Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
File:                     RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json)
Hash identifier:          b4VoyUtKdFMegGP2x+e5KXGUwM6kuSLb9GolYjDgiRY=
Subject key identifier:   6D:4B:71:C5:5B:31:20:2C:AE:D1:02:47:C2:2D:91:E1:61:CF:72:E1
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Certificate issuer:       /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial:       1DF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
Manifest number:          1DDC
Signing time:             Fri 22 Nov 2024 16:06:04 +0000
Manifest this update:     Fri 22 Nov 2024 16:06:03 +0000
Manifest next update:     Fri 29 Nov 2024 16:06:03 +0000
Files and hashes:         1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: mwU1r4mRAro3g6A+dx5j1YGbyKukTy6sfmtgyJ0BXqI=)
                          2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7665 (0x1df1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
        Validity
            Not Before: Nov 22 16:06:03 2024 GMT
            Not After : Nov 29 16:06:03 2024 GMT
        Subject: CN=6740abec-c59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:34:0e:25:5f:1c:91:71:64:e2:bc:af:d8:63:
                    b6:ce:55:69:be:81:9d:8a:60:e6:5e:23:4b:44:10:
                    8e:8e:5e:9c:e8:01:01:af:05:d3:61:ba:7f:b2:c9:
                    ae:69:e3:59:14:61:e6:ef:1d:7a:b6:f5:fe:d2:39:
                    df:e1:bd:d1:37:16:5c:ae:36:9a:84:aa:f9:f6:15:
                    eb:e9:bd:cc:bd:aa:40:ba:7a:b0:94:09:c2:18:bd:
                    33:fc:d9:58:c9:f8:7c:0d:9e:c5:4d:eb:b3:0e:8d:
                    6c:22:11:5c:4e:13:94:13:57:b0:d7:55:3c:ce:9d:
                    c3:91:c8:d0:d5:79:72:3d:be:a8:bc:2a:91:78:f7:
                    6f:fe:63:14:81:e6:de:70:70:c6:2a:72:25:3d:99:
                    e8:cb:f1:2e:77:54:91:0c:b3:46:5b:4a:b0:15:60:
                    92:e4:94:21:99:a9:ba:68:e6:c7:36:fa:ad:ee:14:
                    de:38:9f:68:f9:c4:a9:50:d8:02:85:1e:52:fe:b4:
                    14:22:39:0b:d0:be:66:ac:ed:cf:4f:3f:bf:77:e0:
                    06:a6:b2:55:f8:3f:d8:72:cb:f2:a5:30:da:02:65:
                    ab:83:5a:20:51:79:ed:bc:35:2e:63:54:3f:ae:04:
                    7d:17:5c:81:f8:f5:70:ae:30:ce:60:2a:05:c4:b7:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4B:71:C5:5B:31:20:2C:AE:D1:02:47:C2:2D:91:E1:61:CF:72:E1
            X509v3 Authority Key Identifier:
                keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f8:3a:67:52:48:3c:1e:bd:5e:08:cc:ac:2e:97:67:27:4f:
         5e:7d:7b:60:af:6c:f6:37:38:55:29:2b:c0:eb:4e:de:8b:ef:
         93:ef:a8:62:a2:06:d5:98:6f:16:d3:20:9b:0d:5a:2c:5a:93:
         bb:f8:38:0c:f9:41:c7:00:9a:e6:9a:a4:7c:04:21:1f:5f:d8:
         e2:3f:34:ad:81:fc:20:8e:da:7a:83:48:2b:e2:1d:3e:bb:55:
         82:9f:dc:44:a3:9e:2f:22:17:d3:8f:86:62:9f:67:46:bf:b3:
         00:44:5b:14:1d:98:eb:a0:4d:e1:28:a3:a6:eb:1e:29:09:09:
         96:49:5f:b8:58:ae:46:ad:ae:c8:ee:01:e7:4d:6e:c8:6a:7c:
         eb:17:5e:93:6a:e3:6f:c6:b4:e3:2a:dc:e0:30:66:0b:64:df:
         3f:3f:52:ca:46:8f:99:bf:82:75:ad:27:ba:cc:fb:55:96:27:
         25:15:6d:76:7e:d1:b6:a2:81:ea:a0:61:3f:cc:c7:f0:1e:af:
         e4:df:83:3b:ce:6d:db:48:46:49:37:b3:11:a7:c6:d2:b1:db:
         fe:11:b4:0d:57:60:aa:a5:b4:c2:e9:b7:bf:73:66:d6:33:74:
         44:02:50:11:56:90:8a:84:d9:44:8f:15:59:d4:9a:7e:ac:8e:
         cf:37:6c:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw
RUQ1RThDRjEwHhcNMjQxMTIyMTYwNjAzWhcNMjQxMTI5MTYwNjAzWjAYMRYwFAYD
VQQDEw02NzQwYWJlYy1jNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4zQOJV8ckXFk4ryv2GO2zlVpvoGdimDmXiNLRBCOjl6c6AEBrwXTYbp/ssmu
aeNZFGHm7x16tvX+0jnf4b3RNxZcrjaahKr59hXr6b3MvapAunqwlAnCGL0z/NlY
yfh8DZ7FTeuzDo1sIhFcThOUE1ew11U8zp3DkcjQ1XlyPb6ovCqRePdv/mMUgebe
cHDGKnIlPZnoy/Eud1SRDLNGW0qwFWCS5JQhmam6aObHNvqt7hTeOJ9o+cSpUNgC
hR5S/rQUIjkL0L5mrO3PTz+/d+AGprJV+D/YcsvypTDaAmWrg1ogUXntvDUuY1Q/
rgR9F1yB+PVwrjDOYCoFxLdiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1LccVb
MSAsrtECR8ItkeFhz3LhMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz
QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL
eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBX+DpnUkg8Hr1eCMysLpdnJ09efXtgr2z2NzhVKSvA607ei++T76hi
ogbVmG8W0yCbDVosWpO7+DgM+UHHAJrmmqR8BCEfX9jiPzStgfwgjtp6g0gr4h0+
u1WCn9xEo54vIhfTj4Zin2dGv7MARFsUHZjroE3hKKOm6x4pCQmWSV+4WK5Gra7I
7gHnTW7IanzrF16TauNvxrTjKtzgMGYLZN8/P1LKRo+Zv4J1rSe6zPtVliclFW12
ftG2ooHqoGE/zMfwHq/k34M7zm3bSEZJN7MRp8bSsdv+EbQNV2CqpbTC6be/c2bW
M3REAlARVpCKhNlEjxVZ1Jp+rI7PN2yh
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org