Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
File:                     J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json)
Hash identifier:          PI8rjbTxMkhpWA0fo7cO08viuaKN9N1JSp87c3Z97Ks=
Subject key identifier:   E2:D8:D9:65:70:14:80:32:E7:2B:1B:11:D4:E4:F4:25:22:53:11:9F
Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
Certificate issuer:       /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Certificate serial:       04EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
Manifest number:          04DC
Signing time:             Fri 31 May 2024 01:55:13 +0000
Manifest this update:     Fri 31 May 2024 01:55:13 +0000
Manifest next update:     Fri 07 Jun 2024 01:55:13 +0000
Files and hashes:         1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: p8+tCXCCURXW8NqXxSLnI5TzGcl2ukMGZuI/Y624SII=)
                          2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: uNq0QpwIqft6l+P+6Kr1hZ6PT/drQw5jIwJZrCfNjqY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
                          rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
        Validity
            Not Before: May 31 01:55:13 2024 GMT
            Not After : Jun  7 01:55:13 2024 GMT
        Subject: CN=66592e01-4457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6e:d0:56:ec:81:81:73:b6:af:1d:37:16:c9:
                    7b:a9:62:e4:fb:47:59:32:cb:bb:fb:ae:79:e4:d6:
                    93:aa:07:2c:cb:88:ca:1c:2d:9b:52:37:af:ea:ff:
                    be:ee:be:9c:7b:e5:80:30:f3:03:93:1d:da:81:e6:
                    66:f3:70:27:43:cd:b0:b3:c0:1e:f3:34:54:43:bc:
                    7c:10:db:b0:92:46:b9:9c:7d:2f:8c:ed:4b:fe:55:
                    8f:fa:cb:64:f4:fe:58:96:4f:93:4b:58:26:40:a1:
                    69:82:ed:76:dd:a7:29:35:3d:cb:a8:4a:1c:2e:06:
                    60:4f:09:02:a7:01:fd:2f:f6:12:b7:72:02:be:be:
                    1d:82:e7:0b:77:1a:49:8d:c8:91:84:31:e6:ff:9a:
                    dd:2d:70:3c:97:26:67:9c:2a:5c:78:55:df:7d:54:
                    bf:1e:72:3a:48:10:5c:57:8e:af:9b:f6:83:31:ac:
                    eb:c1:59:6b:d5:cf:c7:be:0d:ed:50:5d:8f:95:d7:
                    42:85:b9:dd:73:0d:e0:2d:dc:e9:39:55:23:ff:b2:
                    7b:2f:ff:75:eb:c4:6e:5b:ba:4d:d9:fd:35:a4:fb:
                    35:e8:fb:63:3c:47:81:e0:2a:a7:40:9f:44:3b:5b:
                    08:75:5d:2d:74:5e:70:39:74:eb:a9:e5:03:93:6c:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D8:D9:65:70:14:80:32:E7:2B:1B:11:D4:E4:F4:25:22:53:11:9F
            X509v3 Authority Key Identifier:
                keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:9d:fa:ee:c5:4e:15:fe:d6:48:27:99:ad:d8:ef:db:8e:
         29:4e:87:d9:a5:c0:4b:00:33:9d:a4:41:30:37:ea:b3:09:75:
         80:e7:9d:05:35:86:91:83:8d:4f:63:55:72:04:68:7a:21:a1:
         4b:6c:c9:04:da:3f:4b:3a:8e:50:ce:f6:d8:58:74:37:f6:1d:
         1c:34:08:18:c9:a5:be:0a:c9:b3:91:bb:d4:7e:b2:0c:aa:f4:
         fc:ac:f9:5a:78:bd:cd:98:eb:59:4b:29:85:6a:bc:d9:29:e4:
         73:97:08:d8:57:be:e0:f5:ea:de:83:a6:8c:4d:61:e4:12:80:
         ed:34:b9:b8:c0:ad:88:b3:b8:82:a7:1a:85:7d:c7:a0:7f:e9:
         e7:b6:9e:6b:79:b9:5d:6f:5c:92:65:36:c3:83:5c:fc:ab:25:
         d2:f6:21:cf:ab:f6:40:89:07:7f:f3:db:b3:3f:f8:2f:9d:fb:
         38:12:f6:50:8e:6f:c7:2e:3e:09:17:70:16:96:94:7c:7d:2a:
         ac:5f:aa:ed:15:9f:9e:42:86:3a:df:41:12:78:55:ad:c2:32:
         6c:80:37:5f:08:ec:8e:61:80:e1:4e:08:13:35:2b:a9:34:d1:
         ee:08:7b:39:79:54:c9:ad:37:3e:77:29:73:9b:18:32:e6:95:
         58:ba:b9:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4NEYxMTAvBgNVBAUTKDI3QjdBQThFNTExRTcwRDhBMzBCQjM2RDAyQ0FGMDg1
NzkwQzk5QzMwHhcNMjQwNTMxMDE1NTEzWhcNMjQwNjA3MDE1NTEzWjAYMRYwFAYD
VQQDEw02NjU5MmUwMS00NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6m7QVuyBgXO2rx03Fsl7qWLk+0dZMsu7+6555NaTqgcsy4jKHC2bUjev6v++
7r6ce+WAMPMDkx3ageZm83AnQ82ws8Ae8zRUQ7x8ENuwkka5nH0vjO1L/lWP+stk
9P5Ylk+TS1gmQKFpgu123acpNT3LqEocLgZgTwkCpwH9L/YSt3ICvr4dgucLdxpJ
jciRhDHm/5rdLXA8lyZnnCpceFXffVS/HnI6SBBcV46vm/aDMazrwVlr1c/Hvg3t
UF2PlddChbndcw3gLdzpOVUj/7J7L/9168RuW7pN2f01pPs16PtjPEeB4CqnQJ9E
O1sIdV0tdF5wOXTrqeUDk2xrgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLY2WVw
FIAy5ysbEdTk9CUiUxGfMB8GA1UdIwQYMBaAFCe3qo5RHnDYowuzbQLK8IV5DJnD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg0Ri85MzA4NUM4MEQ3
QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNOaWpDN050QXNyd2hYa01t
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0o3ZXFqbEVlY05pakM3TnRBc3J3aFhrTW1jTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjg0Ri85MzA4NUM4MEQ3QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNO
aWpDN050QXNyd2hYa01tY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANrJ367sVOFf7WSCeZrdjv244pTofZpcBLADOdpEEwN+qzCXWA550F
NYaRg41PY1VyBGh6IaFLbMkE2j9LOo5QzvbYWHQ39h0cNAgYyaW+CsmzkbvUfrIM
qvT8rPlaeL3NmOtZSymFarzZKeRzlwjYV77g9ereg6aMTWHkEoDtNLm4wK2Is7iC
pxqFfcegf+nntp5rebldb1ySZTbDg1z8qyXS9iHPq/ZAiQd/89uzP/gvnfs4EvZQ
jm/HLj4JF3AWlpR8fSqsX6rtFZ+eQoY630ESeFWtwjJsgDdfCOyOYYDhTggTNSup
NNHuCHs5eVTJrTc+dylzmxgy5pVYurlR
-----END CERTIFICATE-----
Generated at Fri May 31 02:50:44 2024 by rpki-client on console-fra.rpki-client.org