Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
File:                     pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json)
Hash identifier:          5PxB5sYXMf2h+muYzq34yY/uLigBLWU3iLtY1RDnKfU=
Subject key identifier:   08:A8:3A:6C:15:28:15:94:FC:73:98:EA:56:88:90:3F:82:1C:00:F3
Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE
Certificate issuer:       /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
Manifest number:          058C
Signing time:             Sun 19 May 2024 00:32:18 +0000
Manifest this update:     Sun 19 May 2024 00:32:17 +0000
Manifest next update:     Sun 26 May 2024 00:32:17 +0000
Files and hashes:         1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: KMhbh/tNSZlAIUhD0W+CNSjlZ44eUExUB5eUaawcMTU=)
                          2: C7F4FA368DD311EBA4C2B766C4F9AE02.roa (hash: Z5AH8tcyrysySWEQHo3qwaWphyX2TqfFOah/g8j0RUw=)
                          3: 95EA616A8D7011EB9739D53DC4F9AE02.roa (hash: NLsBfxhmyzL8wia5TxVb8XE94lu1DGJrmrPwjzX2gow=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl
                          rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
        Validity
            Not Before: May 19 00:32:17 2024 GMT
            Not After : May 26 00:32:17 2024 GMT
        Subject: CN=66494891-7bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:19:d3:eb:51:84:0b:68:cb:23:f0:c1:cd:
                    b9:17:21:97:e2:df:53:21:56:3b:79:07:b1:01:29:
                    0d:71:11:a0:48:ed:09:8a:f1:d1:d8:3a:61:2f:5f:
                    73:a5:f1:1c:50:9e:45:e6:3a:af:9f:26:77:ed:73:
                    c6:0c:bb:68:25:e9:e4:19:b8:a4:dd:fd:51:61:2f:
                    29:4f:f8:90:36:68:bb:c1:6e:de:c5:43:ea:d7:c1:
                    10:8f:7a:82:7c:8c:d8:2e:f9:f8:31:93:9d:08:ee:
                    eb:d6:35:e9:67:80:24:d1:9e:81:62:ec:ae:eb:e5:
                    63:99:33:5d:84:0f:0b:fe:b6:cb:fc:19:1e:c8:56:
                    2c:c9:71:b3:af:24:ec:39:7c:cc:6f:f2:b8:8d:c7:
                    20:79:cd:d6:9d:77:03:c5:2a:e0:a0:27:44:3d:c9:
                    42:6a:df:c7:f8:76:54:f9:d0:c4:19:ec:93:4c:8b:
                    01:24:95:36:68:26:4b:38:6e:57:41:f4:e6:61:da:
                    99:1f:f2:32:81:57:73:39:9b:7f:7e:19:5c:53:e7:
                    79:4e:67:13:40:27:e2:b9:7e:bd:1c:f9:21:ff:93:
                    f1:ad:e2:0d:a7:0d:08:c5:fe:e2:07:ff:e9:c1:6f:
                    cc:7e:da:de:9e:f9:c3:78:a8:57:23:59:71:f4:0d:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:3A:6C:15:28:15:94:FC:73:98:EA:56:88:90:3F:82:1C:00:F3
            X509v3 Authority Key Identifier:
                keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:36:8c:d2:5c:44:76:8a:49:26:19:ae:3e:b6:89:63:89:42:
         40:88:15:3e:d8:bc:59:ee:0a:66:a4:2e:15:2c:b2:bd:19:da:
         1f:7d:72:0c:dc:a6:44:15:f6:b9:7a:2f:a7:df:ad:40:2d:b2:
         1a:2c:d2:eb:f6:ef:e7:01:14:06:5b:35:06:fa:51:00:61:d1:
         e9:b2:b0:e6:17:a1:26:37:39:b5:40:29:3f:54:7b:19:84:d2:
         8f:dd:b4:40:fa:4e:3a:fd:ef:16:d9:6f:09:0d:ed:ba:71:da:
         4b:1a:7b:7f:6b:a3:f4:47:de:46:29:4f:32:76:67:8b:81:a4:
         bf:44:f8:72:04:e5:44:53:af:99:3b:eb:ca:12:fd:4e:75:b2:
         ff:6e:89:a2:a5:14:0f:f3:7c:00:ef:9e:73:7b:a9:95:47:bd:
         44:fc:ba:dd:1f:cd:95:4c:9b:b1:b0:f2:1d:b6:f4:c5:17:cc:
         04:a8:83:d0:16:59:2b:21:d7:a2:95:d6:7e:64:02:d4:52:8d:
         76:ec:78:0b:d8:9a:99:2f:8c:78:c6:6e:c0:46:8c:c2:d4:a1:
         b2:ba:2e:d1:a8:d3:aa:80:b5:d5:fd:f4:7e:3b:98:83:6a:2c:
         5b:c5:1b:40:df:ff:74:f8:55:0a:53:b1:60:64:71:f8:71:00:
         e3:bb:3e:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB
MTU5MTI2RUUwHhcNMjQwNTE5MDAzMjE3WhcNMjQwNTI2MDAzMjE3WjAYMRYwFAYD
VQQDEw02NjQ5NDg5MS03YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSUZ0+tRhAtoyyPwwc25FyGX4t9TIVY7eQexASkNcRGgSO0JivHR2DphL19z
pfEcUJ5F5jqvnyZ37XPGDLtoJenkGbik3f1RYS8pT/iQNmi7wW7exUPq18EQj3qC
fIzYLvn4MZOdCO7r1jXpZ4Ak0Z6BYuyu6+VjmTNdhA8L/rbL/BkeyFYsyXGzryTs
OXzMb/K4jccgec3WnXcDxSrgoCdEPclCat/H+HZU+dDEGeyTTIsBJJU2aCZLOG5X
QfTmYdqZH/IygVdzOZt/fhlcU+d5TmcTQCfiuX69HPkh/5PxreINpw0Ixf7iB//p
wW/MftrenvnDeKhXI1lx9A2YMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAioOmwV
KBWU/HOY6laIkD+CHADzMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD
RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1
cXlRUk5nSGFnVk9oV1JKdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrNozSXER2ikkmGa4+toljiUJAiBU+2LxZ7gpmpC4VLLK9GdoffXIM
3KZEFfa5ei+n361ALbIaLNLr9u/nARQGWzUG+lEAYdHpsrDmF6EmNzm1QCk/VHsZ
hNKP3bRA+k46/e8W2W8JDe26cdpLGnt/a6P0R95GKU8ydmeLgaS/RPhyBOVEU6+Z
O+vKEv1OdbL/bomipRQP83wA755ze6mVR71E/LrdH82VTJuxsPIdtvTFF8wEqIPQ
FlkrIdeildZ+ZALUUo127HgL2JqZL4x4xm7ARozC1KGyui7RqNOqgLXV/fR+O5iD
aixbxRtA3/90+FUKU7FgZHH4cQDjuz6w
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org