Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
File:                     eZj15wgWto199ez2dy57XKI634M.mft (raw, json)
Hash identifier:          kY2vJmFZEWpCB2soPSAUgK1h78QfjlsIx851X1jO2Ro=
Subject key identifier:   22:FB:07:0F:78:E1:4F:CA:62:3B:03:A5:10:4D:DA:10:B9:65:40:FF
Authority key identifier: 79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83
Certificate issuer:       /CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
Manifest number:          5E
Signing time:             Sun 19 May 2024 07:44:07 +0000
Manifest this update:     Sun 19 May 2024 07:44:07 +0000
Manifest next update:     Sun 26 May 2024 07:44:07 +0000
Files and hashes:         1: eZj15wgWto199ez2dy57XKI634M.crl (hash: 0GgzZDoWMCLME417IcRE2tBJJgCpUp1qxIfsecFgVTM=)
                          2: 5D1B0906890E11EE90BBB457C4F9AE02.roa (hash: g4r6ivEyHj0KIxqTYJYUXvZRBiJtq89JACEKVxzuegY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl
                          rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C10/serialNumber=7998F5E70816B68D7DF5ECF6772E7B5CA23ADF83
        Validity
            Not Before: May 19 07:44:07 2024 GMT
            Not After : May 26 07:44:07 2024 GMT
        Subject: CN=6649adc7-75ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:3c:e0:78:bd:8b:d9:7d:51:e8:fa:ae:ad:
                    b3:67:59:fe:34:15:84:32:dc:79:8f:3e:3c:28:09:
                    7a:c7:4e:a5:1b:6e:4f:22:8d:9e:0e:8a:fb:b8:d8:
                    7f:80:77:9d:7a:ef:5e:2b:1a:54:6c:21:1c:2f:cd:
                    a2:ce:9d:45:52:14:f8:01:97:42:35:15:e8:df:46:
                    27:7a:11:5f:80:3b:6b:26:f1:42:42:dc:26:57:88:
                    58:b8:82:18:e3:d5:75:28:23:22:fe:88:76:6a:f0:
                    2c:22:41:c2:30:85:fc:3f:8f:2f:86:60:43:20:ad:
                    a9:e8:78:1f:9a:91:35:1e:a5:b2:46:d5:cb:c2:54:
                    4b:9c:77:77:34:eb:f9:b9:86:49:e9:1b:81:cf:54:
                    39:87:42:8a:48:b4:4f:3b:89:80:5d:81:b5:c3:03:
                    9d:cc:2d:70:0f:8b:08:07:5f:f1:c3:bf:b2:59:d4:
                    a2:e0:ab:ff:01:8b:38:eb:77:e6:6c:97:3c:f6:ce:
                    3c:ee:38:5b:97:0e:9b:96:a2:09:ef:c4:51:60:fc:
                    60:46:70:af:e8:fb:04:5a:8b:8a:b6:c8:9e:47:51:
                    53:7a:b3:8a:2b:1c:3d:2f:76:b3:d2:14:82:5e:63:
                    12:c1:29:a5:3c:99:00:67:d6:07:9b:1e:d4:15:c4:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:07:0F:78:E1:4F:CA:62:3B:03:A5:10:4D:DA:10:B9:65:40:FF
            X509v3 Authority Key Identifier:
