Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
File:                     Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft (raw, json)
Hash identifier:          6g5nc2Xr3TeTiF61Cb+Sp7lDvovPiyBiD3K/5AK2vu0=
Subject key identifier:   A6:93:B8:09:B2:30:BA:27:60:21:57:7E:4E:C1:7C:61:3C:78:A2:AF
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Certificate issuer:       /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial:       09B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
Manifest number:          099F
Signing time:             Fri 22 Nov 2024 19:48:55 +0000
Manifest this update:     Fri 22 Nov 2024 19:48:55 +0000
Manifest next update:     Fri 29 Nov 2024 19:48:55 +0000
Files and hashes:         1: Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl (hash: 1v1uGbEnQJZ4SeCaypZSSbn3fs/ePMrG1+Tl5rvMvaE=)
                          2: 7C79A58C6E1111ED9880616FC4F9AE02.roa (hash: DpXI7IHTgZ+8TF2AhlH8Vt104anWWa1f0ZyL5HMPP+0=)
                          3: 83A0065E970E11EE952A8162C4F9AE02.roa (hash: QDVG4ggQas/rzO51zXHSrr2WVPkWG5OuleCCcgkUdy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
        Validity
            Not Before: Nov 22 19:48:55 2024 GMT
            Not After : Nov 29 19:48:55 2024 GMT
        Subject: CN=6740e027-499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:7d:75:bf:e2:9d:c3:d4:00:ae:76:64:85:
                    81:d9:70:5d:8a:c9:95:c0:63:c6:2b:fd:e5:77:7b:
                    fc:22:4a:e7:ae:61:38:f6:8b:51:9c:58:53:78:1b:
                    84:1a:de:a1:4c:0e:9f:e4:27:4f:a1:5d:4f:46:43:
                    44:0c:4b:bc:e0:c0:19:3a:a1:46:44:2e:5f:00:63:
                    ef:22:47:a1:5c:40:70:15:38:38:48:29:01:db:ae:
                    5a:3e:9d:7e:84:cd:d2:65:b7:37:40:64:37:63:58:
                    d8:87:bb:51:56:6e:80:4b:64:c7:84:45:39:b9:92:
                    bf:f3:e7:d0:ae:3b:f1:93:d9:a4:80:9d:78:d4:8e:
                    8d:a5:96:41:8d:93:15:7f:0b:45:3d:92:da:38:b6:
                    07:cb:15:0c:eb:0f:c3:08:2b:02:26:5c:a6:ef:d4:
                    79:22:63:cf:ae:84:d6:81:d5:02:a7:d2:e6:6e:f2:
                    7c:08:0c:c0:3c:27:3f:83:64:6c:38:e4:40:88:32:
                    57:d6:ec:14:22:13:56:ce:43:61:b1:03:68:1a:e2:
                    53:a4:ed:f8:fb:aa:5e:59:58:53:a8:20:a0:4f:34:
                    c5:38:70:8f:93:40:b0:46:24:bd:cf:1f:6e:a9:aa:
                    cf:20:e8:ad:40:b7:f3:91:16:79:09:f0:9a:1f:e7:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:93:B8:09:B2:30:BA:27:60:21:57:7E:4E:C1:7C:61:3C:78:A2:AF
            X509v3 Authority Key Identifier:
                keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:a4:89:07:64:eb:8b:db:8a:8c:78:07:46:e5:6a:dc:59:
         f2:96:c3:55:f2:bc:67:fe:4a:9b:3e:e5:a4:a9:b0:4e:a9:6c:
         57:70:32:2e:47:aa:f8:c1:16:51:fa:81:dc:7b:d4:33:b4:15:
         d5:32:2d:23:2b:7e:49:a3:57:64:28:a6:7b:ea:b2:5a:b0:c5:
         7d:9b:31:8e:51:7d:65:2d:b6:6e:6f:5a:e4:cd:3e:3e:d9:89:
         18:3c:06:d3:02:f0:0d:bf:2a:34:f9:54:26:28:be:52:f5:22:
         da:e2:82:ac:99:cd:2b:07:a5:9b:65:6c:af:29:93:94:aa:3b:
         0b:52:0c:fb:de:9c:72:28:7f:a6:4f:2c:1e:72:ac:73:20:54:
         a2:46:c8:b0:27:67:29:cc:e0:81:73:de:db:de:39:4b:32:5a:
         c3:f5:0b:25:34:78:06:00:90:db:ac:fd:a8:0c:6d:e2:8d:ef:
         ba:38:fa:d8:f2:f7:27:d0:00:42:f7:61:fe:b7:c9:05:d5:f9:
         71:44:10:55:fd:cd:82:ed:97:c7:08:04:35:eb:41:fc:e7:db:
         dd:14:36:dd:3b:08:83:62:6a:be:61:ff:a9:f4:89:6d:c8:c7:
         a3:23:eb:db:66:26:83:43:f8:c0:02:26:f5:a7:65:12:51:ab:
         10:ca:39:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMjUxMTAvBgNVBAUTKDA2REYxQjUyNEJEMERERERBMTc5QjA0NTA2MjdFQUY3
RjhEOTRDMDAwHhcNMjQxMTIyMTk0ODU1WhcNMjQxMTI5MTk0ODU1WjAYMRYwFAYD
VQQDEw02NzQwZTAyNy00OTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqiB9db/incPUAK52ZIWB2XBdismVwGPGK/3ld3v8IkrnrmE49otRnFhTeBuE
Gt6hTA6f5CdPoV1PRkNEDEu84MAZOqFGRC5fAGPvIkehXEBwFTg4SCkB265aPp1+
hM3SZbc3QGQ3Y1jYh7tRVm6AS2THhEU5uZK/8+fQrjvxk9mkgJ141I6NpZZBjZMV
fwtFPZLaOLYHyxUM6w/DCCsCJlym79R5ImPProTWgdUCp9LmbvJ8CAzAPCc/g2Rs
OORAiDJX1uwUIhNWzkNhsQNoGuJTpO34+6peWVhTqCCgTzTFOHCPk0CwRiS9zx9u
qarPIOitQLfzkRZ5CfCaH+d4GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaTuAmy
MLonYCFXfk7BfGE8eKKvMB8GA1UdIwQYMBaAFAbfG1JL0N3doXmwRQYn6vf42UwA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAyNS8xMEQ3NzFDMjc4
ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNkMmhlYkJGQmlmcTlfalpU
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0OGJVa3ZRM2QyaGViQkZCaWZxOV9qWlRBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTAyNS8xMEQ3NzFDMjc4ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNk
MmhlYkJGQmlmcTlfalpUQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKvqSJB2Tri9uKjHgHRuVq3FnylsNV8rxn/kqbPuWkqbBOqWxXcDIu
R6r4wRZR+oHce9QztBXVMi0jK35Jo1dkKKZ76rJasMV9mzGOUX1lLbZub1rkzT4+
2YkYPAbTAvANvyo0+VQmKL5S9SLa4oKsmc0rB6WbZWyvKZOUqjsLUgz73pxyKH+m
TywecqxzIFSiRsiwJ2cpzOCBc97b3jlLMlrD9QslNHgGAJDbrP2oDG3ije+6OPrY
8vcn0ABC92H+t8kF1flxRBBV/c2C7ZfHCAQ160H859vdFDbdOwiDYmq+Yf+p9Ilt
yMejI+vbZiaDQ/jAAib1p2USUasQyjni
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org