Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          cpOIrn/jQTj3ts4B1Q6FNbQkAh8g0GINQ2i9YxcqOyo=
Subject key identifier:   9C:4A:51:98:07:7F:46:03:F3:41:06:3B:7E:32:1D:BB:AE:F0:C5:A0
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       07A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          288F
Signing time:             Fri 22 Nov 2024 17:01:09 +0000
Manifest this update:     Fri 22 Nov 2024 17:01:08 +0000
Manifest next update:     Fri 29 Nov 2024 17:01:08 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: AHjNFV4wIIMHIXyiXvNo0BeMaqIVhbeJgeyRhyGIV28=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: gbmWhKuExbHxGm8suMn+9Fw+reSjRg+IHpYr9CQ3RBU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Nov 22 17:01:08 2024 GMT
            Not After : Nov 29 17:01:08 2024 GMT
        Subject: CN=6740b8d4-3ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:4a:e0:89:65:b8:7d:98:cd:3c:bb:f5:e5:
                    39:b1:de:2c:37:c0:c6:d9:ce:94:d2:cc:c1:8e:67:
                    6e:41:3f:37:a1:db:16:68:6a:d7:2d:05:59:99:8c:
                    50:61:0e:56:80:57:2d:14:d4:8d:2e:4d:f1:7d:30:
                    35:d7:6c:af:59:39:f5:28:07:8c:bc:a2:84:0e:47:
                    9f:c8:cf:f4:16:9d:93:e7:53:29:be:44:ea:0e:48:
                    02:08:db:9a:0b:91:10:a1:f3:fa:dd:fa:b8:c6:71:
                    24:84:eb:e3:8d:db:51:29:11:82:0a:68:ec:f8:1a:
                    63:49:e1:c4:78:d7:7e:cd:55:c4:10:e2:6c:49:4c:
                    0d:9d:b2:4a:35:f7:23:36:72:05:a6:d1:44:92:ce:
                    17:0a:5d:2c:a8:59:96:45:96:48:6d:04:00:c2:1b:
                    05:66:43:58:07:ff:ff:f6:52:a2:1c:c7:db:a4:95:
                    24:3f:7a:e1:93:53:98:6b:85:0e:b2:55:e2:30:0e:
                    63:3f:dd:ad:14:af:89:a7:f2:ca:7f:85:0c:2e:e8:
                    80:14:91:29:e3:8d:09:b1:33:ce:d7:36:17:e9:7c:
                    0b:60:16:cf:18:7c:99:b9:b8:6d:29:eb:a0:2f:b9:
                    66:56:ff:0d:ce:f9:af:32:71:b0:40:dd:e4:e9:15:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:51:98:07:7F:46:03:F3:41:06:3B:7E:32:1D:BB:AE:F0:C5:A0
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c3:e2:e5:21:41:35:39:9f:d6:4a:77:d1:c4:1d:41:64:94:
         0a:6b:15:48:38:8f:82:6a:6e:90:b0:5d:b4:3c:13:c0:ed:05:
         e4:27:b0:d8:3d:dc:2d:63:0a:80:cc:1e:38:dd:ba:52:ac:a1:
         cb:b4:64:d0:04:7f:fb:b7:4a:29:44:d9:6b:30:f3:47:5c:56:
         21:43:51:66:92:b0:c4:f1:f2:75:7c:28:d4:ca:91:d3:12:4d:
         c0:bd:7d:cc:d8:9d:ff:69:f4:f5:27:d6:9d:ef:63:06:15:47:
         67:91:80:eb:41:c8:db:e4:4c:2a:33:11:c3:80:ef:45:53:3d:
         51:25:7d:49:b4:3a:46:f6:4f:a8:69:06:b8:11:c8:d1:84:7a:
         0b:0f:06:43:fd:3a:70:fe:9e:b9:0e:5f:35:ae:6b:23:ff:ce:
         3a:89:2d:19:3e:de:ce:43:32:a5:1a:e8:d5:82:28:a3:8f:fd:
         e8:6f:ed:b6:0d:b0:12:5d:26:70:f0:8b:41:ee:3e:8a:b7:14:
         cb:d0:b4:9d:0d:29:a3:6a:44:24:32:af:df:a4:c9:2a:97:14:
         39:a6:c9:be:05:eb:af:bb:48:4b:bf:92:8f:48:ea:cf:61:2b:
         5f:e3:e4:39:5e:50:f7:3c:e4:c6:79:d6:eb:5d:3a:e3:20:b7:
         fa:60:e6:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1
NzhBMEVENUUwHhcNMjQxMTIyMTcwMTA4WhcNMjQxMTI5MTcwMTA4WjAYMRYwFAYD
VQQDEw02NzQwYjhkNC0zZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdpK4IlluH2YzTy79eU5sd4sN8DG2c6U0szBjmduQT83odsWaGrXLQVZmYxQ
YQ5WgFctFNSNLk3xfTA112yvWTn1KAeMvKKEDkefyM/0Fp2T51MpvkTqDkgCCNua
C5EQofP63fq4xnEkhOvjjdtRKRGCCmjs+BpjSeHEeNd+zVXEEOJsSUwNnbJKNfcj
NnIFptFEks4XCl0sqFmWRZZIbQQAwhsFZkNYB///9lKiHMfbpJUkP3rhk1OYa4UO
slXiMA5jP92tFK+Jp/LKf4UMLuiAFJEp440JsTPO1zYX6XwLYBbPGHyZubhtKeug
L7lmVv8NzvmvMnGwQN3k6RX3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxKUZgH
f0YD80EGO34yHbuu8MWgMB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ
cHppQ09QTHRNRlZYaWc3VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbw+LlIUE1OZ/WSnfRxB1BZJQKaxVIOI+Cam6QsF20PBPA7QXkJ7DY
PdwtYwqAzB443bpSrKHLtGTQBH/7t0opRNlrMPNHXFYhQ1FmkrDE8fJ1fCjUypHT
Ek3AvX3M2J3/afT1J9ad72MGFUdnkYDrQcjb5EwqMxHDgO9FUz1RJX1JtDpG9k+o
aQa4EcjRhHoLDwZD/Tpw/p65Dl81rmsj/846iS0ZPt7OQzKlGujVgiijj/3ob+22
DbASXSZw8ItB7j6KtxTL0LSdDSmjakQkMq/fpMkqlxQ5psm+Beuvu0hLv5KPSOrP
YStf4+Q5XlD3POTGedbrXTrjILf6YOYP
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org