Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
File:                     1NfdJccT56lVTPNS2TK_gNplLeQ.mft (raw, json)
Hash identifier:          a7F8GZ9HprikASq968fU/tozgGYzwXhXRHgGYPLsMlM=
Subject key identifier:   53:88:B7:30:30:7A:D7:A8:C2:C2:98:9E:78:A2:3F:05:83:7E:82:66
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       07D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
Manifest number:          07BF
Signing time:             Fri 26 Apr 2024 22:04:26 +0000
Manifest this update:     Fri 26 Apr 2024 22:04:25 +0000
Manifest next update:     Fri 03 May 2024 22:04:25 +0000
Files and hashes:         1: 1NfdJccT56lVTPNS2TK_gNplLeQ.crl (hash: doYlV2zlNZAuHuPDYCodTd4v8e1eIqc6MpqWoewSiSE=)
                          2: 53224C1ADDA311ECA6964F20C4F9AE02.roa (hash: oyfqbNAm/grRauQuYwryKL5TfKT95AwlRc5waGwKCq4=)
                          3: F7968CA6C01411EA912AC365C4F9AE02.roa (hash: Z4uebeNAd6A8H5elWWiPDFv8e17vfsalUb9RId47Vxc=)
                          4: 5280D466DDA311ECA6964F20C4F9AE02.roa (hash: jq5ePz7ty7L0uy4urN1EtjyHtiSLjkb5CTxQNGbreHA=)
                          5: F814A546C01411EA912AC365C4F9AE02.roa (hash: CSrekpMbUtQxRsDfHQqz7muBflhWUtCH6yCR/F332RE=)
                          6: C21DA992E83B11EBB3231D5EC4F9AE02.roa (hash: py2hU/JLNVXJOLcikkxI++3yZ7lCPoif0ARBrnq9Gqc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 22:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Apr 26 22:04:25 2024 GMT
            Not After : May  3 22:04:25 2024 GMT
        Subject: CN=662c24e9-e425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:58:6c:68:21:19:2f:0d:5d:ce:9d:e6:cb:
                    d6:72:bd:3f:fe:3b:21:3e:95:c6:1d:e3:d4:19:d2:
                    85:a9:36:1a:26:66:c2:98:60:f2:85:bf:6e:13:cf:
                    50:43:5b:b7:98:7a:8d:8f:ae:b8:d0:82:59:d1:f6:
                    e4:78:26:e2:0d:2e:56:8a:80:d7:ca:dd:43:97:4e:
                    0b:d1:39:34:73:89:3b:17:65:b8:03:38:e4:63:5d:
                    f4:d8:f1:75:21:74:a7:41:9d:54:55:70:67:26:45:
                    56:77:ea:59:c4:b3:89:53:e9:5e:9c:e4:00:1c:d9:
                    4c:79:be:6f:94:62:30:b5:55:eb:ac:3d:ba:58:88:
                    38:67:d1:e1:5d:d9:63:25:d0:02:00:3f:9b:52:56:
                    66:72:57:d5:73:2c:2f:fa:ed:90:40:85:ed:6c:97:
                    f1:17:3f:b2:91:68:64:20:05:f7:7e:7f:12:3b:62:
                    db:db:ea:2f:03:b7:1d:c6:0c:b8:01:e5:ea:67:72:
                    b5:ac:1f:1b:af:59:fe:d3:53:65:d3:45:ef:22:bc:
                    f2:35:2f:cd:61:d4:1f:56:2c:0b:28:2a:b6:b7:10:
                    0a:f8:e6:15:87:df:d7:65:1c:4c:3c:9a:01:72:e0:
                    df:dc:cf:46:73:2a:7c:3c:53:0a:81:9c:09:51:5f:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:B7:30:30:7A:D7:A8:C2:C2:98:9E:78:A2:3F:05:83:7E:82:66
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c0:31:0d:14:50:81:b1:ec:ff:03:35:bf:7b:c2:22:4b:c1:
         29:95:77:67:60:44:bf:f7:07:c8:55:f1:d6:cb:f1:46:d1:0e:
         1e:4c:d3:a4:74:9c:63:8e:20:e1:6a:b3:82:44:7b:c5:8a:1e:
         94:05:01:0c:5e:b4:98:89:32:26:74:40:a7:e4:7c:64:40:97:
         17:42:5e:7b:bc:54:8d:68:82:dd:ed:e7:63:f8:ab:15:7f:f8:
         bb:43:21:99:7b:fe:11:5c:12:78:fa:26:9d:a8:40:5f:c9:c6:
         09:e9:83:c6:c5:98:dd:36:7a:c7:98:d9:5a:91:6d:7e:cd:4c:
         93:f2:d5:fe:1c:4c:89:24:75:c3:31:3e:a1:9b:0c:69:63:ae:
         97:cb:e6:cd:91:c2:70:a4:cf:e1:a2:ec:f9:f2:a9:42:9a:45:
         3e:f0:f9:90:3e:35:96:70:89:8e:1f:0c:9e:aa:f2:27:6b:70:
         85:b6:07:60:46:6b:c5:1c:40:8f:b6:d7:6a:18:08:ed:7e:67:
         5f:6f:f3:39:61:be:fc:4f:c0:68:ff:4e:3a:5e:bb:58:f6:b4:
         ee:fd:c5:cb:6d:ac:b4:42:49:be:2d:bc:16:e3:ec:cc:7d:56:
         95:b0:f3:2f:05:b3:b4:b2:90:74:41:97:fc:cb:f3:70:d1:aa:
         7b:36:41:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw
REE2NTJERTQwHhcNMjQwNDI2MjIwNDI1WhcNMjQwNTAzMjIwNDI1WjAYMRYwFAYD
VQQDEw02NjJjMjRlOS1lNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqlYbGghGS8NXc6d5svWcr0//jshPpXGHePUGdKFqTYaJmbCmGDyhb9uE89Q
Q1u3mHqNj6640IJZ0fbkeCbiDS5WioDXyt1Dl04L0Tk0c4k7F2W4AzjkY1302PF1
IXSnQZ1UVXBnJkVWd+pZxLOJU+lenOQAHNlMeb5vlGIwtVXrrD26WIg4Z9HhXdlj
JdACAD+bUlZmclfVcywv+u2QQIXtbJfxFz+ykWhkIAX3fn8SO2Lb2+ovA7cdxgy4
AeXqZ3K1rB8br1n+01Nl00XvIrzyNS/NYdQfViwLKCq2txAK+OYVh9/XZRxMPJoB
cuDf3M9Gcyp8PFMKgZwJUV9ivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOItzAw
eteowsKYnniiPwWDfoJmMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw
MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTY0Ri8zQzlFMkI1Q0MwMTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2
bFZUUE5TMlRLX2dOcGxMZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDPwDENFFCBsez/AzW/e8IiS8EplXdnYES/9wfIVfHWy/FG0Q4eTNOk
dJxjjiDharOCRHvFih6UBQEMXrSYiTImdECn5HxkQJcXQl57vFSNaILd7edj+KsV
f/i7QyGZe/4RXBJ4+iadqEBfycYJ6YPGxZjdNnrHmNlakW1+zUyT8tX+HEyJJHXD
MT6hmwxpY66Xy+bNkcJwpM/houz58qlCmkU+8PmQPjWWcImOHwyeqvIna3CFtgdg
RmvFHECPttdqGAjtfmdfb/M5Yb78T8Bo/046XrtY9rTu/cXLbay0Qkm+LbwW4+zM
fVaVsPMvBbO0spB0QZf8y/Nw0ap7NkF9
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:50 2024 by rpki-client on console-ams.rpki-client.org