08:cb:cc:09:43:47:fe:26:df:24:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:56:B0:14:41:C8:56:AB:52:12:07:0C:62:D3:FC:8F:A6:06:75
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:69:2c:37:33:0d:63:66:41:82:3c:0e:49:e2:9d:c4:cd:
         55:68:ff:1a:20:83:ce:d4:29:aa:ad:d5:cd:75:57:e5:00:61:
         3c:32:50:2b:47:43:e0:8f:d0:80:e7:e2:c8:e0:4e:f0:64:53:
         72:ef:11:32:38:20:5f:aa:7e:ee:3f:ba:72:0b:1a:da:b1:fc:
         56:9d:b5:08:31:57:98:c3:de:af:17:21:1d:1d:15:b1:cb:52:
         e2:61:e6:e6:13:70:69:5d:3d:ee:93:50:37:00:7d:4b:7f:ed:
         52:54:32:95:99:84:dc:4f:94:59:86:e0:01:80:30:3d:eb:1b:
         81:43:ca:c5:30:0e:bf:ef:74:f5:49:59:d7:b2:53:30:76:a6:
         5e:c8:eb:ea:93:d4:63:fa:18:f8:88:91:e2:5d:47:bb:ae:f6:
         62:67:8d:8d:00:c9:ae:42:1b:45:47:39:8e:99:da:05:cc:54:
         94:20:e8:c6:6d:f5:99:2b:9c:dc:ff:1c:ea:e7:5c:5f:25:e5:
         00:1a:7b:db:8d:7d:4a:fe:39:67:b9:19:cd:7c:7b:2f:86:cc:
         99:92:05:12:9f:3e:75:44:be:c7:99:09:19:17:de:69:51:e1:
         36:26:47:ba:0d:be:53:68:de:0a:f0:61:f8:d4:d9:fd:4f:df:
         a2:78:5c:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG
MDA5Q0M5QUYwHhcNMjQxMTIyMTgxMDM2WhcNMjQxMTI5MTgxMDM2WjAYMRYwFAYD
VQQDEw02NzQwYzkxYy02YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA30SE2MsJuJSe07hOl/3eGUo3ymsKmogLMRo82DjIZ1fAs1nViPQRNZiLtdTU
75/gq7R181gU8WyF1haj1qqZIlHYNvVun+DIcr2JI/YGndMJWrVS5PkXFrpzCfJX
bM7ENAWAL/lMTeX+NWG8Z8HkL934sN0ZtKNdmtaMmeeASfuoUBslRxCkLYaUF36r
Jmz1RVOSkS6JZ+IlnIaXNHcGHDEgq7U7zs2UPtl8Uz+HBObGJNkc3M3fdZ+U2mOI
jWR0y74Qr99y8xzIvvRpRzNkp5cIDfykymBFfjRcqZst0cnlfvlWjk+HJ4EB/B4G
BhEf0TCUUAjLzAlDR/4m3yTNZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrtVrAU
QchWq1ISBwxi0/yPpgZ1MB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy
NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG
SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeimksNzMNY2ZBgjwOSeKdxM1VaP8aIIPO1CmqrdXNdVflAGE8MlAr
R0Pgj9CA5+LI4E7wZFNy7xEyOCBfqn7uP7pyCxrasfxWnbUIMVeYw96vFyEdHRWx
y1LiYebmE3BpXT3uk1A3AH1Lf+1SVDKVmYTcT5RZhuABgDA96xuBQ8rFMA6/73T1
SVnXslMwdqZeyOvqk9Rj+hj4iJHiXUe7rvZiZ42NAMmuQhtFRzmOmdoFzFSUIOjG
bfWZK5zc/xzq51xfJeUAGnvbjX1K/jlnuRnNfHsvhsyZkgUSnz51RL7HmQkZF95p
UeE2Jke6Db5TaN4K8GH41Nn9T9+ieFzj
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org