Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          7wkBACW6g6Dwn3hKE/N9uag/jUFwNL6rZ09ZxTiNUXM=
Subject key identifier:   0A:53:44:F0:E4:78:7E:78:B2:F4:02:D7:32:6B:AD:56:0F:E3:A2:5F
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          0757
Signing time:             Sat 18 May 2024 22:17:48 +0000
Manifest this update:     Sat 18 May 2024 22:17:48 +0000
Manifest next update:     Sat 25 May 2024 22:17:48 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: NYrnX8pCoRulHLeNph3C4Pmbqfaxoun1sSPiwBC2AVc=)
                          2: 6169DD26D4D411EAA1C20545C4F9AE02.roa (hash: P7mL5PcwQihlj8b1Nd+mlBFSQPfOk0ktQGEfIfQoY7o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: May 18 22:17:48 2024 GMT
            Not After : May 25 22:17:48 2024 GMT
        Subject: CN=6649290c-f7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1d:25:0b:f0:c9:76:c0:f0:19:a0:71:7c:60:
                    06:9a:9f:29:61:5c:ab:f6:0f:9d:52:c9:48:31:0e:
                    ef:67:e3:06:fb:ec:33:b2:14:ed:48:c4:d0:a0:2a:
                    ac:90:dc:b4:04:37:6b:e3:54:39:23:b1:b9:96:f9:
                    fb:71:75:3a:f0:ea:e7:4a:b5:ac:7f:96:a1:be:1a:
                    23:32:3d:b4:3e:72:52:c2:85:8b:45:ff:21:ce:dd:
                    fc:97:47:49:40:08:3d:f6:e6:dc:be:bd:bc:c8:54:
                    0e:05:f7:f6:d9:bf:73:5b:fb:1a:1c:2c:56:c3:8c:
                    c8:63:94:3a:fb:79:7d:af:ad:d4:dd:c5:8f:00:06:
                    8b:3f:87:d6:de:a0:ab:e2:e3:e1:5d:7c:04:3c:67:
                    09:6b:1f:33:43:0b:33:3e:9b:5d:ba:b3:12:15:a8:
                    0a:d4:65:4a:64:db:eb:f4:09:ab:10:5f:15:5c:73:
                    36:95:3f:4c:34:f5:90:0a:98:d6:5b:84:10:51:db:
                    ef:87:c3:9c:28:bc:60:d2:77:e8:3c:66:0f:50:f6:
                    ba:e4:56:c1:f9:a4:3c:5b:2d:99:8f:f4:11:a2:b8:
                    e0:35:03:72:0b:90:ac:6d:2c:35:4e:90:e2:b5:d0:
                    64:6e:b0:f2:4b:a0:b6:62:cd:60:a0:4b:0a:c8:a5:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:53:44:F0:E4:78:7E:78:B2:F4:02:D7:32:6B:AD:56:0F:E3:A2:5F
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5c:4c:ad:2c:a5:0e:a3:d8:21:f1:f6:d6:a9:eb:94:10:53:
         9d:96:88:7e:14:72:2e:ff:da:97:79:39:a6:13:56:af:97:b9:
         8b:72:33:e1:8f:51:a2:7a:df:d2:fd:ee:13:69:c7:13:c3:59:
         a3:22:ae:fc:77:62:0e:2a:0b:ed:83:62:41:58:cf:dc:87:09:
         97:f1:be:6a:2e:92:ed:79:f7:64:3b:b7:e2:95:d6:0a:dc:d2:
         01:29:0b:f3:cd:b3:f3:7c:ef:01:49:d5:24:80:4d:07:ba:44:
         43:44:7f:fa:10:93:48:25:6d:8b:9f:07:68:ee:71:29:37:77:
         f3:d8:6f:6d:d1:7d:ec:cb:81:62:f4:30:41:95:d5:7d:25:30:
         c4:40:b3:ff:3d:b6:a5:96:df:c6:62:7e:a6:83:27:93:7d:af:
         1e:f8:57:fb:20:02:7b:39:c9:64:4c:85:cd:45:d4:a5:1d:14:
         cd:2c:ea:3d:76:2a:da:45:47:15:2d:90:fa:d8:a7:73:49:0b:
         62:42:f3:bc:c9:d8:94:c2:dc:36:0c:f7:23:c8:fd:c9:51:4b:
         62:4e:16:97:0f:04:37:19:05:82:df:e1:09:07:19:88:44:cf:
         67:06:98:c2:94:57:f9:fe:d2:a5:d6:80:06:47:83:4c:26:70:
         69:66:23:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2
NjI3NjFFNEIwHhcNMjQwNTE4MjIxNzQ4WhcNMjQwNTI1MjIxNzQ4WjAYMRYwFAYD
VQQDEw02NjQ5MjkwYy1mN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7h0lC/DJdsDwGaBxfGAGmp8pYVyr9g+dUslIMQ7vZ+MG++wzshTtSMTQoCqs
kNy0BDdr41Q5I7G5lvn7cXU68OrnSrWsf5ahvhojMj20PnJSwoWLRf8hzt38l0dJ
QAg99ubcvr28yFQOBff22b9zW/saHCxWw4zIY5Q6+3l9r63U3cWPAAaLP4fW3qCr
4uPhXXwEPGcJax8zQwszPptdurMSFagK1GVKZNvr9AmrEF8VXHM2lT9MNPWQCpjW
W4QQUdvvh8OcKLxg0nfoPGYPUPa65FbB+aQ8Wy2Zj/QRorjgNQNyC5CsbSw1TpDi
tdBkbrDyS6C2Ys1goEsKyKVmYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApTRPDk
eH54svQC1zJrrVYP46JfMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0
RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy
YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwXEytLKUOo9gh8fbWqeuUEFOdloh+FHIu/9qXeTmmE1avl7mLcjPh
j1Giet/S/e4TaccTw1mjIq78d2IOKgvtg2JBWM/chwmX8b5qLpLtefdkO7fildYK
3NIBKQvzzbPzfO8BSdUkgE0HukRDRH/6EJNIJW2Lnwdo7nEpN3fz2G9t0X3sy4Fi
9DBBldV9JTDEQLP/Pballt/GYn6mgyeTfa8e+Ff7IAJ7OclkTIXNRdSlHRTNLOo9
diraRUcVLZD62KdzSQtiQvO8ydiUwtw2DPcjyP3JUUtiThaXDwQ3GQWC3+EJBxmI
RM9nBpjClFf5/tKl1oAGR4NMJnBpZiMz
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org