Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
File:                     LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json)
Hash identifier:          bCQVONEuP6MPPTBXoE7MmhTkIAa6DUHXqR/Jzh/cUkA=
Subject key identifier:   E8:8F:DF:93:99:5A:34:F8:85:CC:5E:4F:DC:D6:59:68:97:42:13:05
Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4
Certificate issuer:       /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
Manifest number:          90
Signing time:             Sat 23 Nov 2024 04:29:57 +0000
Manifest this update:     Sat 23 Nov 2024 04:29:57 +0000
Manifest next update:     Sat 30 Nov 2024 04:29:57 +0000
Files and hashes:         1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: ROd0wnVXvCufaCMkt6F3Fv2N9YVgTTAJhg8KNmjVjVo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4
        Validity
            Not Before: Nov 23 04:29:57 2024 GMT
            Not After : Nov 30 04:29:57 2024 GMT
        Subject: CN=67415a45-d039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:51:2f:10:06:ca:fc:07:99:f1:3f:2f:67:
                    89:43:98:f2:67:63:19:0f:ad:27:19:91:44:35:8c:
                    eb:b2:70:68:fe:55:ed:68:80:fd:8d:9a:a4:de:a2:
                    ad:ab:90:48:ac:a9:37:ff:ee:82:ba:81:7c:60:79:
                    28:6f:07:4d:0d:a5:4b:8b:3c:c5:f0:3c:88:5b:c4:
                    1d:8f:c2:fd:79:b6:02:42:3e:3d:d1:af:47:ce:0a:
                    d2:a6:a6:99:de:a5:63:aa:da:e1:88:56:89:fb:a2:
                    02:77:79:ea:65:d0:3e:8b:c4:ea:39:04:1f:97:ef:
                    b4:d6:cb:35:70:1d:2b:9a:73:12:c4:2a:f1:42:6d:
                    3a:ed:f5:3c:21:45:45:3a:95:99:d2:ee:f9:e3:f0:
                    2e:84:ab:69:da:84:29:36:b2:47:7d:1b:d5:de:47:
                    22:35:ff:12:03:36:f1:fd:71:e3:7b:b1:7a:fb:f9:
                    21:62:46:3c:41:f4:46:48:5e:2b:01:de:2c:f1:f1:
                    60:84:a0:54:88:32:8b:cc:a8:99:0d:1c:51:09:f3:
                    33:f3:7d:e9:81:6d:9d:ac:72:62:af:f6:57:dc:8a:
                    43:9a:c8:18:4c:36:b4:96:11:3f:b1:6c:ab:37:a7:
                    d9:b2:e9:84:55:1e:d5:00:88:d3:e5:19:5a:17:b5:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:DF:93:99:5A:34:F8:85:CC:5E:4F:DC:D6:59:68:97:42:13:05
            X509v3 Authority Key Identifier:
                keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:e0:c3:fe:de:ba:85:98:e2:d5:13:15:31:c5:d3:05:ac:
         8f:16:0a:c9:f3:9c:09:15:c1:78:2f:5a:9e:7b:ea:d1:9a:e0:
         1d:b1:77:09:c2:c1:87:2a:ec:38:c0:e0:32:f9:b4:1d:c2:cf:
         41:fa:42:ec:6c:4f:c7:b9:17:8d:ad:81:3d:7b:83:f8:1b:44:
         fb:32:97:d3:a3:49:f3:7e:53:07:72:37:8b:f7:92:d5:9b:07:
         be:27:28:fe:9d:ed:b5:4f:b8:06:78:00:99:b3:ce:43:7c:22:
         f1:2d:5e:a7:89:c4:1c:3b:b2:ad:34:70:73:29:98:36:fd:a2:
         de:d1:6b:35:6e:30:80:00:f3:b9:f7:36:84:66:65:1d:63:c7:
         4e:91:5d:0e:e7:f8:6d:35:d2:2f:f1:80:04:92:5c:ae:dc:3b:
         a9:e6:5e:fc:ca:ee:2e:5e:a4:49:64:bf:be:db:63:e0:96:5b:
         51:cf:e9:e3:bf:10:ff:ef:d1:88:e7:9d:8c:2a:c2:b2:e2:ab:
         bf:46:6c:6e:5d:a7:ba:00:9b:10:ba:33:f5:3f:ef:b6:23:30:
         5f:39:da:f2:57:ab:0d:36:34:d2:2e:58:81:d7:a0:83:83:0b:
         be:f1:49:f9:dd:46:f4:8a:2b:f8:f9:a4:73:ca:b0:89:b0:67:
         ae:51:30:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC
NUYwQjJFQTQwHhcNMjQxMTIzMDQyOTU3WhcNMjQxMTMwMDQyOTU3WjAYMRYwFAYD
VQQDEw02NzQxNWE0NS1kMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3bpRLxAGyvwHmfE/L2eJQ5jyZ2MZD60nGZFENYzrsnBo/lXtaID9jZqk3qKt
q5BIrKk3/+6CuoF8YHkobwdNDaVLizzF8DyIW8Qdj8L9ebYCQj490a9HzgrSpqaZ
3qVjqtrhiFaJ+6ICd3nqZdA+i8TqOQQfl++01ss1cB0rmnMSxCrxQm067fU8IUVF
OpWZ0u754/AuhKtp2oQpNrJHfRvV3kciNf8SAzbx/XHje7F6+/khYkY8QfRGSF4r
Ad4s8fFghKBUiDKLzKiZDRxRCfMz833pgW2drHJir/ZX3IpDmsgYTDa0lhE/sWyr
N6fZsumEVR7VAIjT5RlaF7W2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiP35OZ
WjT4hcxeT9zWWWiXQhMFMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC
MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox
NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ6+DD/t66hZji1RMVMcXTBayPFgrJ85wJFcF4L1qee+rRmuAdsXcJ
wsGHKuw4wOAy+bQdws9B+kLsbE/HuReNrYE9e4P4G0T7MpfTo0nzflMHcjeL95LV
mwe+Jyj+ne21T7gGeACZs85DfCLxLV6nicQcO7KtNHBzKZg2/aLe0Ws1bjCAAPO5
9zaEZmUdY8dOkV0O5/htNdIv8YAEklyu3Dup5l78yu4uXqRJZL++22PglltRz+nj
vxD/79GI552MKsKy4qu/RmxuXae6AJsQujP1P++2IzBfOdryV6sNNjTSLliB16CD
gwu+8Un53Ub0iiv4+aRzyrCJsGeuUTDN
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:32 2024 by rpki-client on console-fra.rpki-client.org