Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          nzkEUFmhIxVhVEQdM16arIXvbzlIuxlPQuhILsiuzI0=
Subject key identifier:   63:E5:A8:F1:21:68:0D:17:49:12:6C:63:94:F5:5C:AE:C0:8D:3D:45
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          2F
Signing time:             Sun 15 Sep 2024 10:02:21 +0000
Manifest this update:     Sun 15 Sep 2024 10:02:21 +0000
Manifest next update:     Sun 22 Sep 2024 10:02:21 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: 5IavOOIoDL1O6k+LlkIExqiHnHl8onwVwXbenjq2yeA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: Sep 15 10:02:21 2024 GMT
            Not After : Sep 22 10:02:21 2024 GMT
        Subject: CN=66e6b0ad-b86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:28:5e:4c:87:d7:3f:f9:cb:49:d3:61:49:
                    af:a2:47:9f:78:c5:f2:5e:8d:e9:f2:31:e8:18:a4:
                    fa:ab:47:61:03:b7:d8:6d:7e:bf:b2:28:91:92:de:
                    04:35:1d:8b:a9:aa:8e:9d:45:bc:71:28:4b:8d:5f:
                    57:b8:39:fc:e5:ae:1a:9a:65:61:fc:cb:44:13:09:
                    9b:06:3c:86:01:d8:3d:53:98:e0:a1:30:29:20:d8:
                    e0:40:68:91:70:f0:b8:c6:58:22:df:3d:29:5e:80:
                    a0:f0:fa:09:66:26:66:bc:71:05:cd:77:e8:9b:82:
                    95:cc:60:fb:b6:aa:94:c3:fb:d4:69:92:a7:88:75:
                    8c:9f:ff:72:f5:07:8e:77:3a:93:25:54:02:10:5d:
                    25:8a:49:67:cb:ee:8c:62:f2:c9:f9:f9:bc:8c:d1:
                    52:ad:a6:80:59:93:bc:56:bd:79:7d:3c:70:49:8e:
                    11:f4:8a:75:45:50:8a:2a:00:90:89:cc:c6:9a:8f:
                    58:54:f8:c4:1d:29:dd:34:b6:1a:6f:5e:d9:5f:c3:
                    4d:fe:fa:82:4f:7e:f8:01:29:8a:95:90:45:1c:ea:
                    f4:b5:dc:93:36:fb:74:5a:9f:dd:da:f8:84:31:df:
                    ea:e2:14:df:a9:a8:92:dc:da:ba:a3:6d:47:62:83:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E5:A8:F1:21:68:0D:17:49:12:6C:63:94:F5:5C:AE:C0:8D:3D:45
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:4d:61:86:1c:ff:29:92:79:6d:6f:06:01:02:49:d4:c2:
         85:89:1b:6b:67:e4:a8:9d:0d:b6:d3:68:6c:2f:47:65:ff:1b:
         b6:55:ac:c1:70:9c:6d:fc:20:48:5c:ff:ad:ce:1d:9f:a1:78:
         13:a6:44:4c:6f:fe:6f:d6:a6:5c:a0:80:c2:b4:d0:65:2d:4e:
         52:87:06:77:69:f5:b8:74:8b:a7:68:71:25:a4:e0:d5:7a:aa:
         bc:16:93:57:fd:3c:2a:56:12:0a:e8:d2:f2:7b:63:df:30:4b:
         6f:f8:10:4f:ab:75:af:76:d4:bc:6b:45:80:2f:0f:63:41:0b:
         c7:17:d8:93:66:8a:71:54:48:15:30:a7:ec:a5:fc:43:27:16:
         4d:2a:f5:dd:eb:bb:ae:b8:5e:07:e8:a4:5b:10:d0:72:1b:1c:
         16:8b:f8:30:63:24:a6:e3:51:e5:91:75:f9:a7:9e:f9:a0:17:
         d0:a7:f7:75:0c:00:a1:86:f2:90:41:2b:a1:bd:24:28:b5:e0:
         bb:75:25:cc:6b:db:fe:7c:db:53:93:74:d4:a6:c4:43:50:17:
         e3:2a:c5:52:9f:a2:b1:d8:dc:ed:23:7e:00:c7:bb:f5:ab:d1:
         43:9e:a6:d7:74:a2:a9:0e:51:5a:49:2f:95:0a:67:fe:be:2d:
         bb:bb:9b:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjBDRjExMC8GA1UEBRMoRTY0RTAyMTc3NDM1QUVGMUNCRkQ2MjRFMjY2N0U2OTY5
QUFGQUFGRjAeFw0yNDA5MTUxMDAyMjFaFw0yNDA5MjIxMDAyMjFaMBgxFjAUBgNV
BAMTDTY2ZTZiMGFkLWI4NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkTSheTIfXP/nLSdNhSa+iR594xfJejenyMegYpPqrR2EDt9htfr+yKJGS3gQ1
HYupqo6dRbxxKEuNX1e4OfzlrhqaZWH8y0QTCZsGPIYB2D1TmOChMCkg2OBAaJFw
8LjGWCLfPSlegKDw+glmJma8cQXNd+ibgpXMYPu2qpTD+9RpkqeIdYyf/3L1B453
OpMlVAIQXSWKSWfL7oxi8sn5+byM0VKtpoBZk7xWvXl9PHBJjhH0inVFUIoqAJCJ
zMaaj1hU+MQdKd00thpvXtlfw03++oJPfvgBKYqVkEUc6vS13JM2+3Ran93a+IQx
3+riFN+pqJLc2rqjbUdig/jvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY+Wo8SFo
DRdJEmxjlPVcrsCNPUUwHwYDVR0jBBgwFoAU5k4CF3Q1rvHL/WJOJmfmlpqvqv8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2MENGL0VGODEzN0U0MkFG
QzExRUZBMDI0M0M0QUM0RjlBRTAyLzVrNENGM1ExcnZITF9XSk9KbWZtbHBxdnF2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNWs0Q0YzUTFydkhMX1dKT0ptZm1scHF2cXY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2
MENGL0VGODEzN0U0MkFGQzExRUZBMDI0M0M0QUM0RjlBRTAyLzVrNENGM1ExcnZI
TF9XSk9KbWZtbHBxdnF2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGoQTWGGHP8pknltbwYBAknUwoWJG2tn5KidDbbTaGwvR2X/G7ZVrMFw
nG38IEhc/63OHZ+heBOmRExv/m/WplyggMK00GUtTlKHBndp9bh0i6docSWk4NV6
qrwWk1f9PCpWEgro0vJ7Y98wS2/4EE+rda921LxrRYAvD2NBC8cX2JNminFUSBUw
p+yl/EMnFk0q9d3ru664XgfopFsQ0HIbHBaL+DBjJKbjUeWRdfmnnvmgF9Cn93UM
AKGG8pBBK6G9JCi14Lt1Jcxr2/5821OTdNSmxENQF+MqxVKforHY3O0jfgDHu/Wr
0UOeptd0oqkOUVpJL5UKZ/6+Lbu7mzg=
-----END CERTIFICATE-----
Generated at Sun Sep 15 10:45:13 2024 by rpki-client on console-fra.rpki-client.org