Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          d1kLmfpj2fWJry5EbUNicnbf5TQcqgiC625dkJHf/r8=
Subject key identifier:   55:B7:CD:72:DC:7A:3F:75:64:89:03:E4:F2:1C:59:0A:EC:3E:7A:B1
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          0271
Signing time:             Fri 31 May 2024 05:00:38 +0000
Manifest this update:     Fri 31 May 2024 05:00:37 +0000
Manifest next update:     Fri 07 Jun 2024 05:00:37 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: 2aT016Q1WfefqioIAWl2YQG1TnnlB3gLb1DTxA3kvok=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: KKyWmXe2YCJmonEpi+LRlbRY47Oe+frZ0gDIA6/MoNY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: May 31 05:00:37 2024 GMT
            Not After : Jun  7 05:00:37 2024 GMT
        Subject: CN=66595975-3741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:15:46:30:d2:89:b5:7b:3d:b2:34:bf:20:
                    3f:c9:ce:b3:24:8a:33:ea:d1:41:84:03:fe:8c:c4:
                    c9:db:ad:6d:ab:16:a1:59:1c:d0:c8:21:17:4b:f5:
                    22:a0:3f:e9:39:e6:9c:e8:cf:d6:8c:65:ce:c0:a9:
                    79:32:a1:c4:76:d0:1d:40:0f:8c:5c:ff:06:b3:2f:
                    c5:15:46:76:c2:c4:34:62:9a:be:3d:6b:69:57:64:
                    63:73:6c:da:e2:b1:9a:82:7a:06:57:d2:43:7d:2e:
                    07:b5:1c:ff:df:68:b1:dd:9b:d3:65:2b:70:f9:e6:
                    cb:9b:3b:ba:12:43:8b:bd:1c:8d:99:98:47:1c:89:
                    b8:f1:f6:4d:02:98:b6:39:72:40:42:8b:b7:a4:1a:
                    8e:40:e4:68:3d:2b:47:43:fe:99:16:70:b9:5e:73:
                    4f:ec:92:97:b5:fe:4f:0d:42:df:9f:61:b7:65:79:
                    c8:f2:4f:de:73:48:78:2d:7a:56:5e:e7:dd:59:b1:
                    41:b5:55:63:da:92:2b:7a:47:57:62:a3:8e:43:4a:
                    6f:3a:bc:9e:d7:54:65:60:82:d1:e5:ac:fa:b8:cc:
                    17:48:59:b3:0c:5b:c0:00:50:4c:cb:86:c1:04:2f:
                    03:ab:3f:38:27:d6:42:b4:0a:3d:22:01:63:16:bc:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:CD:72:DC:7A:3F:75:64:89:03:E4:F2:1C:59:0A:EC:3E:7A:B1
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:c4:8d:f2:f3:c8:e4:c7:98:25:3b:4b:e9:5b:ad:59:8b:
         45:f4:23:5b:f0:e1:25:12:7d:fb:d2:0b:5e:93:a7:c3:5b:4c:
         e2:b4:15:a8:9f:ee:fc:b6:c1:64:38:71:6a:bd:65:fe:d2:f4:
         af:5f:6e:ea:0d:93:44:11:58:3c:9c:79:1b:f5:6c:5a:c2:84:
         fc:40:f4:56:0d:db:27:f5:76:07:49:b7:eb:be:85:75:8c:ad:
         59:81:a5:06:3c:34:50:df:44:5d:6c:b1:ae:5b:8d:a5:4d:99:
         15:35:81:14:2e:7c:8e:c8:c0:d9:dd:59:ac:12:00:3c:7f:59:
         60:a9:c4:d6:49:3e:01:c2:6d:3a:03:e8:d8:54:bc:a5:80:0e:
         0a:d9:27:5a:0f:90:ff:98:26:be:63:d3:86:c4:2f:71:c0:01:
         97:83:5b:70:ce:53:6e:34:39:e9:f3:66:67:a1:6f:1f:3e:81:
         1e:81:2d:e7:a2:0e:4d:69:55:c2:f9:42:73:bb:ad:38:0c:42:
         3d:45:ea:2b:e4:10:28:f9:0d:60:a3:03:54:f2:35:31:8e:f8:
         88:65:f1:43:35:a7:b7:92:9e:44:03:ae:e0:84:59:61:15:2d:
         6f:8b:69:ad:dc:06:15:41:eb:db:8c:0f:62:d8:23:14:1c:09:
         15:e6:21:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzExMTAvBgNVBAUTKDQ2MzlEMjkwOTg2RjRGMDA1NEZEQzA1OTAxNDQ0MTYy
MUQzQUJCRkYwHhcNMjQwNTMxMDUwMDM3WhcNMjQwNjA3MDUwMDM3WjAYMRYwFAYD
VQQDEw02NjU5NTk3NS0zNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArH8VRjDSibV7PbI0vyA/yc6zJIoz6tFBhAP+jMTJ261tqxahWRzQyCEXS/Ui
oD/pOeac6M/WjGXOwKl5MqHEdtAdQA+MXP8Gsy/FFUZ2wsQ0Ypq+PWtpV2Rjc2za
4rGagnoGV9JDfS4HtRz/32ix3ZvTZStw+ebLmzu6EkOLvRyNmZhHHIm48fZNApi2
OXJAQou3pBqOQORoPStHQ/6ZFnC5XnNP7JKXtf5PDULfn2G3ZXnI8k/ec0h4LXpW
XufdWbFBtVVj2pIrekdXYqOOQ0pvOrye11RlYILR5az6uMwXSFmzDFvAAFBMy4bB
BC8Dqz84J9ZCtAo9IgFjFrxq1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW3zXLc
ej91ZIkD5PIcWQrsPnqxMB8GA1UdIwQYMBaAFEY50pCYb08AVP3AWQFEQWIdOrv/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3MS9GNTQwN0QxQ0NB
QjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3QlVfY0JaQVVSQlloMDZ1
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JqblNrSmh2VHdCVV9jQlpBVVJCWWgwNnVfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkI3MS9GNTQwN0QxQ0NBQjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3
QlVfY0JaQVVSQlloMDZ1XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8MsSN8vPI5MeYJTtL6VutWYtF9CNb8OElEn370gtek6fDW0zitBWo
n+78tsFkOHFqvWX+0vSvX27qDZNEEVg8nHkb9WxawoT8QPRWDdsn9XYHSbfrvoV1
jK1ZgaUGPDRQ30RdbLGuW42lTZkVNYEULnyOyMDZ3VmsEgA8f1lgqcTWST4Bwm06
A+jYVLylgA4K2SdaD5D/mCa+Y9OGxC9xwAGXg1twzlNuNDnp82ZnoW8fPoEegS3n
og5NaVXC+UJzu604DEI9Reor5BAo+Q1gowNU8jUxjviIZfFDNae3kp5EA67ghFlh
FS1vi2mt3AYVQevbjA9i2CMUHAkV5iE2
-----END CERTIFICATE-----
Generated at Fri May 31 06:49:10 2024 by rpki-client on console-ams.rpki-client.org