Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File:                     EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier:          uhpUCgrKJEtxur1AiurBx/kLCu363ykXdOzttXGbDjQ=
Subject key identifier:   FF:5E:3C:CF:75:12:32:C5:C7:90:B8:26:88:6D:2D:CF:84:59:CB:DC
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer:       /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number:          F3
Signing time:             Sun 19 May 2024 05:46:18 +0000
Manifest this update:     Sun 19 May 2024 05:46:17 +0000
Manifest next update:     Sun 26 May 2024 05:46:17 +0000
Files and hashes:         1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: QDQQrOHrP79S4uYsLfmKyzPoo9gzBsBXCLTzR8KrlSc=)
                          2: 612568D2A6D011ED8FBD0A82C4F9AE02.roa (hash: Wf8nYA+t9HD4VHUkOzVWpMXetJg2S16feJ3kI9eoFho=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
                          rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
        Validity
            Not Before: May 19 05:46:17 2024 GMT
            Not After : May 26 05:46:17 2024 GMT
        Subject: CN=6649922a-2182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:ff:bf:9e:ac:13:cf:5e:fb:13:ab:ce:9f:
                    b9:e4:e8:89:9e:4f:0f:cd:53:fe:e0:bd:f3:34:59:
                    28:43:d1:6c:b2:85:31:f9:19:3d:d2:fc:76:2c:cf:
                    89:32:c7:00:d7:d5:5a:49:38:61:81:be:bf:13:52:
                    13:41:47:f8:e1:1e:ca:b7:f3:4d:3f:87:ed:c6:71:
                    d4:2a:05:36:2a:bb:db:9b:ed:ae:d6:f9:7d:85:a2:
                    2c:1c:e1:bb:dd:17:96:91:0d:a3:85:47:23:bf:4d:
                    49:e5:c8:f3:b4:b4:45:66:79:f6:31:23:77:c9:63:
                    c1:8d:9a:65:f0:9f:e5:60:df:08:50:cb:4a:7d:26:
                    7f:1d:53:9e:f8:b6:35:99:a9:6b:c5:05:7b:1b:77:
                    dd:53:4a:0a:5b:84:55:cd:33:4c:95:92:56:4c:9f:
                    9a:a0:5f:a3:01:fd:ad:46:e6:7c:02:c0:b9:db:16:
                    d2:9c:05:2d:fe:ef:74:f9:e0:bd:d7:6c:b5:00:e3:
                    ba:f8:95:86:37:ee:f0:70:06:88:0e:bb:15:b0:d8:
                    1c:61:be:cd:d2:27:ce:e3:e9:f3:aa:37:45:02:38:
                    2c:44:35:e8:aa:07:72:34:50:19:e1:a2:83:29:93:
                    e9:2c:c2:15:71:2a:b2:cb:5e:16:82:52:06:a4:b6:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:3C:CF:75:12:32:C5:C7:90:B8:26:88:6D:2D:CF:84:59:CB:DC
            X509v3 Authority Key Identifier:
                keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:10:0e:8c:90:37:ee:af:40:8a:ca:6b:1c:1e:28:45:71:
         29:d2:20:a9:ba:73:b9:d4:69:50:12:a2:cb:73:aa:df:09:e4:
         53:ff:54:e9:85:f7:17:4e:37:27:00:ce:48:68:e9:46:fc:1d:
         96:f0:39:0e:d4:86:f4:bd:40:52:7a:0b:15:f6:96:47:8f:fa:
         78:ff:9a:cd:c1:e1:0d:9d:7d:e6:97:ff:f6:01:08:26:b1:80:
         4c:ee:6d:10:6d:6f:db:e0:74:66:d7:81:9c:d8:7c:92:6e:c7:
         fc:91:5a:c4:95:b4:60:de:d3:65:46:db:fd:e0:89:5c:31:6b:
         f2:32:2a:17:83:fc:67:b1:09:e9:a6:ac:24:89:1e:dc:01:5b:
         63:6f:31:4e:7b:81:9b:77:86:ab:82:8c:0e:3d:07:4e:cd:6b:
         fd:58:5a:1a:83:cc:3b:d0:93:e1:5c:14:f2:27:c9:7c:f8:bc:
         ad:56:82:3a:72:ae:79:50:64:74:dc:da:c0:e5:1a:d9:9c:e0:
         24:f3:fa:27:d6:26:1f:a6:71:f5:e0:af:c0:88:9f:62:c3:21:
         e7:fe:d2:90:86:06:72:1f:8f:77:fe:b2:ab:2c:d9:f8:c7:dc:
         8f:dd:2c:a1:87:23:25:37:00:30:48:6b:86:86:93:3d:0b:99:
         52:cb:57:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBM0YxMTAvBgNVBAUTKDExOEU2RkIyQ0YxNTZCOUQ1QTI2QUVDMDUxRkIxQzVG
N0VGRTAxRTMwHhcNMjQwNTE5MDU0NjE3WhcNMjQwNTI2MDU0NjE3WjAYMRYwFAYD
VQQDEw02NjQ5OTIyYS0yMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHD/v56sE89e+xOrzp+55OiJnk8PzVP+4L3zNFkoQ9FssoUx+Rk90vx2LM+J
MscA19VaSThhgb6/E1ITQUf44R7Kt/NNP4ftxnHUKgU2Krvbm+2u1vl9haIsHOG7
3ReWkQ2jhUcjv01J5cjztLRFZnn2MSN3yWPBjZpl8J/lYN8IUMtKfSZ/HVOe+LY1
malrxQV7G3fdU0oKW4RVzTNMlZJWTJ+aoF+jAf2tRuZ8AsC52xbSnAUt/u90+eC9
12y1AOO6+JWGN+7wcAaIDrsVsNgcYb7N0ifO4+nzqjdFAjgsRDXoqgdyNFAZ4aKD
KZPpLMIVcSqyy14WglIGpLb1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9ePM91
EjLFx5C4JohtLc+EWcvcMB8GA1UdIwQYMBaAFBGOb7LPFWudWiauwFH7HF9+/gHj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEzRi80NjlCMTc2QUE2
Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1MWFKcTdBVWZzY1gzNy1B
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZNXZzczhWYTUxYUpxN0FVZnNjWDM3LUFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REEzRi80NjlCMTc2QUE2Q0ExMUVEOEQxMDk5NzhDNEY5QUUwMi9FWTV2c3M4VmE1
MWFKcTdBVWZzY1gzNy1BZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcrhAOjJA37q9AisprHB4oRXEp0iCpunO51GlQEqLLc6rfCeRT/1Tp
hfcXTjcnAM5IaOlG/B2W8DkO1Ib0vUBSegsV9pZHj/p4/5rNweENnX3ml//2AQgm
sYBM7m0QbW/b4HRm14Gc2HySbsf8kVrElbRg3tNlRtv94IlcMWvyMioXg/xnsQnp
pqwkiR7cAVtjbzFOe4Gbd4argowOPQdOzWv9WFoag8w70JPhXBTyJ8l8+LytVoI6
cq55UGR03NrA5RrZnOAk8/on1iYfpnH14K/AiJ9iwyHn/tKQhgZyH493/rKrLNn4
x9yP3SyhhyMlNwAwSGuGhpM9C5lSy1fB
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org