Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File:                     LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier:          nuWULDNdTG50j5PtbnGV+xEMqiCEDw1w2uE9jRrVw0E=
Subject key identifier:   0B:E0:61:59:CD:7C:2B:BD:59:98:EA:D0:0D:26:5F:07:48:14:B3:2A
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer:       /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number:          25
Signing time:             Wed 23 Oct 2024 06:25:28 +0000
Manifest this update:     Wed 23 Oct 2024 06:25:27 +0000
Manifest next update:     Wed 30 Oct 2024 06:25:27 +0000
Files and hashes:         1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: Hr/U42arR99EXaFZPoQjN2CMRgizk/YcXPHkoJ/nNC8=)
                          2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
        Validity
            Not Before: Oct 23 06:25:27 2024 GMT
            Not After : Oct 30 06:25:27 2024 GMT
        Subject: CN=671896d7-1cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:00:3d:36:eb:ea:a0:ff:54:2e:67:84:8e:
                    60:19:91:6d:6a:0f:68:ec:fc:3a:c8:df:d4:0b:81:
                    e8:44:b1:87:77:da:e8:31:5b:82:8f:77:ac:f9:ba:
                    28:0e:2f:e2:c9:12:21:a0:ff:d6:10:7a:3c:20:07:
                    23:fe:0e:1b:f2:60:72:3e:c9:93:49:14:ff:14:ad:
                    d6:e6:5d:20:21:ad:fb:a1:dc:73:24:cc:02:09:12:
                    43:eb:03:4f:91:88:b0:33:c0:e2:ec:b2:93:ed:cf:
                    1d:dc:dd:b0:73:97:5d:d0:d9:31:ea:e8:3e:f6:75:
                    a0:f5:15:71:2a:ac:86:37:5f:d1:c2:5b:2a:52:98:
                    82:f8:88:67:6c:79:05:dd:95:5f:8e:e7:f5:4d:b6:
                    90:6a:e5:c0:1f:38:6d:0a:8c:8a:fb:86:65:a0:b1:
                    dc:3a:38:f9:42:33:cf:84:5a:97:97:f1:a8:ff:ac:
                    49:95:4a:b0:c1:b5:e9:be:f8:be:8c:56:2c:af:3a:
                    f7:7b:d0:dd:64:e7:d1:7c:90:c0:2f:5e:48:02:c3:
                    bd:4d:e6:d5:40:37:2d:ed:31:a6:5f:f0:0f:fe:a0:
                    7f:a0:62:8f:62:64:1d:a2:84:38:f5:9c:55:5e:d7:
                    dc:6a:30:3f:d8:13:f1:38:81:f0:f8:6e:d4:e4:d3:
                    ab:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:61:59:CD:7C:2B:BD:59:98:EA:D0:0D:26:5F:07:48:14:B3:2A
            X509v3 Authority Key Identifier:
                keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:36:6e:24:40:00:ff:16:13:0f:dd:54:f1:d9:36:25:a1:
         ae:af:fc:d5:68:f5:06:ed:c8:62:e9:b8:e8:ce:a1:65:b4:20:
         5e:25:91:ac:9a:3e:73:3d:19:a7:12:1c:3b:2c:5b:5c:5b:b9:
         fd:4f:cb:8e:58:16:0c:24:37:9c:f0:9e:db:32:f4:df:c6:c7:
         53:0e:f9:d9:81:23:3c:bf:9d:10:1c:a4:54:66:72:ed:dd:29:
         be:eb:83:1c:fe:f9:57:d3:1b:64:8d:ee:61:3e:08:93:62:c8:
         8b:c0:6b:13:44:25:48:4b:21:7c:83:7e:4f:7e:c5:f8:0d:8d:
         92:d0:04:74:2f:43:ae:6c:3c:b6:0a:35:c2:8a:5d:e7:5a:b9:
         80:28:d4:c8:5f:e3:65:3d:b8:59:58:5a:49:75:9a:a7:b6:fd:
         cd:05:e9:84:1c:06:89:b9:03:7f:b8:97:b1:ef:b4:6b:8a:a0:
         3d:8a:a5:37:d0:a4:f6:b7:b9:e5:04:b6:72:ca:ae:15:cf:c9:
         1e:53:38:55:90:1a:3a:1c:1b:e2:74:6f:d1:33:d7:b4:41:21:
         a6:79:50:ce:45:f0:88:1d:46:42:63:fd:e3:ab:9d:a1:bb:96:
         d2:1f:f0:27:24:24:a4:c6:50:d4:15:5c:31:b1:e9:9c:a2:b7:
         e9:da:fe:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODRGNzExMC8GA1UEBRMoMkNEMTA4MkVCNDc3NzFEMjFEQTkwMDU4MkYzRUM4N0M2
OURENUNDQzAeFw0yNDEwMjMwNjI1MjdaFw0yNDEwMzAwNjI1MjdaMBgxFjAUBgNV
BAMTDTY3MTg5NmQ3LTFjZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmuwA9NuvqoP9ULmeEjmAZkW1qD2js/DrI39QLgehEsYd32ugxW4KPd6z5uigO
L+LJEiGg/9YQejwgByP+DhvyYHI+yZNJFP8UrdbmXSAhrfuh3HMkzAIJEkPrA0+R
iLAzwOLsspPtzx3c3bBzl13Q2THq6D72daD1FXEqrIY3X9HCWypSmIL4iGdseQXd
lV+O5/VNtpBq5cAfOG0KjIr7hmWgsdw6OPlCM8+EWpeX8aj/rEmVSrDBtem++L6M
ViyvOvd70N1k59F8kMAvXkgCw71N5tVANy3tMaZf8A/+oH+gYo9iZB2ihDj1nFVe
19xqMD/YE/E4gfD4btTk06s1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC+BhWc18
K71ZmOrQDSZfB0gUsyowHwYDVR0jBBgwFoAULNEILrR3cdIdqQBYLz7IfGndXMww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NEY3Lzc5Q0FGQjI2NUI4
RTExRUY5MTc3RTkxRUM0RjlBRTAyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhN
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTE5FSUxyUjNjZElkcVFCWUx6N0lmR25kWE13LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
NEY3Lzc5Q0FGQjI2NUI4RTExRUY5MTc3RTkxRUM0RjlBRTAyL0xORUlMclIzY2RJ
ZHFRQllMejdJZkduZFhNdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEvgNm4kQAD/FhMP3VTx2TYloa6v/NVo9QbtyGLpuOjOoWW0IF4lkaya
PnM9GacSHDssW1xbuf1Py45YFgwkN5zwntsy9N/Gx1MO+dmBIzy/nRAcpFRmcu3d
Kb7rgxz++VfTG2SN7mE+CJNiyIvAaxNEJUhLIXyDfk9+xfgNjZLQBHQvQ65sPLYK
NcKKXedauYAo1Mhf42U9uFlYWkl1mqe2/c0F6YQcBom5A3+4l7HvtGuKoD2KpTfQ
pPa3ueUEtnLKrhXPyR5TOFWQGjocG+J0b9Ez17RBIaZ5UM5F8IgdRkJj/eOrnaG7
ltIf8CckJKTGUNQVXDGx6Zyit+na/uo=
-----END CERTIFICATE-----
Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org