Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File:                     v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier:          i3D58j5p4lIuiRnjUl5p3SiZXtAUyO3CyUGbtwfclSE=
Subject key identifier:   46:75:DA:83:D1:A2:29:82:4C:9C:37:68:87:A5:10:9C:0E:2E:A2:24
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer:       /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number:          05F6
Signing time:             Wed 20 Nov 2024 22:35:23 +0000
Manifest this update:     Wed 20 Nov 2024 22:35:22 +0000
Manifest next update:     Wed 27 Nov 2024 22:35:22 +0000
Files and hashes:         1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: mytPtDeRBXU/tRcrDPPUcLK3Fj6cP+8mStZTVmDVg20=)
                          2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
        Validity
            Not Before: Nov 20 22:35:22 2024 GMT
            Not After : Nov 27 22:35:22 2024 GMT
        Subject: CN=673e642b-07b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:7e:a2:97:ba:f3:0d:8a:7d:64:7b:81:38:
                    16:21:61:f8:86:4d:8b:e0:38:25:52:60:27:e4:55:
                    9f:bc:ff:71:7b:fc:47:11:7a:07:13:6a:7f:28:67:
                    71:07:ad:7e:19:dc:e5:c7:81:98:40:1d:ba:d2:ea:
                    6c:e5:6f:99:ce:c6:ca:eb:d1:55:b8:52:c7:d6:78:
                    9e:d0:af:d5:5f:77:59:1f:21:99:72:66:ee:8a:83:
                    fc:be:9f:36:a4:2f:60:72:46:b2:36:f2:4c:95:f0:
                    d9:90:43:7a:31:52:f6:3e:17:b2:d7:e4:cb:51:10:
                    45:84:79:25:f1:a4:3e:93:61:7c:ba:45:09:ae:8e:
                    a4:41:fe:6e:12:bb:16:a8:06:97:9d:d2:48:5a:49:
                    98:98:e5:8a:dc:82:38:9e:1d:eb:77:74:4e:69:4a:
                    14:55:b5:0c:e6:db:ba:f1:44:47:76:b9:a1:2d:4d:
                    9e:b9:24:38:31:ab:85:7e:b6:8e:ec:9d:92:bd:1e:
                    48:b5:b2:7a:95:45:4b:82:41:b8:3c:90:8d:0a:e8:
                    76:46:d4:0c:74:90:aa:41:b9:3e:e1:54:f2:3d:5f:
                    49:04:a1:b3:4b:bb:6c:51:25:99:a2:3d:bc:e2:64:
                    4e:61:49:1d:6c:19:ce:43:62:12:df:40:9f:cd:ea:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:DA:83:D1:A2:29:82:4C:9C:37:68:87:A5:10:9C:0E:2E:A2:24
            X509v3 Authority Key Identifier:
                keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:7d:54:84:2d:52:00:cc:cc:b6:a4:21:5a:2b:f1:7d:d4:
         4c:ab:ab:46:63:cc:e1:04:f4:bf:09:75:48:66:09:1c:9b:5f:
         d1:a6:fb:a4:a7:ad:1d:2d:d3:9c:17:6c:c6:af:45:0d:10:ce:
         f0:55:3d:ef:8a:60:73:7e:d0:c3:d9:8a:c4:9c:3e:b4:24:f9:
         3c:48:9f:96:69:04:7b:8b:30:91:e8:a8:27:a6:0e:95:de:45:
         04:24:c6:8a:d1:53:8b:05:b5:27:68:f8:e9:10:3a:27:5b:b5:
         2c:36:31:11:0c:98:a5:71:06:77:26:f6:78:fc:69:49:de:cd:
         97:b0:97:33:46:05:cf:3f:17:d8:52:79:3c:fc:c0:49:1d:fb:
         db:05:8d:b3:f8:6c:6d:46:05:bd:c3:8a:91:20:f6:9f:7b:5d:
         f3:f4:bb:f4:e8:1a:3b:60:9f:41:68:79:b3:40:2a:56:d1:36:
         f0:c3:7a:f2:36:4b:25:e9:73:54:6e:95:77:78:92:c8:18:c4:
         84:38:c1:cc:f3:98:cf:9e:75:9b:de:04:71:e5:37:3f:c9:69:
         9e:8e:2f:9d:bb:6c:50:36:75:fd:be:3f:f8:b3:f4:e9:7a:df:
         48:84:86:f5:d9:4c:42:03:13:ec:33:bf:4e:f7:12:a1:ca:2f:
         c5:c2:45:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4
MURBMkI1QTEwHhcNMjQxMTIwMjIzNTIyWhcNMjQxMTI3MjIzNTIyWjAYMRYwFAYD
VQQDEw02NzNlNjQyYi0wN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbV+ope68w2KfWR7gTgWIWH4hk2L4DglUmAn5FWfvP9xe/xHEXoHE2p/KGdx
B61+Gdzlx4GYQB260ups5W+ZzsbK69FVuFLH1nie0K/VX3dZHyGZcmbuioP8vp82
pC9gckayNvJMlfDZkEN6MVL2Phey1+TLURBFhHkl8aQ+k2F8ukUJro6kQf5uErsW
qAaXndJIWkmYmOWK3II4nh3rd3ROaUoUVbUM5tu68URHdrmhLU2euSQ4MauFfraO
7J2SvR5ItbJ6lUVLgkG4PJCNCuh2RtQMdJCqQbk+4VTyPV9JBKGzS7tsUSWZoj28
4mROYUkdbBnOQ2IS30Cfzer6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ12oPR
oimCTJw3aIelEJwOLqIkMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4
Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx
Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPZ31UhC1SAMzMtqQhWivxfdRMq6tGY8zhBPS/CXVIZgkcm1/Rpvuk
p60dLdOcF2zGr0UNEM7wVT3vimBzftDD2YrEnD60JPk8SJ+WaQR7izCR6Kgnpg6V
3kUEJMaK0VOLBbUnaPjpEDonW7UsNjERDJilcQZ3JvZ4/GlJ3s2XsJczRgXPPxfY
Unk8/MBJHfvbBY2z+GxtRgW9w4qRIPafe13z9Lv06Bo7YJ9BaHmzQCpW0Tbww3ry
Nksl6XNUbpV3eJLIGMSEOMHM85jPnnWb3gRx5Tc/yWmeji+du2xQNnX9vj/4s/Tp
et9IhIb12UxCAxPsM79O9xKhyi/FwkVK
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:56:03 2024 by rpki-client on console-ams.rpki-client.org