Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File:                     Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier:          kI+WdJ7gErrtE8cUY0yUrcirSPhjegJ/Rt21YPX4dag=
Subject key identifier:   6C:81:40:EE:FD:C5:27:B6:1F:1C:44:C7:4A:F9:50:41:DD:07:C4:64
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer:       /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number:          0106
Signing time:             Thu 21 Nov 2024 03:15:55 +0000
Manifest this update:     Thu 21 Nov 2024 03:15:54 +0000
Manifest next update:     Thu 28 Nov 2024 03:15:54 +0000
Files and hashes:         1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: e5dLb8Pctvypb2KDU+QUFKIxG9tlLSbobfWRqCM6rgY=)
                          2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: dz8+3qu5h5r0R4jtpUTCSApBTzOeCaTV8lpsEpR+XFI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
        Validity
            Not Before: Nov 21 03:15:54 2024 GMT
            Not After : Nov 28 03:15:54 2024 GMT
        Subject: CN=673ea5eb-f74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:95:d0:e9:34:2a:ef:b0:76:f1:a5:28:55:
                    48:eb:a4:5c:82:58:0c:4a:de:b3:1f:34:90:32:d8:
                    08:1a:1e:27:9a:48:97:09:56:f0:dd:43:20:99:37:
                    f1:ec:8e:7b:1a:33:6b:97:bc:85:a9:f0:ba:02:ee:
                    cc:08:5c:c8:03:a8:6a:43:b0:a9:d7:28:38:82:a5:
                    28:62:8e:28:37:0a:eb:7d:c7:91:36:82:b4:ce:de:
                    30:41:85:f8:4e:59:09:e2:7f:18:38:3c:bf:2e:a4:
                    5e:00:be:86:d5:05:df:3d:a6:18:bc:e4:c7:01:84:
                    bc:e8:ca:70:33:84:93:84:6b:b9:0d:15:b2:35:fb:
                    f2:61:8b:dd:d5:ab:ab:c5:fd:14:7d:4d:53:86:fa:
                    fa:64:6c:fe:b3:82:6d:23:56:2e:28:df:e4:a5:69:
                    bc:e0:4b:5e:af:65:a1:db:34:10:91:a4:13:e0:e1:
                    3f:e3:94:5b:7f:ca:74:0d:c3:63:9a:e9:b3:52:bf:
                    41:48:4f:6f:14:17:eb:d0:a2:1b:42:69:3f:68:c6:
                    73:52:5d:6d:ba:59:ca:d0:cb:49:b0:1e:10:2f:7d:
                    45:f0:15:ef:c5:26:5e:c6:38:79:a4:a9:35:17:b8:
                    56:43:3c:5f:80:0a:e9:05:0b:f3:fd:af:82:23:1d:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:40:EE:FD:C5:27:B6:1F:1C:44:C7:4A:F9:50:41:DD:07:C4:64
            X509v3 Authority Key Identifier:
                keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:6d:3e:ce:a6:f5:18:41:b4:d9:33:4b:3d:54:f7:2e:f0:
         e6:f3:7a:88:b2:ad:51:3f:df:e4:1a:09:7b:79:19:08:45:5e:
         0f:43:8f:b4:d2:ab:00:a4:62:00:37:82:dc:a6:ae:e1:da:54:
         63:d2:0d:24:8e:4e:06:30:b2:08:aa:23:c2:9c:b6:13:68:ec:
         40:14:34:90:40:c5:e0:1f:e5:c0:e7:e9:cc:48:2e:fb:ab:68:
         5b:d6:7a:e4:a5:fb:24:8e:4e:8e:ea:74:76:92:df:b5:74:45:
         10:ae:56:cf:fd:d4:45:d2:6c:92:87:36:f7:8b:0c:9b:9f:12:
         aa:e9:00:6d:43:39:09:62:47:f9:3f:e3:9a:56:82:7e:fd:85:
         49:68:95:b1:7c:97:e3:14:d2:6a:86:e0:53:e8:9b:95:f2:38:
         97:9d:49:4d:2d:33:0f:d9:e9:9a:c4:d2:a3:8b:72:50:bd:bc:
         f6:90:77:20:5f:06:57:13:8f:66:fb:62:7b:41:cb:a1:0d:c4:
         76:78:7b:3a:86:42:ca:5f:10:4d:df:a4:fe:87:5e:89:dd:06:
         e7:4a:9b:76:70:af:fb:c8:38:24:8b:1f:69:c3:9c:e6:3c:cb:
         57:59:ab:41:49:39:63:fa:b3:0a:c7:99:35:d3:99:7a:b1:d2:
         d7:8d:df:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG
RUI0RUI4NkMwHhcNMjQxMTIxMDMxNTU0WhcNMjQxMTI4MDMxNTU0WjAYMRYwFAYD
VQQDEw02NzNlYTVlYi1mNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv+V0Ok0Ku+wdvGlKFVI66RcglgMSt6zHzSQMtgIGh4nmkiXCVbw3UMgmTfx
7I57GjNrl7yFqfC6Au7MCFzIA6hqQ7Cp1yg4gqUoYo4oNwrrfceRNoK0zt4wQYX4
TlkJ4n8YODy/LqReAL6G1QXfPaYYvOTHAYS86MpwM4SThGu5DRWyNfvyYYvd1aur
xf0UfU1Thvr6ZGz+s4JtI1YuKN/kpWm84Eter2Wh2zQQkaQT4OE/45Rbf8p0DcNj
mumzUr9BSE9vFBfr0KIbQmk/aMZzUl1tulnK0MtJsB4QL31F8BXvxSZexjh5pKk1
F7hWQzxfgArpBQvz/a+CIx3K1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyBQO79
xSe2HxxEx0r5UEHdB8RkMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD
NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW
ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAU9W0+zqb1GEG02TNLPVT3LvDm83qIsq1RP9/kGgl7eRkIRV4PQ4+0
0qsApGIAN4Lcpq7h2lRj0g0kjk4GMLIIqiPCnLYTaOxAFDSQQMXgH+XA5+nMSC77
q2hb1nrkpfskjk6O6nR2kt+1dEUQrlbP/dRF0myShzb3iwybnxKq6QBtQzkJYkf5
P+OaVoJ+/YVJaJWxfJfjFNJqhuBT6JuV8jiXnUlNLTMP2emaxNKji3JQvbz2kHcg
XwZXE49m+2J7QcuhDcR2eHs6hkLKXxBN36T+h16J3QbnSpt2cK/7yDgkix9pw5zm
PMtXWatBSTlj+rMKx5k105l6sdLXjd8S
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org