Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
File:                     7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json)
Hash identifier:          1qILYloOA8wNOk+ttFiERtY38tGvciIrHABc9H4ytOM=
Subject key identifier:   5F:4D:34:94:0B:0C:D5:00:66:48:F5:E9:87:1B:BD:B7:AA:00:5E:12
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Certificate issuer:       /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
Manifest number:          0161
Signing time:             Sat 23 Nov 2024 02:20:55 +0000
Manifest this update:     Sat 23 Nov 2024 02:20:55 +0000
Manifest next update:     Sat 30 Nov 2024 02:20:55 +0000
Files and hashes:         1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: UAiV710AJniW+w3ib4L8tjs/95crZn6jevzEAjBzMss=)
                          2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 5zp05k5VVLn+h5FTDM7wh1ceYmuMlTAzc+yFX4p/lNI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
        Validity
            Not Before: Nov 23 02:20:55 2024 GMT
            Not After : Nov 30 02:20:55 2024 GMT
        Subject: CN=67413c07-6c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:54:da:11:d5:87:a1:f3:8d:54:8b:9e:95:
                    36:cb:34:1a:74:72:03:9d:cf:b2:e6:4e:5d:97:a9:
                    e9:c6:5d:8a:e3:e5:23:cb:d7:f1:7b:a8:0b:99:b1:
                    91:82:e8:27:01:ff:65:4b:9a:9a:50:2f:b5:32:ca:
                    47:77:3c:35:57:e9:a2:48:91:bc:62:cc:c2:4b:38:
                    10:6d:a8:83:b3:b2:1b:c5:ab:55:5d:23:c9:68:8f:
                    5a:3a:0a:38:8d:97:db:72:2c:4b:0e:b9:90:94:64:
                    7c:f8:a8:eb:b6:59:d0:99:0c:ff:8a:6b:73:4f:ba:
                    46:b7:d4:1e:47:18:8d:66:65:7b:d9:25:78:68:f8:
                    fd:43:c5:e4:aa:85:f3:79:b2:fb:3e:48:74:5d:d8:
                    39:06:4d:26:2b:bc:4f:dd:fa:bd:2d:b7:e5:02:34:
                    8d:78:7d:7a:2b:29:7a:65:64:6f:94:3c:35:3c:d8:
                    ae:77:de:8e:66:c6:46:7b:16:4e:2c:2d:83:87:ff:
                    45:2a:c1:e3:ad:25:f4:2e:9e:a8:4d:0c:58:c4:01:
                    69:50:96:09:3a:71:08:93:a8:93:5a:39:04:be:d9:
                    a6:0d:f3:a0:d8:c0:c0:8d:cf:89:b6:8e:50:94:15:
                    11:cf:3b:e1:b3:35:94:04:66:4e:2c:cb:2b:b1:58:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:34:94:0B:0C:D5:00:66:48:F5:E9:87:1B:BD:B7:AA:00:5E:12
            X509v3 Authority Key Identifier:
                keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2a:57:e4:68:b3:5d:69:70:cf:58:38:a9:8d:0f:e7:26:08:
         77:aa:97:40:ea:84:e2:4a:93:f4:e0:8c:7f:55:2e:cb:b7:21:
         ad:44:ba:9e:6e:08:16:64:ba:6c:bf:ec:9c:eb:a1:b5:99:10:
         ea:ab:08:d2:e7:ff:d2:23:58:b7:3d:13:e4:6e:99:1f:8b:89:
         59:64:bf:68:5a:8b:f3:3c:00:63:d2:21:3c:3b:47:31:1c:37:
         4c:56:2f:5b:0d:1f:c3:a2:d0:25:71:6a:a4:bb:80:8b:0a:04:
         f8:2c:0a:6c:42:1e:c3:28:d5:cd:c4:f1:68:73:0c:7b:48:5f:
         c7:a8:87:4a:4d:28:41:81:70:bb:3e:2f:78:9e:13:98:96:bb:
         8d:5d:93:3f:4a:9e:18:94:09:a8:08:7b:81:e2:58:bc:91:af:
         38:06:d9:28:62:a5:5c:79:5e:4e:95:c2:b7:fe:74:e5:14:cf:
         b3:35:a8:ca:ba:9a:5b:86:61:03:cd:ae:a0:b8:51:69:fa:73:
         ac:64:bd:ba:34:e9:04:c4:91:8a:2c:a5:43:7b:3b:38:35:83:
         2b:47:4b:60:5a:4b:55:d4:8a:83:13:c2:1b:47:14:5f:d7:c6:
         07:0a:5d:ca:75:60:ed:e2:24:b0:f4:b5:22:70:e9:15:fb:02:
         19:6f:6f:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ0NjgxMTAvBgNVBAUTKEVEMzk3ODFFN0NBMjYzMkM1NEI3RkFFMjI1NEUyMUYw
MUJBMDc2ODcwHhcNMjQxMTIzMDIyMDU1WhcNMjQxMTMwMDIyMDU1WjAYMRYwFAYD
VQQDEw02NzQxM2MwNy02YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtahU2hHVh6HzjVSLnpU2yzQadHIDnc+y5k5dl6npxl2K4+Ujy9fxe6gLmbGR
gugnAf9lS5qaUC+1MspHdzw1V+miSJG8YszCSzgQbaiDs7IbxatVXSPJaI9aOgo4
jZfbcixLDrmQlGR8+KjrtlnQmQz/imtzT7pGt9QeRxiNZmV72SV4aPj9Q8XkqoXz
ebL7Pkh0Xdg5Bk0mK7xP3fq9LbflAjSNeH16Kyl6ZWRvlDw1PNiud96OZsZGexZO
LC2Dh/9FKsHjrSX0Lp6oTQxYxAFpUJYJOnEIk6iTWjkEvtmmDfOg2MDAjc+Jto5Q
lBURzzvhszWUBGZOLMsrsVj+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9NNJQL
DNUAZkj16YcbvbeqAF4SMB8GA1UdIwQYMBaAFO05eB58omMsVLf64iVOIfAboHaH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQ2OC81QjRBMzNDNjhD
OEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5eFV0X3JpSlU0aDhCdWdk
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdUbDRIbnlpWXl4VXRfcmlKVTRoOEJ1Z2RvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDQ2OC81QjRBMzNDNjhDOEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5
eFV0X3JpSlU0aDhCdWdkb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4KlfkaLNdaXDPWDipjQ/nJgh3qpdA6oTiSpP04Ix/VS7LtyGtRLqe
bggWZLpsv+yc66G1mRDqqwjS5//SI1i3PRPkbpkfi4lZZL9oWovzPABj0iE8O0cx
HDdMVi9bDR/DotAlcWqku4CLCgT4LApsQh7DKNXNxPFocwx7SF/HqIdKTShBgXC7
Pi94nhOYlruNXZM/Sp4YlAmoCHuB4li8ka84BtkoYqVceV5OlcK3/nTlFM+zNajK
uppbhmEDza6guFFp+nOsZL26NOkExJGKLKVDezs4NYMrR0tgWktV1IqDE8IbRxRf
18YHCl3KdWDt4iSw9LUicOkV+wIZb2+w
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org