Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
File:                     a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json)
Hash identifier:          ceOef15v7Qy7MkH6eeeX+U/7clzg7wmCoQhoBSIeTRk=
Subject key identifier:   7A:E2:D6:1C:E0:56:C2:A0:51:36:31:34:2E:6D:D4:70:FF:BB:87:CD
Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
Certificate issuer:       /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Certificate serial:       059D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
Manifest number:          0599
Signing time:             Fri 22 Nov 2024 22:44:52 +0000
Manifest this update:     Fri 22 Nov 2024 22:44:52 +0000
Manifest next update:     Fri 29 Nov 2024 22:44:52 +0000
Files and hashes:         1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: XuKIrytBU3gDfP5O1juaSQes0gnLuftzfeYcLeoIri4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl
                          rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
        Validity
            Not Before: Nov 22 22:44:52 2024 GMT
            Not After : Nov 29 22:44:52 2024 GMT
        Subject: CN=67410964-bb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:1d:ed:a2:56:bd:96:78:18:64:8d:14:f3:
                    37:75:22:c6:93:e0:65:42:56:ae:09:0f:d3:ca:d7:
                    d2:bc:e8:1c:51:9f:00:03:3b:69:9a:21:18:85:17:
                    b3:fd:76:1c:47:69:a7:34:90:7b:ea:78:6f:e9:3b:
                    92:30:10:e9:f1:ad:45:86:68:57:ff:4e:64:ec:71:
                    46:ab:2d:e3:5c:1a:c5:10:f1:5f:b9:09:97:6f:ee:
                    6d:48:0b:8d:a5:06:65:25:cc:93:57:92:5b:69:a5:
                    33:0f:d4:85:36:44:96:07:a3:fe:22:a3:54:a9:1a:
                    68:6e:ce:ba:be:7a:52:3c:e8:96:de:e4:92:d5:e5:
                    00:61:7d:49:27:d0:6a:ab:f7:92:77:8c:38:0b:49:
                    83:44:c4:bc:e8:17:d7:b2:25:71:fd:38:84:78:68:
                    38:50:fc:91:35:6a:2e:7a:d1:48:ab:36:50:6f:6c:
                    05:bc:db:e6:75:05:2c:77:00:dc:51:b8:b8:a8:2b:
                    46:cc:65:27:3a:b1:17:b6:66:c5:cd:86:a1:ec:5d:
                    19:ec:f2:0a:28:69:1c:32:70:36:0b:7e:02:88:c1:
                    77:5c:23:48:93:60:8b:22:24:06:cd:be:7c:03:54:
                    19:81:58:9a:57:71:c5:df:61:78:ff:5b:7d:9f:b4:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:D6:1C:E0:56:C2:A0:51:36:31:34:2E:6D:D4:70:FF:BB:87:CD
            X509v3 Authority Key Identifier:
                keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:49:7c:1a:f1:e7:b9:b2:4d:f8:c1:ee:97:60:fa:15:8c:
         d5:64:de:a1:ea:fa:d9:3f:b0:2a:1b:36:35:7c:46:01:c7:e1:
         c1:93:25:32:30:1b:ec:f2:a0:4f:f9:c2:2b:a0:10:2f:d1:b6:
         62:fa:9e:88:fe:aa:20:7b:36:9f:ec:6f:f4:66:45:a3:49:fa:
         37:0b:f9:17:f4:07:6d:9d:73:a8:d0:15:b6:24:87:bb:51:09:
         0a:21:a9:9c:0e:45:d3:08:1c:16:4c:c8:44:a3:9a:bd:61:d9:
         dc:85:12:dc:c2:11:95:db:a3:3a:41:95:27:4a:5a:b9:d2:36:
         73:57:17:25:03:84:16:59:ad:37:10:d3:73:34:89:28:60:f6:
         de:45:f5:81:69:c0:7e:07:bb:11:69:eb:22:69:90:c2:7d:c4:
         77:08:ca:fd:dc:ac:45:b0:be:d5:c6:c3:06:e8:62:a8:0b:38:
         3e:12:14:23:ae:93:97:5c:ce:19:88:93:3d:b6:39:ed:82:f5:
         2c:d7:8e:36:40:40:99:e4:9a:b2:83:9e:c5:9d:2c:13:16:6a:
         6f:e7:d7:2b:c0:1e:ce:bb:e8:96:09:10:17:21:5b:10:6e:e4:
         dd:31:0c:c7:b4:83:89:15:15:e0:e4:a1:7f:2d:a9:2f:65:9e:
         33:a8:4c:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZENEIxMTAvBgNVBAUTKDZCODI3NjA3QzE3Q0U2M0U2MTIxNEMyRTY0MkM1QUE4
NTFFRTM4NEUwHhcNMjQxMTIyMjI0NDUyWhcNMjQxMTI5MjI0NDUyWjAYMRYwFAYD
VQQDEw02NzQxMDk2NC1iYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7kUd7aJWvZZ4GGSNFPM3dSLGk+BlQlauCQ/TytfSvOgcUZ8AAztpmiEYhRez
/XYcR2mnNJB76nhv6TuSMBDp8a1FhmhX/05k7HFGqy3jXBrFEPFfuQmXb+5tSAuN
pQZlJcyTV5JbaaUzD9SFNkSWB6P+IqNUqRpobs66vnpSPOiW3uSS1eUAYX1JJ9Bq
q/eSd4w4C0mDRMS86BfXsiVx/TiEeGg4UPyRNWouetFIqzZQb2wFvNvmdQUsdwDc
Ubi4qCtGzGUnOrEXtmbFzYah7F0Z7PIKKGkcMnA2C34CiMF3XCNIk2CLIiQGzb58
A1QZgViaV3HF32F4/1t9n7QQtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHri1hzg
VsKgUTYxNC5t1HD/u4fNMB8GA1UdIwQYMBaAFGuCdgfBfOY+YSFMLmQsWqhR7jhO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ0Qi9BQTQ3ODkzQUFC
RDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVqNWhJVXd1WkN4YXFGSHVP
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E0SjJCOEY4NWo1aElVd3VaQ3hhcUZIdU9FNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkQ0Qi9BQTQ3ODkzQUFCRDkxMUVCODMzRDRDNkFDNEY5QUUwMi9hNEoyQjhGODVq
NWhJVXd1WkN4YXFGSHVPRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFuEl8GvHnubJN+MHul2D6FYzVZN6h6vrZP7AqGzY1fEYBx+HBkyUy
MBvs8qBP+cIroBAv0bZi+p6I/qogezaf7G/0ZkWjSfo3C/kX9AdtnXOo0BW2JIe7
UQkKIamcDkXTCBwWTMhEo5q9YdnchRLcwhGV26M6QZUnSlq50jZzVxclA4QWWa03
ENNzNIkoYPbeRfWBacB+B7sRaesiaZDCfcR3CMr93KxFsL7VxsMG6GKoCzg+EhQj
rpOXXM4ZiJM9tjntgvUs1442QECZ5Jqyg57FnSwTFmpv59crwB7Ou+iWCRAXIVsQ
buTdMQzHtIOJFRXg5KF/LakvZZ4zqEx/
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org