Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
File:                     ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json)
Hash identifier:          Hha7e3PeuNADZizMsaVNOeFvC4nNCU/lN5QLirij39U=
Subject key identifier:   F9:C2:0F:08:C3:04:B2:47:66:87:77:66:AD:6C:5F:E2:D5:14:DD:DF
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Certificate issuer:       /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial:       07A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
Manifest number:          0796
Signing time:             Fri 22 Nov 2024 20:51:59 +0000
Manifest this update:     Fri 22 Nov 2024 20:51:58 +0000
Manifest next update:     Fri 29 Nov 2024 20:51:58 +0000
Files and hashes:         1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: ut4fokv0SwiHL6Jc0RjElqSfFGC9rS8lY6CDAaWqLZU=)
                          2: E120E32E316111EEB9B76E4CC4F9AE02.roa (hash: Rxq4/KiRPAI1kDMdYll3jUCOybe6uxnRfsb4EVx2B90=)
                          3: 7355FB264B5711EEB497B483C4F9AE02.roa (hash: rZq+xLPK5h8mQHWRbVwLhTkaK/L8MU72uPJQBJKsmJI=)
                          4: 5816B2BA4B5711EEB25C4483C4F9AE02.roa (hash: by0/Ko9TJNWSCYMY+AHCa5W7Y7EGdhoiyC4VFd9dKfE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
        Validity
            Not Before: Nov 22 20:51:58 2024 GMT
            Not After : Nov 29 20:51:58 2024 GMT
        Subject: CN=6740eeef-41d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:3f:77:db:80:ad:49:67:11:e1:8b:98:d4:
                    ba:5d:5e:71:eb:d7:09:61:d0:3c:a8:08:8b:3e:cb:
                    3d:9c:bc:4d:93:c8:4f:fb:31:5b:65:e7:52:08:20:
                    a0:77:8b:66:17:24:e9:39:11:f8:e6:7b:0c:7b:38:
                    62:1f:2a:75:c2:d8:f4:15:96:0a:66:9b:20:0b:b0:
                    83:2f:04:d0:f1:2a:99:79:d0:4d:3c:f4:7b:9e:af:
                    6e:04:35:08:63:0b:08:0d:53:8e:43:ad:bc:8c:10:
                    14:1b:e7:44:3e:b5:bc:8e:ea:1a:9a:d5:c5:3c:9e:
                    ba:c2:20:57:9b:24:aa:83:5f:5a:1f:0e:9d:7e:aa:
                    56:e6:eb:6e:10:3c:b0:39:44:37:bb:9c:8b:c3:fc:
                    5e:2f:6c:10:cb:bf:dd:ba:35:2f:89:fc:4f:8c:69:
                    54:36:b8:95:2e:a2:49:4b:fb:55:76:16:d5:6b:2c:
                    f4:cb:bf:a9:85:d8:75:99:fa:2d:74:90:fc:60:2e:
                    c2:77:ab:9a:60:cc:dc:b9:2a:2d:d1:7a:7e:27:d4:
                    36:ba:e6:52:ae:48:a5:46:c4:39:db:64:c7:bf:09:
                    5b:4f:f1:2c:7f:56:3c:12:66:a3:f0:54:51:de:02:
                    d9:67:a5:02:89:75:76:94:ba:33:79:67:12:cf:08:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C2:0F:08:C3:04:B2:47:66:87:77:66:AD:6C:5F:E2:D5:14:DD:DF
            X509v3 Authority Key Identifier:
                keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:35:2e:b1:e6:0a:6c:56:44:b8:17:f7:d9:76:ff:d1:38:53:
         7e:ee:74:a1:22:ab:5c:e8:51:10:15:ec:1d:61:45:b8:ac:ed:
         3d:ab:ef:ad:c9:61:c2:d4:3d:76:f1:b4:98:89:ed:42:0b:22:
         3a:de:76:a9:be:ea:7c:7d:5b:65:f0:0b:3f:83:b3:92:d8:aa:
         82:bc:f3:40:72:de:6f:12:66:c1:79:e8:12:5e:94:f8:20:48:
         0e:54:e4:c2:c0:28:4d:a1:b1:ca:c7:9d:fb:1b:0a:cc:c8:34:
         9c:0c:94:c4:21:33:1b:2e:26:50:0f:58:7e:af:62:fe:8f:af:
         01:af:32:da:e7:b4:bd:dc:ac:0b:0c:ec:a8:56:4c:a0:69:f1:
         f7:ae:51:4c:bb:d5:1a:9b:a0:56:4a:16:7a:2f:dc:b8:cf:31:
         c3:32:cf:f4:8f:95:ee:a9:2c:a2:0e:1c:34:b3:6f:3b:e8:a1:
         dc:b1:63:29:f7:fd:57:cb:77:ec:b7:f2:79:eb:8f:93:56:96:
         c3:42:5d:db:a7:60:32:4b:ba:7d:c5:61:a0:46:9c:3d:6d:1d:
         88:29:4b:60:42:0f:3f:a8:fb:4f:e7:19:bd:6a:15:95:1b:86:
         9f:82:62:10:e2:7d:8b:d8:33:50:95:e6:e5:18:d4:1b:3c:00:
         2f:bf:d9:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF
OUY0OEI0Q0IwHhcNMjQxMTIyMjA1MTU4WhcNMjQxMTI5MjA1MTU4WjAYMRYwFAYD
VQQDEw02NzQwZWVlZi00MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmiY/d9uArUlnEeGLmNS6XV5x69cJYdA8qAiLPss9nLxNk8hP+zFbZedSCCCg
d4tmFyTpORH45nsMezhiHyp1wtj0FZYKZpsgC7CDLwTQ8SqZedBNPPR7nq9uBDUI
YwsIDVOOQ628jBAUG+dEPrW8juoamtXFPJ66wiBXmySqg19aHw6dfqpW5utuEDyw
OUQ3u5yLw/xeL2wQy7/dujUvifxPjGlUNriVLqJJS/tVdhbVayz0y7+phdh1mfot
dJD8YC7Cd6uaYMzcuSot0Xp+J9Q2uuZSrkilRsQ522THvwlbT/Esf1Y8Emaj8FRR
3gLZZ6UCiXV2lLozeWcSzwhdzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnCDwjD
BLJHZod3Zq1sX+LVFN3fMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4
NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK
bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9NS6x5gpsVkS4F/fZdv/ROFN+7nShIqtc6FEQFewdYUW4rO09q++t
yWHC1D128bSYie1CCyI63napvup8fVtl8As/g7OS2KqCvPNAct5vEmbBeegSXpT4
IEgOVOTCwChNobHKx537GwrMyDScDJTEITMbLiZQD1h+r2L+j68BrzLa57S93KwL
DOyoVkygafH3rlFMu9Uam6BWShZ6L9y4zzHDMs/0j5XuqSyiDhw0s2876KHcsWMp
9/1Xy3fst/J564+TVpbDQl3bp2AyS7p9xWGgRpw9bR2IKUtgQg8/qPtP5xm9ahWV
G4afgmIQ4n2L2DNQleblGNQbPAAvv9nv
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org