Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File:                     zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier:          rV0tFWgGAOZ4dPJzuf4UkqIw6BCiUeNpddUXlc7Kc7w=
Subject key identifier:   F3:5B:38:18:ED:53:11:B2:0B:85:54:2D:CB:A0:4C:FF:7A:AF:07:43
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number:          BF
Signing time:             Sun 19 May 2024 06:30:06 +0000
Manifest this update:     Sun 19 May 2024 06:30:06 +0000
Manifest next update:     Sun 26 May 2024 06:30:06 +0000
Files and hashes:         1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: ZsZ5NeeP/FfyarzgzhnqoE3i/tT1fhdy8jFxt3Nv2IE=)
                          2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: m1aI6T0yv/X9zJJ76wSSAV4wsvFRB1MURBOTPMDYVTg=)
                          3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: lYHiXvFHN0sTytXedz8N6c1+rrVDTpUOGa3q1hnyBeQ=)
                          4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: u/bpOCAB43F/UqLf6kPtvsky2wc+gKQbzKYOTaUUUWQ=)
                          5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: jqfe1ApICk4IUlBXTjJtdv9VTMNMcFu5Kuiu1Woz6Nc=)
                          6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: KO3X+kWRiKLazzrkbzu0DKHBpkxZVE3We7EWB6/aSe8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: May 19 06:30:06 2024 GMT
            Not After : May 26 06:30:06 2024 GMT
        Subject: CN=66499c6e-484b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:41:c6:23:2b:4e:25:de:4e:85:78:f7:c1:
                    3b:4a:22:1b:0a:7d:92:42:63:ec:33:d6:1a:54:d2:
                    31:d9:78:cd:82:9d:3c:b4:ff:64:03:c4:65:c4:8e:
                    b4:2a:c2:65:ae:4a:44:7f:56:ba:66:9a:a2:65:7e:
                    97:f5:bd:78:a6:9d:90:38:b8:63:6d:5d:b0:fd:19:
                    20:fd:54:da:6c:85:58:81:46:4a:22:dd:21:46:37:
                    7c:a7:dd:83:83:dc:a2:13:98:79:0b:d1:9a:89:15:
                    10:03:2a:40:25:61:4a:d1:8d:66:97:6a:84:cd:a4:
                    e0:86:bf:cc:11:83:3c:ef:c8:3c:d5:b9:fc:d1:55:
                    b3:1d:70:64:f9:d6:a7:a4:bd:d4:e8:4b:3a:bc:ad:
                    a4:d8:6d:bb:8d:74:f7:89:a8:16:a0:6e:86:51:41:
                    c0:68:20:f6:e2:c7:cb:45:24:cb:ee:e0:40:6c:17:
                    aa:f1:59:18:21:32:a3:99:d7:4a:76:89:56:56:b9:
                    31:98:33:8a:fd:fd:56:17:23:5a:b6:d9:2c:87:a2:
                    b6:3f:df:16:88:09:53:85:f8:b3:47:11:a9:d2:ba:
                    32:8e:77:d9:2c:ea:82:32:2a:67:8c:ae:f3:4c:e0:
                    7f:dd:da:1e:e7:44:f2:f9:63:32:7c:6e:ca:bb:f2:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:38:18:ED:53:11:B2:0B:85:54:2D:CB:A0:4C:FF:7A:AF:07:43
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:da:3a:32:55:54:a1:54:fd:38:aa:e8:63:91:8b:1c:91:86:
         fc:01:8a:d2:a0:41:21:7f:6b:a0:94:a7:97:be:c8:bd:45:01:
         54:fe:41:ee:03:19:fa:b9:20:ab:fb:90:80:ce:8c:10:10:fa:
         47:a7:9f:4f:e2:ff:a7:37:de:41:f9:97:7d:f8:e2:06:ad:31:
         07:8d:f6:51:87:72:09:bf:41:0e:24:b3:97:a1:ca:f2:ce:f2:
         53:93:c9:4a:e4:57:e8:f4:2e:0d:32:02:10:86:6c:59:f9:d6:
         27:65:b0:78:3f:b9:44:35:46:ac:05:fd:51:86:55:4d:7d:1a:
         ad:ef:b7:e9:e4:d9:db:fa:18:e7:0c:93:09:54:d9:43:5f:a1:
         11:73:08:45:83:07:cf:c8:12:c5:13:bb:f2:88:2b:0d:0e:6c:
         5c:01:a8:65:27:24:e5:48:37:fd:a4:52:db:56:f1:e9:0c:03:
         b5:de:3a:45:a3:c8:22:d9:4d:05:7c:6a:0a:ce:c1:e3:97:41:
         ab:38:2c:bc:63:80:49:80:9f:3a:c7:ea:4a:08:45:60:37:b4:
         45:89:49:e2:9e:28:44:00:75:cb:53:77:c2:4d:c7:05:65:48:
         cd:d3:c5:72:b0:b1:99:69:d2:0b:84:c6:37:d2:c7:5f:02:fb:
         79:45:1d:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3
NDYxOTkzODMwHhcNMjQwNTE5MDYzMDA2WhcNMjQwNTI2MDYzMDA2WjAYMRYwFAYD
VQQDEw02NjQ5OWM2ZS00ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6QRBxiMrTiXeToV498E7SiIbCn2SQmPsM9YaVNIx2XjNgp08tP9kA8RlxI60
KsJlrkpEf1a6ZpqiZX6X9b14pp2QOLhjbV2w/Rkg/VTabIVYgUZKIt0hRjd8p92D
g9yiE5h5C9GaiRUQAypAJWFK0Y1ml2qEzaTghr/MEYM878g81bn80VWzHXBk+dan
pL3U6Es6vK2k2G27jXT3iagWoG6GUUHAaCD24sfLRSTL7uBAbBeq8VkYITKjmddK
dolWVrkxmDOK/f1WFyNattksh6K2P98WiAlThfizRxGp0royjnfZLOqCMipnjK7z
TOB/3doe50Ty+WMyfG7Ku/JUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNbOBjt
UxGyC4VULcugTP96rwdDMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx
QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4
UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBX2joyVVShVP04quhjkYsckYb8AYrSoEEhf2uglKeXvsi9RQFU/kHu
Axn6uSCr+5CAzowQEPpHp59P4v+nN95B+Zd9+OIGrTEHjfZRh3IJv0EOJLOXocry
zvJTk8lK5Ffo9C4NMgIQhmxZ+dYnZbB4P7lENUasBf1RhlVNfRqt77fp5Nnb+hjn
DJMJVNlDX6ERcwhFgwfPyBLFE7vyiCsNDmxcAahlJyTlSDf9pFLbVvHpDAO13jpF
o8gi2U0FfGoKzsHjl0GrOCy8Y4BJgJ86x+pKCEVgN7RFiUninihEAHXLU3fCTccF
ZUjN08VysLGZadILhMY30sdfAvt5RR1E
-----END CERTIFICATE-----
Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org