Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File:                     s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier:          XbjRkkmYBBfMEXfacXxwo/wo4qldMF3CIZEr2RiaP7M=
Subject key identifier:   9F:72:2F:7A:8B:CA:A3:A9:60:09:6E:78:06:69:C5:88:11:5B:06:0C
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer:       /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial:       1406
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number:          13FE
Signing time:             Sat 18 May 2024 17:26:33 +0000
Manifest this update:     Sat 18 May 2024 17:26:33 +0000
Manifest next update:     Sat 25 May 2024 17:26:33 +0000
Files and hashes:         1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: TmIUdtNUX/fNFooZhSagom6c9BymV074PEk2h0ni74s=)
                          2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: I7PM3BbfrLZiQgLK45SAxypIlTaPy+TLNTjrQNO4V6c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5126 (0x1406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
        Validity
            Not Before: May 18 17:26:33 2024 GMT
            Not After : May 25 17:26:33 2024 GMT
        Subject: CN=6648e4c9-ef4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:fe:08:2d:07:11:41:3d:f6:da:62:c6:dd:
                    05:ec:e9:2e:04:df:89:c3:b1:65:39:e9:9c:a4:9b:
                    f2:43:83:3b:b6:cd:2a:12:75:cd:86:f7:72:90:e0:
                    ae:5f:21:5a:bc:f4:86:4b:64:40:ad:cd:f6:49:1e:
                    84:d5:ec:53:b8:79:c2:b8:de:b9:0c:7b:7e:99:ff:
                    05:e7:f6:28:65:42:e7:91:f8:fa:71:e1:0e:d9:12:
                    db:03:51:ec:a9:68:5e:f7:48:e7:bd:fd:d7:80:36:
                    1c:13:4f:37:73:93:0a:28:60:7e:6b:17:ed:e1:9c:
                    ea:0c:51:a3:4c:15:ae:68:07:7c:4a:e6:6d:f9:65:
                    95:58:e3:2b:54:a4:08:a4:b6:83:b2:19:97:10:25:
                    98:29:db:39:ef:e3:2c:8d:8d:b1:28:90:b2:78:72:
                    ec:9f:62:e5:28:7a:b7:ae:10:77:3f:9e:bb:d2:09:
                    2c:12:79:df:d5:a8:4f:df:9c:ac:ea:02:e0:6a:eb:
                    e9:b9:c7:c3:2c:3d:10:d0:89:5a:9d:55:69:e4:4e:
                    bd:dc:a1:37:b1:db:be:ab:cc:d4:cc:f4:6f:6b:62:
                    34:10:1f:19:9f:69:75:e6:fd:04:66:56:2f:23:aa:
                    f4:c0:91:ea:c5:76:ae:3c:1a:cf:26:8b:69:28:6d:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:2F:7A:8B:CA:A3:A9:60:09:6E:78:06:69:C5:88:11:5B:06:0C
            X509v3 Authority Key Identifier:
                keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:f6:c9:99:09:1c:e6:12:52:0c:a7:c7:45:c6:50:8d:1f:
         1e:04:71:45:02:88:a9:f5:7d:f1:bb:19:31:fd:ea:16:91:30:
         45:6a:96:bf:90:b2:d7:5a:63:fd:e6:76:bc:cb:b0:59:19:ee:
         33:01:83:14:1c:8d:d3:f6:23:0f:4c:ec:6e:53:b5:36:24:c3:
         1d:46:72:6a:48:d9:f8:8c:28:4a:94:d5:dd:af:8b:4d:8b:62:
         1d:f9:68:63:07:df:54:88:46:01:15:69:f6:85:36:a6:16:f1:
         e2:c4:e7:61:e6:ff:15:41:28:73:86:a7:b2:d3:9b:b1:21:51:
         8d:5d:c9:53:67:32:06:a1:10:74:45:1c:dc:cf:54:a8:99:b9:
         0f:32:c0:46:b8:05:b6:4c:00:08:93:0a:90:d1:ed:dc:38:5e:
         2b:37:b9:a2:af:0e:6c:65:e7:0f:3a:14:9c:fe:ca:72:b3:6d:
         0f:4b:c1:ae:fe:8e:0c:d6:2b:b2:f9:04:96:98:f7:52:9b:2b:
         5f:97:95:5e:55:3d:92:47:69:44:dc:42:f6:06:1c:7e:c0:32:
         7c:7a:b9:87:77:75:e3:4b:4a:a1:a2:9c:92:c6:e0:58:1b:85:
         db:42:11:83:6f:e0:b9:77:de:ff:98:1c:11:f2:6c:92:e0:63:
         09:ba:b5:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0
MTFEREEzMUQwHhcNMjQwNTE4MTcyNjMzWhcNMjQwNTI1MTcyNjMzWjAYMRYwFAYD
VQQDEw02NjQ4ZTRjOS1lZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Wf+CC0HEUE99tpixt0F7OkuBN+Jw7FlOemcpJvyQ4M7ts0qEnXNhvdykOCu
XyFavPSGS2RArc32SR6E1exTuHnCuN65DHt+mf8F5/YoZULnkfj6ceEO2RLbA1Hs
qWhe90jnvf3XgDYcE083c5MKKGB+axft4ZzqDFGjTBWuaAd8SuZt+WWVWOMrVKQI
pLaDshmXECWYKds57+MsjY2xKJCyeHLsn2LlKHq3rhB3P5670gksEnnf1ahP35ys
6gLgauvpucfDLD0Q0IlanVVp5E693KE3sdu+q8zUzPRva2I0EB8Zn2l15v0EZlYv
I6r0wJHqxXauPBrPJotpKG1cRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9yL3qL
yqOpYAlueAZpxYgRWwYMMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB
OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz
Zmh1TmdTeGRnMlZCSGRveDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJvfbJmQkc5hJSDKfHRcZQjR8eBHFFAoip9X3xuxkx/eoWkTBFapa/
kLLXWmP95na8y7BZGe4zAYMUHI3T9iMPTOxuU7U2JMMdRnJqSNn4jChKlNXdr4tN
i2Id+WhjB99UiEYBFWn2hTamFvHixOdh5v8VQShzhqey05uxIVGNXclTZzIGoRB0
RRzcz1SombkPMsBGuAW2TAAIkwqQ0e3cOF4rN7mirw5sZecPOhSc/spys20PS8Gu
/o4M1iuy+QSWmPdSmytfl5VeVT2SR2lE3EL2Bhx+wDJ8ermHd3XjS0qhopySxuBY
G4XbQhGDb+C5d97/mBwR8myS4GMJurVm
-----END CERTIFICATE-----
Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org