Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
File:                     o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json)
Hash identifier:          8X1ISBW+bfpIFbI3SVyJE1kU3wtsnDAGTZRRuJIfFug=
Subject key identifier:   5A:8A:04:50:66:C4:3F:CD:FB:01:24:DD:9F:FA:EB:72:93:1C:12:D0
Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
Certificate issuer:       /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
Manifest number:          4D
Signing time:             Sat 23 Nov 2024 05:15:55 +0000
Manifest this update:     Sat 23 Nov 2024 05:15:54 +0000
Manifest next update:     Sat 30 Nov 2024 05:15:54 +0000
Files and hashes:         1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: R5zaAhLJRX0KYpAq0wjeftJAdYfayGTqhuGDJU2R6no=)
                          2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: sUP25TQ/KdT/7AtskmzQ7yncQkdS/sqA5Ond/xRIO3Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
                          rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
        Validity
            Not Before: Nov 23 05:15:54 2024 GMT
            Not After : Nov 30 05:15:54 2024 GMT
        Subject: CN=6741650b-f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:10:04:a6:4e:98:ea:87:82:49:70:cd:a2:
                    1f:55:f0:14:54:70:11:79:ee:75:ea:a6:1d:3e:a0:
                    46:16:cc:0f:1b:e1:cb:6a:8a:d3:b7:a7:40:ea:c7:
                    d8:64:9f:92:f2:de:cd:ec:a8:db:7a:de:b8:55:6e:
                    a1:08:57:06:eb:e6:3a:0d:4d:75:a4:44:aa:2b:8c:
                    cc:34:0f:fa:b2:83:d4:8d:fe:fb:49:9f:b5:21:5a:
                    53:24:68:cb:39:de:d8:9d:46:53:bf:49:82:eb:b7:
                    1c:8b:c5:a2:d1:c6:f1:82:20:e2:3e:81:bc:ef:78:
                    d1:84:e5:71:8f:5f:41:88:76:cd:21:92:f2:20:6b:
                    7e:70:31:a1:3a:f8:10:b3:98:b0:a4:b6:e0:82:22:
                    89:31:86:71:2c:5f:e5:67:2e:29:06:eb:4c:1f:3e:
                    4f:bb:9d:a4:15:10:3b:7f:74:a2:5a:a2:15:b2:da:
                    30:65:a7:ab:b8:10:ee:52:30:33:e5:d0:52:91:29:
                    5c:ec:01:d4:0e:c4:02:e7:c5:05:7d:0c:e2:01:79:
                    9b:53:b9:03:08:55:ec:3f:33:76:4d:47:80:7a:f3:
                    e3:81:d5:67:f4:5d:72:c7:ac:eb:62:5a:5c:c9:67:
                    0d:ac:e7:7a:7b:ca:27:dd:e5:2e:2e:f8:e3:fc:fa:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:04:50:66:C4:3F:CD:FB:01:24:DD:9F:FA:EB:72:93:1C:12:D0
            X509v3 Authority Key Identifier:
                keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:64:d1:66:fe:86:5b:b2:5d:45:37:99:14:d5:72:14:0c:
         37:a1:2c:65:16:15:31:72:fb:62:ee:a5:2f:b1:f3:37:53:b7:
         38:d2:8c:b0:dd:a8:8f:8c:1b:56:be:0a:28:02:7b:74:d8:e5:
         f9:91:71:73:e1:24:a6:72:37:f5:62:18:1d:8b:8e:86:77:21:
         88:86:2e:5c:67:c2:bf:97:de:41:3c:13:0b:9c:18:b4:a7:21:
         17:84:2e:6b:96:55:e5:26:40:c7:95:fd:4b:fa:ce:79:86:88:
         8c:5d:61:fb:c8:06:8c:c2:b2:f3:c2:15:7c:b0:cd:55:ee:f0:
         7a:52:b9:ce:d3:6f:47:75:46:42:f3:a3:f1:8d:ea:1d:dd:1f:
         a8:52:ef:33:d3:ca:bd:ca:fc:8d:42:2b:bd:a8:24:12:42:e2:
         cd:c8:92:f9:8c:bb:cd:5c:7a:96:c0:62:a5:ad:d3:9e:7d:d7:
         07:fe:f5:b5:02:2c:a1:10:b1:19:c5:6e:d8:75:20:aa:f0:85:
         44:52:17:1e:c5:ea:e5:79:09:f6:ec:c7:79:81:45:93:39:e2:
         81:ab:c1:91:0f:d8:f6:04:0e:55:ff:2f:dc:da:1e:ca:79:56:
         5c:fa:7a:11:3a:f5:e7:28:34:62:7f:7d:98:cc:9f:8a:71:ba:
         aa:3e:e3:7c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RDRERjExMC8GA1UEBRMoQTM2REI2QjVGOTcxMjM3NTVFNTQ0MUZBQzU2QUE2QkJB
MDVCMDgwQTAeFw0yNDExMjMwNTE1NTRaFw0yNDExMzAwNTE1NTRaMBgxFjAUBgNV
BAMTDTY3NDE2NTBiLWY2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpSxAEpk6Y6oeCSXDNoh9V8BRUcBF57nXqph0+oEYWzA8b4ctqitO3p0Dqx9hk
n5Ly3s3sqNt63rhVbqEIVwbr5joNTXWkRKorjMw0D/qyg9SN/vtJn7UhWlMkaMs5
3tidRlO/SYLrtxyLxaLRxvGCIOI+gbzveNGE5XGPX0GIds0hkvIga35wMaE6+BCz
mLCktuCCIokxhnEsX+VnLikG60wfPk+7naQVEDt/dKJaohWy2jBlp6u4EO5SMDPl
0FKRKVzsAdQOxALnxQV9DOIBeZtTuQMIVew/M3ZNR4B68+OB1Wf0XXLHrOtiWlzJ
Zw2s53p7yifd5S4u+OP8+t3dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWooEUGbE
P837ASTdn/rrcpMcEtAwHwYDVR0jBBgwFoAUo222tflxI3VeVEH6xWqmu6BbCAow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENERGLzMxMEQzNTQyMzk5
MzExRUZBMDhEMkUxQkM0RjlBRTAyL28yMjJ0Zmx4STNWZVZFSDZ4V3FtdTZCYkNB
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbzIyMnRmbHhJM1ZlVkVINnhXcW11NkJiQ0FvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE
NERGLzMxMEQzNTQyMzk5MzExRUZBMDhEMkUxQkM0RjlBRTAyL28yMjJ0Zmx4STNW
ZVZFSDZ4V3FtdTZCYkNBby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEfnZNFm/oZbsl1FN5kU1XIUDDehLGUWFTFy+2LupS+x8zdTtzjSjLDd
qI+MG1a+CigCe3TY5fmRcXPhJKZyN/ViGB2LjoZ3IYiGLlxnwr+X3kE8EwucGLSn
IReELmuWVeUmQMeV/Uv6znmGiIxdYfvIBozCsvPCFXywzVXu8HpSuc7Tb0d1RkLz
o/GN6h3dH6hS7zPTyr3K/I1CK72oJBJC4s3IkvmMu81cepbAYqWt05591wf+9bUC
LKEQsRnFbth1IKrwhURSFx7F6uV5Cfbsx3mBRZM54oGrwZEP2PYEDlX/L9zaHsp5
Vlz6ehE69ecoNGJ/fZjMn4pxuqo+43w=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org