Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File:                     XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier:          jkuBhrdHVcW4+7gx+mlRUz6nw43dH5PzpmiU/ASwfcI=
Subject key identifier:   C5:A6:24:08:43:45:D3:21:FB:B6:DA:16:01:3D:E8:05:46:5A:23:E1
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number:          012A
Signing time:             Sun 19 May 2024 05:24:17 +0000
Manifest this update:     Sun 19 May 2024 05:24:17 +0000
Manifest next update:     Sun 26 May 2024 05:24:17 +0000
Files and hashes:         1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: pxMTA92QoeLywl0PLOlmli+Esz3bStwZJdZsvMY8I1w=)
                          2: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: ETvMuzBvPoU2G66qyTLqNfjzU5ef1XX1OEC6b7ttgWo=)
                          3: 29FFF260669111EE8D5C864EC4F9AE02.roa (hash: UstHa0h/lS0Ejz3NlYW5hRjgXwV2iLIp6rZSBMJAIUw=)
                          4: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: 4lGrC6j9Ar0qV3nJ/nWQ09G7iVDLa+WgGVYfUvWHWIU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: May 19 05:24:17 2024 GMT
            Not After : May 26 05:24:17 2024 GMT
        Subject: CN=66498d01-674c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:fc:93:e1:6d:91:ff:9e:50:24:2f:56:ff:
                    8f:7c:d2:3c:58:6d:5f:74:59:35:b4:3f:8b:b1:72:
                    23:9b:1a:47:68:fc:ba:0b:40:80:b1:47:67:62:66:
                    c1:30:22:28:c1:00:5a:63:e2:59:a9:00:d5:4d:a6:
                    4e:36:53:b3:b4:85:57:24:fe:27:b4:b1:cd:d4:64:
                    9d:33:bc:9d:49:cd:11:5c:0e:7d:3a:4f:f8:f9:71:
                    59:a8:19:3b:12:f4:05:22:d4:df:9d:68:df:4a:26:
                    e9:2d:1f:83:60:40:27:cc:07:76:8d:00:e8:4b:28:
                    b6:43:96:e7:e7:31:e4:8c:60:26:3f:ec:ae:b5:63:
                    0c:48:55:e1:88:c5:61:61:b7:07:93:2d:f0:3b:16:
                    fb:cf:13:3e:64:83:32:46:be:c3:bc:10:1b:d8:fd:
                    e2:ac:b8:49:42:85:9f:e4:8e:9d:b6:21:67:d4:dc:
                    bd:3c:aa:74:c4:5c:6f:47:ca:93:d6:b9:a5:d5:0f:
                    7c:51:b5:e4:a0:c2:84:13:d3:ea:b2:6b:db:de:76:
                    c3:63:4d:ab:93:33:9f:a6:3e:10:ad:8f:fd:fe:a5:
                    d2:56:2f:74:fc:8e:34:96:eb:75:2c:bb:ea:25:17:
                    e0:1e:86:86:7e:55:1d:de:93:49:d7:eb:c8:be:99:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:24:08:43:45:D3:21:FB:B6:DA:16:01:3D:E8:05:46:5A:23:E1
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:af:ce:5e:f2:51:07:e2:ea:3c:a3:4f:ca:7a:c7:b4:78:
         01:33:8a:2c:39:07:2f:cb:b3:5d:a8:fb:78:49:10:99:df:23:
         e6:58:96:30:96:90:e7:a9:7b:3e:cf:59:f4:93:36:90:69:f3:
         9e:72:3d:21:23:14:12:58:95:f2:b7:4b:d4:50:ab:80:83:cd:
         b2:5e:fb:80:34:25:fd:5f:62:d7:83:c8:b1:e5:dd:a9:96:d5:
         a7:61:33:ff:bf:c5:a3:44:f9:95:9f:26:b4:30:e8:75:5b:9b:
         89:3b:e5:6e:6b:89:0c:5c:fa:6c:74:02:20:61:f8:d1:25:47:
         f6:ea:34:f0:a2:8e:a1:00:5f:0c:1f:e7:11:20:b6:60:52:bc:
         4d:7e:58:37:a7:3c:7c:b0:80:10:c1:90:6b:85:ec:e4:35:df:
         97:91:4c:22:39:af:0c:79:b8:e5:2d:7d:14:ec:c3:14:eb:69:
         83:a4:28:fc:8b:4a:a0:10:0d:e6:69:bb:a1:70:d8:82:a4:64:
         a0:8c:bb:3a:d5:61:ba:f1:16:10:ed:93:af:b9:e3:e2:f7:c2:
         ed:ad:8c:1f:c8:00:8d:11:51:b4:70:38:4b:4c:7e:00:ef:d4:
         eb:4b:0a:27:01:c2:4d:3e:f6:58:d2:56:a3:11:cd:79:9b:8f:
         e2:3f:a0:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjQwNTE5MDUyNDE3WhcNMjQwNTI2MDUyNDE3WjAYMRYwFAYD
VQQDEw02NjQ5OGQwMS02NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ZD8k+Ftkf+eUCQvVv+PfNI8WG1fdFk1tD+LsXIjmxpHaPy6C0CAsUdnYmbB
MCIowQBaY+JZqQDVTaZONlOztIVXJP4ntLHN1GSdM7ydSc0RXA59Ok/4+XFZqBk7
EvQFItTfnWjfSibpLR+DYEAnzAd2jQDoSyi2Q5bn5zHkjGAmP+yutWMMSFXhiMVh
YbcHky3wOxb7zxM+ZIMyRr7DvBAb2P3irLhJQoWf5I6dtiFn1Ny9PKp0xFxvR8qT
1rml1Q98UbXkoMKEE9Pqsmvb3nbDY02rkzOfpj4QrY/9/qXSVi90/I40lut1LLvq
JRfgHoaGflUd3pNJ1+vIvpmghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWmJAhD
RdMh+7baFgE96AVGWiPhMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp
d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7YK/OXvJRB+LqPKNPynrHtHgBM4osOQcvy7NdqPt4SRCZ3yPmWJYw
lpDnqXs+z1n0kzaQafOecj0hIxQSWJXyt0vUUKuAg82yXvuANCX9X2LXg8ix5d2p
ltWnYTP/v8WjRPmVnya0MOh1W5uJO+Vua4kMXPpsdAIgYfjRJUf26jTwoo6hAF8M
H+cRILZgUrxNflg3pzx8sIAQwZBrhezkNd+XkUwiOa8MebjlLX0U7MMU62mDpCj8
i0qgEA3mabuhcNiCpGSgjLs61WG68RYQ7ZOvuePi98LtrYwfyACNEVG0cDhLTH4A
79TrSwonAcJNPvZY0lajEc15m4/iP6CG
-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org