Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File:                     NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier:          7hEmsT/gHaaXki38fnWPULUdE9d8vKaW1OK7GmcAeVM=
Subject key identifier:   61:96:E2:EC:C0:10:E8:72:B5:EE:1C:89:2D:A9:5B:82:62:09:05:17
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer:       /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial:       0386
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number:          060D
Signing time:             Sat 23 Nov 2024 00:25:21 +0000
Manifest this update:     Sat 23 Nov 2024 00:25:20 +0000
Manifest next update:     Sat 30 Nov 2024 00:25:20 +0000
Files and hashes:         1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: yG73orKUdUbxlv3IMiAPOxKCqUF3kbikqTs0o55UcWk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
        Validity
            Not Before: Nov 23 00:25:20 2024 GMT
            Not After : Nov 30 00:25:20 2024 GMT
        Subject: CN=674120f1-109f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:3c:8d:ac:e2:64:ee:45:11:6e:9d:ef:df:
                    14:e7:3f:c9:09:e2:48:42:6c:76:38:42:69:52:77:
                    4b:14:d0:76:c7:24:9e:62:d7:b9:57:67:ee:43:0a:
                    b0:53:65:2f:29:73:a2:33:d3:67:5a:45:53:57:8a:
                    ac:56:7d:ab:2e:15:33:01:a8:c5:65:53:f4:c2:dc:
                    9a:3f:74:41:22:63:08:29:f9:e8:c6:d6:36:89:6e:
                    cf:fb:d0:13:43:88:4a:5f:4e:69:4a:27:64:86:c2:
                    37:5b:78:3d:8f:6e:7b:1e:99:fb:ba:33:16:69:57:
                    71:ab:22:aa:c6:a0:a5:e1:45:48:b6:dc:a3:64:e2:
                    35:ca:21:6b:f3:50:aa:fa:18:b0:ce:72:ff:90:2a:
                    e0:97:57:fa:39:b9:7e:dd:01:13:7c:ed:9e:80:24:
                    f7:ff:aa:38:41:57:ac:38:e5:36:93:c5:58:4d:0d:
                    0e:f0:63:51:98:89:90:b8:e9:74:ff:5e:42:2e:ea:
                    5e:37:89:7b:54:63:17:7f:5a:d8:e4:eb:af:fb:6b:
                    d5:87:a4:d1:47:7f:1e:84:73:af:2b:87:14:af:cc:
                    53:f9:a8:c9:f8:2f:50:a6:79:fa:40:99:36:a7:ee:
                    d5:5e:f5:4a:f3:da:8a:72:18:4c:30:f8:a6:e8:48:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:96:E2:EC:C0:10:E8:72:B5:EE:1C:89:2D:A9:5B:82:62:09:05:17
            X509v3 Authority Key Identifier:
                keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:32:9f:c8:58:02:16:88:a6:da:33:34:3c:24:57:36:8b:
         91:3d:51:a1:c6:8b:d2:53:8e:5f:c0:7f:64:c3:51:d0:fa:45:
         1c:90:98:1b:8d:e1:1d:81:99:12:08:3e:ea:91:7c:b7:2a:5b:
         91:3e:76:a2:f3:fd:06:c7:e2:a4:2d:a6:e8:b4:bb:65:f6:28:
         80:85:fe:62:91:a1:3b:85:0b:f2:7f:a4:fc:94:bb:92:7a:02:
         54:1e:da:b8:1c:9c:75:1f:d4:53:4f:21:4e:5f:20:0a:ac:1c:
         b5:b7:49:7e:89:98:e5:ad:c9:41:e0:a8:02:56:a3:81:74:d8:
         d5:b8:a1:03:1b:f5:83:ad:b7:8c:0e:11:a8:e8:89:1e:4a:b7:
         44:fb:96:8c:e6:75:f1:ab:b5:c4:61:6c:11:87:b6:db:8d:95:
         57:94:99:fd:ad:8c:3d:94:ef:25:19:3f:b5:21:62:cc:d8:a2:
         42:d1:4c:e3:60:bb:7c:9d:9a:fb:ed:e8:bd:3e:e2:2f:ef:06:
         95:04:22:4b:48:f8:1b:22:e0:af:72:5f:8c:d0:7f:c6:3a:6e:
         ab:cb:4d:99:26:47:02:8c:18:02:ac:a2:17:0c:cc:cc:9f:6d:
         ad:a1:78:15:76:ab:39:c0:7d:0e:2e:30:8f:94:19:d8:a3:35:
         ee:c2:1b:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE
RjYzQzg2Q0QwHhcNMjQxMTIzMDAyNTIwWhcNMjQxMTMwMDAyNTIwWjAYMRYwFAYD
VQQDEw02NzQxMjBmMS0xMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyls8jaziZO5FEW6d798U5z/JCeJIQmx2OEJpUndLFNB2xySeYte5V2fuQwqw
U2UvKXOiM9NnWkVTV4qsVn2rLhUzAajFZVP0wtyaP3RBImMIKfnoxtY2iW7P+9AT
Q4hKX05pSidkhsI3W3g9j257Hpn7ujMWaVdxqyKqxqCl4UVIttyjZOI1yiFr81Cq
+hiwznL/kCrgl1f6Obl+3QETfO2egCT3/6o4QVesOOU2k8VYTQ0O8GNRmImQuOl0
/15CLupeN4l7VGMXf1rY5Ouv+2vVh6TRR38ehHOvK4cUr8xT+ajJ+C9Qpnn6QJk2
p+7VXvVK89qKchhMMPim6EgJKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGW4uzA
EOhyte4ciS2pW4JiCQUXMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy
NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z
ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBp3TKfyFgCFoim2jM0PCRXNouRPVGhxovSU45fwH9kw1HQ+kUckJgb
jeEdgZkSCD7qkXy3KluRPnai8/0Gx+KkLabotLtl9iiAhf5ikaE7hQvyf6T8lLuS
egJUHtq4HJx1H9RTTyFOXyAKrBy1t0l+iZjlrclB4KgCVqOBdNjVuKEDG/WDrbeM
DhGo6IkeSrdE+5aM5nXxq7XEYWwRh7bbjZVXlJn9rYw9lO8lGT+1IWLM2KJC0Uzj
YLt8nZr77ei9PuIv7waVBCJLSPgbIuCvcl+M0H/GOm6ry02ZJkcCjBgCrKIXDMzM
n22toXgVdqs5wH0OLjCPlBnYozXuwhvD
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org