Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File:                     PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier:          frTu875WGKfdbQzwylcN1RwdBbkemU4cKME/oXdV9no=
Subject key identifier:   65:9A:9C:DE:98:A1:A5:78:3A:C4:6D:B4:00:CE:0F:19:E5:F4:12:99
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number:          031B
Signing time:             Sun 19 May 2024 03:06:23 +0000
Manifest this update:     Sun 19 May 2024 03:06:22 +0000
Manifest next update:     Sun 26 May 2024 03:06:22 +0000
Files and hashes:         1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: 0HjX1OjDX3q9oRENSXNv3IiLBiYpHK3lFD3ONvTfm9E=)
                          2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: HdJTXaA3iz/E2yTC8ZQxw1pBTuV/ZR/v3QdYUOvo1Ek=)
                          3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: Y56VUgsxsRUUl3ZUr20aDI+EEZVvxekc8Mqc9Z62i4k=)
                          4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: mffYPHTSbMXZckc8X+taAxD7anAlSKTECrlhUJg8WFU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: May 19 03:06:22 2024 GMT
            Not After : May 26 03:06:22 2024 GMT
        Subject: CN=66496caf-07eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:8a:13:8c:5e:54:5e:14:a7:08:88:76:2b:
                    25:7e:95:9a:62:00:2b:fa:0a:c0:2b:99:19:ca:35:
                    b8:41:19:8e:77:61:a8:8f:18:da:8c:62:9d:f1:cf:
                    47:cf:aa:86:08:1b:8b:5d:1a:9c:9c:7c:98:ef:35:
                    67:ab:2f:c4:a6:8e:82:4b:89:28:be:e5:d2:2b:dc:
                    7c:e5:5e:a2:2d:55:51:fc:5b:51:1c:9e:3f:b6:cd:
                    ab:ac:60:53:af:13:b7:b1:b3:c6:18:60:8d:e6:e9:
                    45:75:1a:bd:1b:f5:79:ab:98:3c:61:d0:b1:6d:e8:
                    cd:aa:3f:66:90:80:25:26:a3:d0:d0:2f:31:7e:1c:
                    49:a5:9d:f0:e4:64:a3:45:17:ce:f9:46:4e:76:a7:
                    35:b0:14:02:85:79:73:02:33:93:cd:2f:a3:01:4e:
                    7c:c1:39:fd:3a:34:31:2a:b6:f0:1f:74:f0:af:4f:
                    07:01:c5:8c:08:48:39:d3:fa:21:3e:a2:a2:d0:ac:
                    6b:21:4b:6a:cf:98:d9:39:ae:83:fa:fd:b3:47:b5:
                    59:1c:89:3b:94:cf:05:63:79:7c:8c:09:77:db:ce:
                    6c:2d:3e:bd:0c:b3:bd:8e:88:0f:25:3e:04:8c:7e:
                    aa:09:8c:56:f0:d2:e4:34:95:cf:a1:6a:0e:af:39:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9A:9C:DE:98:A1:A5:78:3A:C4:6D:B4:00:CE:0F:19:E5:F4:12:99
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:94:f1:15:de:56:e2:bc:31:2c:b0:aa:3d:30:ec:6f:c3:f5:
         ce:a8:83:e7:89:75:df:f3:5c:d0:7e:1f:17:b1:99:97:67:a7:
         b1:aa:53:09:1f:b7:6c:73:76:fe:92:07:98:be:8e:d1:55:8a:
         d3:c8:ce:13:f0:13:cf:12:e0:20:fc:4b:6d:f3:6d:c8:5c:a6:
         6c:bb:b9:e3:7d:47:12:27:81:f9:66:51:cd:53:d9:a1:a8:7d:
         25:98:fd:c1:d8:bf:85:0c:87:ca:71:48:6d:2f:81:d7:03:43:
         12:14:83:33:6b:b8:14:28:bd:f2:b9:c3:4e:e1:5f:66:8e:ed:
         55:69:56:57:1c:39:42:55:d0:d6:6c:76:e5:62:fe:d2:f0:8c:
         14:2f:0a:f3:9b:d1:c6:28:87:75:92:02:4e:7f:d8:70:3a:12:
         5a:ff:e1:f0:e1:d8:e9:e8:ff:4e:ba:18:74:c4:18:13:99:0c:
         22:06:31:56:a1:d7:61:31:f9:67:16:6c:79:97:5c:81:5f:35:
         97:2c:88:0a:12:29:b3:36:51:15:13:29:c2:42:51:72:e7:b8:
         37:b4:11:00:3e:57:36:4a:44:12:23:08:00:e5:96:ff:11:35:
         d3:fc:9f:b0:31:d6:4a:ae:09:ba:bb:31:88:6b:1e:ca:7b:dc:
         fd:ac:32:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw
MEFDQjc2MEMwHhcNMjQwNTE5MDMwNjIyWhcNMjQwNTI2MDMwNjIyWjAYMRYwFAYD
VQQDEw02NjQ5NmNhZi0wN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mqKE4xeVF4UpwiIdislfpWaYgAr+grAK5kZyjW4QRmOd2GojxjajGKd8c9H
z6qGCBuLXRqcnHyY7zVnqy/Epo6CS4kovuXSK9x85V6iLVVR/FtRHJ4/ts2rrGBT
rxO3sbPGGGCN5ulFdRq9G/V5q5g8YdCxbejNqj9mkIAlJqPQ0C8xfhxJpZ3w5GSj
RRfO+UZOdqc1sBQChXlzAjOTzS+jAU58wTn9OjQxKrbwH3Twr08HAcWMCEg50/oh
PqKi0KxrIUtqz5jZOa6D+v2zR7VZHIk7lM8FY3l8jAl3285sLT69DLO9jogPJT4E
jH6qCYxW8NLkNJXPoWoOrzkCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWanN6Y
oaV4OsRttADODxnl9BKZMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz
MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk
NnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASlPEV3lbivDEssKo9MOxvw/XOqIPniXXf81zQfh8XsZmXZ6exqlMJ
H7dsc3b+kgeYvo7RVYrTyM4T8BPPEuAg/Ett823IXKZsu7njfUcSJ4H5ZlHNU9mh
qH0lmP3B2L+FDIfKcUhtL4HXA0MSFIMza7gUKL3yucNO4V9mju1VaVZXHDlCVdDW
bHblYv7S8IwULwrzm9HGKId1kgJOf9hwOhJa/+Hw4djp6P9Ouhh0xBgTmQwiBjFW
oddhMflnFmx5l1yBXzWXLIgKEimzNlEVEynCQlFy57g3tBEAPlc2SkQSIwgA5Zb/
ETXT/J+wMdZKrgm6uzGIax7Ke9z9rDK7
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org