                keyid:79:98:F5:E7:08:16:B6:8D:7D:F5:EC:F6:77:2E:7B:5C:A2:3A:DF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eZj15wgWto199ez2dy57XKI634M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C10/D9A9F9B0890D11EEB06A0C56C4F9AE02/eZj15wgWto199ez2dy57XKI634M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:2d:d2:ab:14:1e:80:5a:de:50:21:77:ff:0e:e1:b7:02:
         e5:41:47:4f:fb:14:d5:9e:72:57:bf:78:b9:51:c8:22:e1:60:
         e9:a7:5d:a3:25:0b:36:36:61:fe:83:29:64:f0:7f:e4:25:87:
         06:23:43:ea:a4:03:6c:6d:81:dd:87:3a:57:6c:42:d1:17:3b:
         02:8f:78:c7:74:76:44:ae:9f:08:c1:8b:8f:c5:19:af:f7:ed:
         9a:d9:f7:40:15:aa:ba:64:72:80:b4:55:76:a1:06:b2:c3:00:
         f2:88:3b:4f:3f:e2:43:f7:f2:49:4f:3c:21:77:8f:2f:6f:8f:
         1b:12:6b:6f:5a:67:60:d7:49:30:f9:f8:50:3f:73:82:87:21:
         3b:7c:4a:48:e3:17:5c:b9:2d:1f:88:71:b9:f1:c0:1b:ee:3d:
         f2:1d:4f:ae:44:30:fb:cb:91:56:9d:6d:5f:f4:6a:03:2e:a7:
         4d:93:f0:86:d4:3f:0e:48:e1:db:cf:11:3a:26:7f:63:bc:1c:
         67:63:27:98:51:cb:a6:3f:03:00:22:6b:91:cd:b8:12:e6:ef:
         39:e6:84:4a:3a:20:30:00:c7:fb:30:a8:d7:f6:23:3d:25:30:
         44:14:2a:d4:fd:56:0b:93:3a:8e:3d:d5:fb:53:00:86:0d:f4:
         dc:e3:1e:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0MxMDExMC8GA1UEBRMoNzk5OEY1RTcwODE2QjY4RDdERjVFQ0Y2NzcyRTdCNUNB
MjNBREY4MzAeFw0yNDA1MTkwNzQ0MDdaFw0yNDA1MjYwNzQ0MDdaMBgxFjAUBgNV
BAMTDTY2NDlhZGM3LTc1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSATzgeL2L2X1R6PqurbNnWf40FYQy3HmPPjwoCXrHTqUbbk8ijZ4Oivu42H+A
d516714rGlRsIRwvzaLOnUVSFPgBl0I1FejfRid6EV+AO2sm8UJC3CZXiFi4ghjj
1XUoIyL+iHZq8CwiQcIwhfw/jy+GYEMgranoeB+akTUepbJG1cvCVEucd3c06/m5
hknpG4HPVDmHQopItE87iYBdgbXDA53MLXAPiwgHX/HDv7JZ1KLgq/8Bizjrd+Zs
lzz2zjzuOFuXDpuWognvxFFg/GBGcK/o+wRai4q2yJ5HUVN6s4orHD0vdrPSFIJe
YxLBKaU8mQBn1gebHtQVxPHxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIvsHD3jh
T8piOwOlEE3aELllQP8wHwYDVR0jBBgwFoAUeZj15wgWto199ez2dy57XKI634Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QzEwL0Q5QTlGOUIwODkw
RDExRUVCMDZBMEM1NkM0RjlBRTAyL2VaajE1d2dXdG8xOTllejJkeTU3WEtJNjM0
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVpqMTV3Z1d0bzE5OWV6MmR5NTdYS0k2MzRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
QzEwL0Q5QTlGOUIwODkwRDExRUVCMDZBMEM1NkM0RjlBRTAyL2VaajE1d2dXdG8x
OTllejJkeTU3WEtJNjM0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACjPLdKrFB6AWt5QIXf/DuG3AuVBR0/7FNWecle/eLlRyCLhYOmnXaMl
CzY2Yf6DKWTwf+QlhwYjQ+qkA2xtgd2HOldsQtEXOwKPeMd0dkSunwjBi4/FGa/3
7ZrZ90AVqrpkcoC0VXahBrLDAPKIO08/4kP38klPPCF3jy9vjxsSa29aZ2DXSTD5
+FA/c4KHITt8SkjjF1y5LR+IcbnxwBvuPfIdT65EMPvLkVadbV/0agMup02T8IbU
Pw5I4dvPETomf2O8HGdjJ5hRy6Y/AwAia5HNuBLm7znmhEo6IDAAx/swqNf2Iz0l
MEQUKtT9VguTOo491ftTAIYN9NzjHlY=
-----END CERTIFICATE-----
Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org