Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          jf3xj4bMcAc3p+Cz4nQn7fiEdgmjXPrxzIaO9etG4aM=
Subject key identifier:   26:B3:34:74:85:0B:B7:AB:A4:D9:0F:22:ED:23:21:04:7B:6C:C0:2A
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0C5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0C3D
Signing time:             Wed 20 Nov 2024 18:11:54 +0000
Manifest this update:     Wed 20 Nov 2024 18:11:53 +0000
Manifest next update:     Wed 27 Nov 2024 18:11:53 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: dz19XGAvmQvOAclK+W0xwin9o/wRTSM7LAZT6IIev7U=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: xP6ndfAIUT4kjjg3Z1yDgdvpNzEsqIUZcM1cJmsAZNg=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: NI1ZoCOniGYBu2VFAx4PdtMcylM7TuUiNnsC0whwimk=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: 9hZUw6OiygXcs2VV6xxLdgPVz+MABiI7dpW7FTbMjXY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 18:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3165 (0xc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
        Validity
            Not Before: Nov 20 18:11:53 2024 GMT
            Not After : Nov 27 18:11:53 2024 GMT
        Subject: CN=673e2669-853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:38:5f:10:fa:83:85:54:4b:2a:15:c3:70:
                    a0:b1:5a:96:65:8b:03:be:ec:9f:da:de:86:5e:67:
                    fe:54:51:6c:be:ef:19:fa:fe:2e:d1:7f:49:02:57:
                    5e:35:06:b9:04:e4:2d:50:89:47:81:e5:5a:52:45:
                    ce:8a:e0:81:48:10:46:58:3d:d0:41:ad:65:e9:da:
                    44:1f:38:5a:1b:04:8a:36:c1:a2:06:17:36:7b:b8:
                    2c:66:67:57:f7:85:0b:d9:f2:14:6b:1b:da:c0:93:
                    08:68:9e:26:a7:45:10:e2:a9:45:b3:6c:ef:29:1b:
                    74:92:75:88:d3:f3:3e:51:26:0a:9a:b7:51:17:d7:
                    ef:80:53:4e:e7:15:a9:31:9b:0b:98:5a:2f:0f:a3:
                    a5:1c:bc:d9:d7:cb:1b:7e:1b:23:86:1e:39:02:86:
                    73:ae:75:90:67:42:68:e4:bf:d0:67:85:df:17:49:
                    a0:19:05:ee:55:63:23:b6:80:2c:b7:11:15:51:8a:
                    20:6d:b9:61:60:d7:a4:9b:df:7a:ab:e9:e0:8a:26:
                    1a:83:ea:e3:48:43:e3:72:22:75:bd:59:6c:4f:66:
                    79:d9:ca:c6:17:3e:b9:ed:77:46:2f:fa:05:67:1a:
                    18:04:32:2c:b7:8e:ea:28:10:c7:c4:c4:37:83:9f:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:34:74:85:0B:B7:AB:A4:D9:0F:22:ED:23:21:04:7B:6C:C0:2A
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:09:55:37:6a:ed:8b:e6:1f:bf:e0:54:47:dd:5e:ba:09:90:
         da:4a:a6:20:c2:a3:2c:db:ec:7c:cb:a0:17:76:67:74:6c:7b:
         52:1f:3f:fd:5f:38:77:f2:02:51:82:f3:d9:eb:60:65:ac:35:
         ab:eb:0c:e7:f3:ba:4e:ea:d8:39:cb:a3:07:20:c9:86:91:6e:
         1b:39:ac:ca:d9:9a:64:6a:8e:3d:7a:cb:67:09:6d:18:6b:e1:
         1b:2b:e8:a9:34:19:6f:1d:c3:75:32:d1:5b:98:89:90:dd:df:
         19:6c:9d:23:f6:99:ca:ad:41:08:25:7d:2c:85:a1:bb:02:63:
         f3:9e:3d:27:04:d3:83:10:60:8a:b3:43:7e:19:af:97:b6:c2:
         83:5d:0a:c2:e5:1d:20:ac:ee:85:fb:d9:a8:5e:8e:00:ee:a7:
         ba:ab:6e:9b:8e:db:4f:d3:53:2b:96:dd:6b:bd:97:47:87:ad:
         16:08:60:17:e8:c6:40:e5:96:04:60:a2:da:c8:85:2b:d7:e1:
         77:71:df:a8:45:c5:6e:dd:53:db:98:5b:de:64:c3:4a:9c:4e:
         1a:2c:3e:07:f2:9f:e3:9b:15:5f:df:38:3b:f6:e7:c3:19:36:
         42:7b:c6:9b:f8:36:c0:5d:54:81:59:05:c7:ff:1a:49:21:84:
         24:11:d1:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG
RUY3RUIzRTcwHhcNMjQxMTIwMTgxMTUzWhcNMjQxMTI3MTgxMTUzWjAYMRYwFAYD
VQQDEw02NzNlMjY2OS04NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtaA4XxD6g4VUSyoVw3CgsVqWZYsDvuyf2t6GXmf+VFFsvu8Z+v4u0X9JAlde
NQa5BOQtUIlHgeVaUkXOiuCBSBBGWD3QQa1l6dpEHzhaGwSKNsGiBhc2e7gsZmdX
94UL2fIUaxvawJMIaJ4mp0UQ4qlFs2zvKRt0knWI0/M+USYKmrdRF9fvgFNO5xWp
MZsLmFovD6OlHLzZ18sbfhsjhh45AoZzrnWQZ0Jo5L/QZ4XfF0mgGQXuVWMjtoAs
txEVUYogbblhYNekm996q+ngiiYag+rjSEPjciJ1vVlsT2Z52crGFz657XdGL/oF
ZxoYBDIst47qKBDHxMQ3g5+OuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCazNHSF
C7erpNkPIu0jIQR7bMAqMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3
MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy
NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrCVU3au2L5h+/4FRH3V66CZDaSqYgwqMs2+x8y6AXdmd0bHtSHz/9
Xzh38gJRgvPZ62BlrDWr6wzn87pO6tg5y6MHIMmGkW4bOazK2Zpkao49estnCW0Y
a+EbK+ipNBlvHcN1MtFbmImQ3d8ZbJ0j9pnKrUEIJX0shaG7AmPznj0nBNODEGCK
s0N+Ga+XtsKDXQrC5R0grO6F+9moXo4A7qe6q26bjttP01Mrlt1rvZdHh60WCGAX
6MZA5ZYEYKLayIUr1+F3cd+oRcVu3VPbmFveZMNKnE4aLD4H8p/jmxVf3zg79ufD
GTZCe8ab+DbAXVSBWQXH/xpJIYQkEdHD
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:05 2024 by rpki-client on console-ams.rpki-client.org