Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File:                     RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier:          nNv9/necx37aSo0/xT58rT+/JwVfR96H+fbizlW9aq8=
Subject key identifier:   9C:28:DD:9D:C5:41:8F:B1:3E:5B:6B:60:DA:20:37:31:39:64:33:C7
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer:       /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number:          040E
Signing time:             Fri 22 Nov 2024 23:58:50 +0000
Manifest this update:     Fri 22 Nov 2024 23:58:49 +0000
Manifest next update:     Fri 29 Nov 2024 23:58:49 +0000
Files and hashes:         1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: tBXjH8OYJo+rMIJTOxKaOhRqnbLgzYTiufS8o2IqtTM=)
                          2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
        Validity
            Not Before: Nov 22 23:58:49 2024 GMT
            Not After : Nov 29 23:58:49 2024 GMT
        Subject: CN=67411ab9-09a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:1c:97:52:07:11:ef:6d:8e:57:a9:42:e0:
                    2d:aa:7d:92:92:6b:20:f4:20:eb:75:ae:6c:5a:75:
                    aa:f0:d2:f9:23:84:7a:7b:38:8a:80:a4:5f:80:6f:
                    df:b6:69:0d:9f:f5:c6:9c:2c:ab:2e:96:27:f2:63:
                    96:07:94:b0:06:99:81:d9:db:61:d4:08:de:d8:61:
                    61:5e:5a:b5:0f:b0:69:a7:04:9e:62:69:df:79:3a:
                    b1:2b:5e:7f:64:ff:31:b0:44:cf:d3:2e:09:ac:c5:
                    f3:c5:f9:15:c8:93:31:cf:c8:68:db:56:4a:35:61:
                    d3:83:2b:79:a0:8e:b2:65:a9:e2:43:c6:09:1c:85:
                    28:0a:32:24:13:e6:ae:77:ac:c6:b6:66:04:fe:78:
                    81:40:7a:7c:9e:cd:1a:2d:64:ee:a6:a1:31:85:cb:
                    82:3c:86:60:e5:e2:09:12:be:ef:89:ce:b0:63:28:
                    43:d0:4e:8a:11:1f:4b:e7:47:ca:89:31:f9:ad:4d:
                    34:ef:08:9e:f5:20:9b:87:b8:ce:50:7e:ba:ab:d5:
                    2d:c3:34:a6:2a:46:f1:38:c9:eb:a5:d6:11:10:28:
                    e2:c7:f7:db:22:99:56:ca:24:31:0e:b0:f2:4b:13:
                    35:f3:05:d7:d3:fc:21:0a:9f:c4:92:e2:31:92:aa:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:28:DD:9D:C5:41:8F:B1:3E:5B:6B:60:DA:20:37:31:39:64:33:C7
            X509v3 Authority Key Identifier:
                keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c7:b2:ef:dd:72:78:45:a1:6c:9e:ba:7d:2a:31:1e:b4:b1:
         44:3d:db:ce:5f:0a:48:dd:6b:0d:81:f8:21:cf:e6:24:dc:23:
         82:7e:d3:5f:df:1d:cf:e3:32:e0:50:dc:55:92:88:a1:a9:23:
         b1:17:84:9b:7a:a8:80:4b:5a:76:c5:21:c8:d1:30:d2:f8:b2:
         e4:d4:c6:a2:1f:bb:b0:df:44:b3:ae:7e:69:32:8c:90:ab:ac:
         89:d5:ce:c5:ce:fd:93:57:bb:10:e2:76:2b:4c:39:98:95:dd:
         41:a3:8b:d6:80:19:eb:2d:35:5c:53:bf:26:c5:26:b2:5e:b9:
         fa:17:35:1f:b7:19:eb:7b:8f:1e:04:73:f1:08:c2:2d:1e:83:
         e9:4d:79:17:1b:af:36:6c:59:19:a1:dc:c5:90:9c:d2:17:80:
         d3:94:9a:19:a6:e7:51:97:1c:16:53:de:a3:d1:aa:d7:17:3d:
         5a:22:05:78:e5:a3:83:ca:d5:ef:35:a5:1e:62:41:71:7d:b2:
         6e:17:77:86:ee:85:e8:1f:4a:e9:0d:f2:d8:65:00:3d:53:c8:
         eb:88:2c:4b:ae:a0:d9:b9:cb:00:24:b2:71:97:c8:ce:5d:3b:
         22:8c:54:c6:c7:7c:81:be:d3:18:e9:52:fe:d7:29:76:2d:59:
         19:86:0c:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE
MjQ3QkMxN0YwHhcNMjQxMTIyMjM1ODQ5WhcNMjQxMTI5MjM1ODQ5WjAYMRYwFAYD
VQQDEw02NzQxMWFiOS0wOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWwcl1IHEe9tjlepQuAtqn2Skmsg9CDrda5sWnWq8NL5I4R6eziKgKRfgG/f
tmkNn/XGnCyrLpYn8mOWB5SwBpmB2dth1Aje2GFhXlq1D7BppwSeYmnfeTqxK15/
ZP8xsETP0y4JrMXzxfkVyJMxz8ho21ZKNWHTgyt5oI6yZaniQ8YJHIUoCjIkE+au
d6zGtmYE/niBQHp8ns0aLWTupqExhcuCPIZg5eIJEr7vic6wYyhD0E6KER9L50fK
iTH5rU007wie9SCbh7jOUH66q9UtwzSmKkbxOMnrpdYRECjix/fbIplWyiQxDrDy
SxM18wXX0/whCp/EkuIxkqpMJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwo3Z3F
QY+xPltrYNogNzE5ZDPHMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4
QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4
dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGx7Lv3XJ4RaFsnrp9KjEetLFEPdvOXwpI3WsNgfghz+Yk3COCftNf
3x3P4zLgUNxVkoihqSOxF4SbeqiAS1p2xSHI0TDS+LLk1MaiH7uw30Szrn5pMoyQ
q6yJ1c7Fzv2TV7sQ4nYrTDmYld1Bo4vWgBnrLTVcU78mxSayXrn6FzUftxnre48e
BHPxCMItHoPpTXkXG682bFkZodzFkJzSF4DTlJoZpudRlxwWU96j0arXFz1aIgV4
5aODytXvNaUeYkFxfbJuF3eG7oXoH0rpDfLYZQA9U8jriCxLrqDZucsAJLJxl8jO
XTsijFTGx3yBvtMY6VL+1yl2LVkZhgwt
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org