Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          9aoPNn5z5/AetIVNMjrwrfP/X2sioJwBjfBlANcPbLo=
Subject key identifier:   49:DD:03:85:C1:F8:B3:84:B0:70:77:93:FD:E0:04:2C:C0:17:BD:A1
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          01D1
Signing time:             Sun 19 May 2024 04:23:37 +0000
Manifest this update:     Sun 19 May 2024 04:23:36 +0000
Manifest next update:     Sun 26 May 2024 04:23:36 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: 1Jo+ibzgLVSxYd4j12vQtptsSiNujhbJ4dczC3dJrXM=)
                          2: 4CBD82765EEA11EE9854B56AC4F9AE02.roa (hash: T/gbAwFJ4igiaZ4NqRErGSjS11rWZuqeJOhnN+QapwM=)
                          3: 85DF02C00D5411ED8208604DC4F9AE02.roa (hash: 6rR/odhUUC5TRyN/kt+0VU054d3mvvlQx/UfLqHwnWU=)
                          4: 8531045E0D5411ED8208604DC4F9AE02.roa (hash: 8TG2wuR4MI26GcPAPwfGrAtGwHRmhMD3YNEU3wAuQMU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: May 19 04:23:36 2024 GMT
            Not After : May 26 04:23:36 2024 GMT
        Subject: CN=66497ec9-9539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:28:a3:dd:52:27:fd:8c:11:7f:ad:ca:8a:
                    c3:39:e0:3e:9f:94:9b:a3:6d:ad:95:a9:ec:b3:3a:
                    9e:06:a5:dc:b7:b0:4b:d1:21:52:29:f5:b5:ce:26:
                    1c:68:2b:5e:d4:08:d9:4f:ff:0a:87:bc:2e:2a:a1:
                    1a:84:13:2d:b5:9f:d3:01:e4:f7:48:ec:3f:a7:ab:
                    ab:50:8f:3e:3f:ff:cf:41:c4:f1:09:68:da:b3:a9:
                    3d:89:c5:98:5e:99:95:be:18:d3:0a:4c:1b:28:cc:
                    95:aa:d3:6a:8e:34:56:11:bf:b8:85:0a:b5:f7:00:
                    7c:08:aa:da:80:4b:66:02:f4:66:c5:93:5f:a5:4d:
                    22:7e:86:86:55:7d:5c:e4:56:25:bf:69:90:82:3b:
                    18:52:fe:e9:0d:f7:2e:fe:1b:95:21:7a:1d:f3:25:
                    bf:11:62:0d:13:03:25:98:4c:65:16:cf:78:ac:6e:
                    fc:b5:48:a7:87:62:4f:e2:9d:cd:5d:c9:66:fe:31:
                    76:0a:fd:be:c6:d3:18:57:13:f8:fe:39:05:40:a2:
                    bf:a1:77:22:4b:cd:21:79:2d:ce:c0:5e:77:d6:e7:
                    f3:3b:7f:d0:c9:ee:7e:40:a8:da:1b:d0:75:fa:d4:
                    e0:d8:21:db:f5:1c:02:81:bc:15:9d:bf:0e:74:db:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:03:85:C1:F8:B3:84:B0:70:77:93:FD:E0:04:2C:C0:17:BD:A1
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:db:03:d9:4c:c3:7b:73:1e:31:9a:af:22:b0:52:39:b4:
         80:50:36:58:a3:89:a5:eb:b8:25:84:8d:82:90:37:c0:8a:20:
         60:cf:93:ca:2a:c1:f4:ce:e5:e5:db:46:66:95:b0:1d:53:7e:
         25:29:92:a4:9c:28:16:5f:b9:31:5c:6a:d9:2b:2d:0b:f1:02:
         58:22:14:a7:b1:3e:39:f6:80:14:83:f6:ae:bb:01:9b:52:47:
         32:c6:88:67:3c:63:72:ec:21:6c:ed:dc:4f:e5:9e:b6:70:5a:
         a9:b4:6d:14:50:f7:c0:30:93:aa:e5:d7:44:b5:a5:b2:99:b6:
         de:78:24:aa:41:40:41:c1:ed:63:98:75:c3:59:46:f4:f9:00:
         2a:2e:71:87:4f:83:fb:1f:55:e8:51:2b:e5:c9:40:ef:78:09:
         e6:4e:ce:81:67:0f:4b:80:bc:74:92:a7:fc:5c:a9:ba:36:b0:
         36:3f:81:0d:ff:ac:82:41:f8:25:b3:c7:be:81:af:26:9d:b7:
         9c:6a:51:a0:bc:0d:28:e7:6c:d7:e8:3d:f1:82:ea:06:cf:83:
         d7:95:cb:75:fe:91:87:f9:c7:88:0c:96:a8:07:00:ee:36:77:
         eb:9a:75:b6:d9:6c:57:63:f6:0b:61:38:ce:aa:03:4d:f9:83:
         29:e6:c0:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5
RTgwRUREMzUwHhcNMjQwNTE5MDQyMzM2WhcNMjQwNTI2MDQyMzM2WjAYMRYwFAYD
VQQDEw02NjQ5N2VjOS05NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/ooo91SJ/2MEX+tyorDOeA+n5Sbo22tlansszqeBqXct7BL0SFSKfW1ziYc
aCte1AjZT/8Kh7wuKqEahBMttZ/TAeT3SOw/p6urUI8+P//PQcTxCWjas6k9icWY
XpmVvhjTCkwbKMyVqtNqjjRWEb+4hQq19wB8CKragEtmAvRmxZNfpU0ifoaGVX1c
5FYlv2mQgjsYUv7pDfcu/huVIXod8yW/EWINEwMlmExlFs94rG78tUinh2JP4p3N
Xclm/jF2Cv2+xtMYVxP4/jkFQKK/oXciS80heS3OwF531ufzO3/Qye5+QKjaG9B1
+tTg2CHb9RwCgbwVnb8OdNvzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEndA4XB
+LOEsHB3k/3gBCzAF72hMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1
OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253
VlhCeXhITXl1QnFlZ08zVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcWdsD2UzDe3MeMZqvIrBSObSAUDZYo4ml67glhI2CkDfAiiBgz5PK
KsH0zuXl20ZmlbAdU34lKZKknCgWX7kxXGrZKy0L8QJYIhSnsT459oAUg/auuwGb
UkcyxohnPGNy7CFs7dxP5Z62cFqptG0UUPfAMJOq5ddEtaWymbbeeCSqQUBBwe1j
mHXDWUb0+QAqLnGHT4P7H1XoUSvlyUDveAnmTs6BZw9LgLx0kqf8XKm6NrA2P4EN
/6yCQfgls8e+ga8mnbecalGgvA0o52zX6D3xguoGz4PXlct1/pGH+ceIDJaoBwDu
NnfrmnW22WxXY/YLYTjOqgNN+YMp5sAu
-----END CERTIFICATE-----
Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org