Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
File:                     zsJ8djIfZke8cP1A2bcKYu21h6M.mft (raw, json)
Hash identifier:          IRLJ4m2hi4WAlFkVazQl9O+/pLBtuRFiuj77oCB/BqA=
Subject key identifier:   3C:E5:EC:53:DE:B8:AB:DC:41:7B:D7:AD:F5:CB:F7:04:87:75:9A:FF
Authority key identifier: CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3
Certificate issuer:       /CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3
Certificate serial:       045E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
Manifest number:          0458
Signing time:             Fri 22 Nov 2024 23:43:36 +0000
Manifest this update:     Fri 22 Nov 2024 23:43:36 +0000
Manifest next update:     Fri 29 Nov 2024 23:43:36 +0000
Files and hashes:         1: zsJ8djIfZke8cP1A2bcKYu21h6M.crl (hash: WM5sHfGO/pPt6Zyj6DNv/2LX4J8VF2Qk1a41p+bxlGo=)
                          2: 54D87FE02C2B11ECB519751BC4F9AE02.roa (hash: HxMzBwU0drdsgNcvOSUabUc0qZPrH3Qhh76eZIqC/MA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3
        Validity
            Not Before: Nov 22 23:43:36 2024 GMT
            Not After : Nov 29 23:43:36 2024 GMT
        Subject: CN=67411728-2fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:bf:46:6e:cb:d8:94:51:0a:84:67:e7:5d:
                    7a:80:1e:e7:03:fc:dc:38:fd:c3:43:37:cc:9a:43:
                    b0:14:61:4d:95:ba:62:88:1f:68:1b:e0:4c:67:5b:
                    34:80:c2:dd:56:03:8f:9b:c8:8a:ff:0c:3f:d0:67:
                    f9:89:87:46:2b:1d:dc:7e:8b:48:dd:dc:47:28:4c:
                    b6:53:17:96:34:9a:30:e0:0e:25:a6:25:c6:40:81:
                    42:52:f4:e3:d2:a9:57:37:c5:3f:01:d6:6e:be:ac:
                    1a:fe:c4:a0:98:7a:3e:96:6a:41:f6:21:2c:c4:be:
                    5a:e1:42:d2:d3:a7:db:d6:22:6c:82:00:83:26:36:
                    78:14:e9:6d:3b:9b:fc:04:71:ef:95:32:ef:51:5c:
                    ea:01:61:5c:47:10:60:45:85:ad:3b:6f:31:2b:a6:
                    de:48:22:49:88:03:00:c5:e3:dd:d6:85:f7:00:d8:
                    a6:b8:96:14:e2:b5:58:c3:b1:bc:de:bf:b1:c2:ba:
                    8a:33:cb:46:18:ac:ed:52:8e:85:76:00:f5:4a:02:
                    e0:9d:52:76:ea:94:58:8d:85:23:57:93:14:eb:a4:
                    a9:f1:c2:98:63:9c:40:92:1a:28:b5:5b:68:e7:a7:
                    7b:75:a4:ee:59:88:54:f0:86:82:8a:67:c0:69:a7:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:EC:53:DE:B8:AB:DC:41:7B:D7:AD:F5:CB:F7:04:87:75:9A:FF
            X509v3 Authority Key Identifier:
                keyid:CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:85:bc:28:33:f6:ba:de:9a:85:71:0e:e8:87:b1:aa:1f:
         04:c2:c0:89:f2:13:1a:ea:19:57:58:8f:ae:0c:10:d0:04:9c:
         40:16:1e:75:d3:04:f2:ec:bf:de:aa:47:ec:45:99:35:7b:c8:
         8c:2f:d1:9f:57:a1:fa:e1:6b:9a:89:80:74:70:d7:5d:a8:68:
         15:eb:e9:e3:2b:ae:54:64:7d:5a:f1:50:a3:c5:9a:e1:42:58:
         fe:0b:b4:80:c6:c1:52:43:b7:ac:d3:e0:04:aa:a3:c5:de:42:
         2a:21:38:25:bb:05:9d:1f:c8:09:28:bf:02:95:53:64:74:83:
         21:97:09:49:ec:05:01:19:7c:91:b4:f1:3d:e1:3a:04:38:e2:
         4c:5b:c0:d0:3a:59:28:b9:49:bf:9b:9a:8c:f2:52:f8:5f:39:
         26:a0:09:e8:cf:e7:af:2f:d6:92:4a:a6:08:56:32:05:14:a6:
         de:64:19:b3:72:35:a2:00:6e:ac:a1:ac:18:e2:c8:1f:c2:5e:
         74:08:21:20:60:ca:71:cf:13:98:06:d5:3d:80:60:7e:7f:16:
         f8:00:c4:b1:6c:9a:59:f6:08:4c:d8:5d:49:80:2f:f6:c8:6b:
         fb:56:32:6c:c1:62:62:68:e1:51:70:7d:5e:88:cb:34:8c:99:
         72:8d:d1:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBEMUExMTAvBgNVBAUTKENFQzI3Qzc2MzIxRjY2NDdCQzcwRkQ0MEQ5QjcwQTYy
RURCNTg3QTMwHhcNMjQxMTIyMjM0MzM2WhcNMjQxMTI5MjM0MzM2WjAYMRYwFAYD
VQQDEw02NzQxMTcyOC0yZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWS/Rm7L2JRRCoRn5116gB7nA/zcOP3DQzfMmkOwFGFNlbpiiB9oG+BMZ1s0
gMLdVgOPm8iK/ww/0Gf5iYdGKx3cfotI3dxHKEy2UxeWNJow4A4lpiXGQIFCUvTj
0qlXN8U/AdZuvqwa/sSgmHo+lmpB9iEsxL5a4ULS06fb1iJsggCDJjZ4FOltO5v8
BHHvlTLvUVzqAWFcRxBgRYWtO28xK6beSCJJiAMAxePd1oX3ANimuJYU4rVYw7G8
3r+xwrqKM8tGGKztUo6FdgD1SgLgnVJ26pRYjYUjV5MU66Sp8cKYY5xAkhootVto
56d7daTuWYhU8IaCimfAaafcPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzl7FPe
uKvcQXvXrfXL9wSHdZr/MB8GA1UdIwQYMBaAFM7CfHYyH2ZHvHD9QNm3CmLttYej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEQxQS83MDZCMzU5ODJD
MjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlprZThjUDFBMmJjS1l1MjFo
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pzSjhkaklmWmtlOGNQMUEyYmNLWXUyMWg2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEQxQS83MDZCMzU5ODJDMjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlpr
ZThjUDFBMmJjS1l1MjFoNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkGYW8KDP2ut6ahXEO6Iexqh8EwsCJ8hMa6hlXWI+uDBDQBJxAFh51
0wTy7L/eqkfsRZk1e8iML9GfV6H64WuaiYB0cNddqGgV6+njK65UZH1a8VCjxZrh
Qlj+C7SAxsFSQ7es0+AEqqPF3kIqITgluwWdH8gJKL8ClVNkdIMhlwlJ7AUBGXyR
tPE94ToEOOJMW8DQOlkouUm/m5qM8lL4XzkmoAnoz+evL9aSSqYIVjIFFKbeZBmz
cjWiAG6soawY4sgfwl50CCEgYMpxzxOYBtU9gGB+fxb4AMSxbJpZ9ghM2F1JgC/2
yGv7VjJswWJiaOFRcH1eiMs0jJlyjdEh
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org