Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
File:                     Teu44SIr4OPyOu23UkXg-XuHx00.mft (raw, json)
Hash identifier:          3ZFWj8/3UvZOF3aYwvpNj84QmSfRoYJE5aQEMv8nAbg=
Subject key identifier:   37:A3:69:AF:04:BA:B5:40:92:DA:A5:D0:FA:A2:5C:65:6D:9B:86:45
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       33D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
Manifest number:          33CF
Signing time:             Fri 31 May 2024 14:39:26 +0000
Manifest this update:     Fri 31 May 2024 14:39:25 +0000
Manifest next update:     Fri 07 Jun 2024 14:39:25 +0000
Files and hashes:         1: Teu44SIr4OPyOu23UkXg-XuHx00.crl (hash: rhl+TL5lo8dKlXbXDIfnLkjkfpfqEPQp7DI4p4jOqDI=)
                          2: 673E7D66F73911EE8BEC0A76C4F9AE02.roa (hash: yCObzbtV27l5/z/K4jU5ZOK5OZGZWWAdqaoCjC2eBGg=)
                          3: 66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (hash: WoqACD26Rmj17C63RDaq+sjCwacGcU96W0VVw5UH9Z4=)
                          4: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (hash: s1sxUbrIJzlmdAuhFyg4Ypkz9mjbzVxqBgJTMm35sDA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13267 (0x33d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: May 31 14:39:25 2024 GMT
            Not After : Jun  7 14:39:25 2024 GMT
        Subject: CN=6659e11e-fae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:09:e2:3b:1c:e0:3c:58:ea:af:8d:62:ea:
                    23:91:d2:8c:58:bb:76:c7:8b:fa:54:c2:46:0f:97:
                    a9:3c:44:44:ed:c2:d5:99:6e:6e:e9:85:3b:50:a0:
                    98:61:eb:04:42:e2:55:3c:fa:55:a9:cf:a6:63:48:
                    b0:16:c5:80:5b:af:a6:19:93:f8:02:ac:6e:bc:17:
                    ef:36:e0:c0:69:63:1f:0f:d7:69:ae:e2:3a:de:0f:
                    9e:ab:f5:46:f5:4d:69:bf:56:b5:47:4e:ba:5f:64:
                    de:87:89:07:85:35:14:18:d8:d1:6f:1d:5d:5a:c4:
                    a6:c1:14:e3:4f:41:3c:2c:89:af:16:9d:c0:87:1e:
                    64:e4:4f:f1:2c:65:0d:ca:7b:9a:6e:fc:99:3a:28:
                    c2:96:63:d3:61:d5:49:e0:c2:ff:a6:cf:d9:b9:cf:
                    e6:0b:c3:3f:18:93:78:98:49:d0:69:31:a9:1d:56:
                    6b:d1:f3:32:16:03:91:bf:4c:c4:ef:b4:ad:bf:18:
                    42:a5:2a:c9:d1:61:8b:67:4c:b2:92:e1:42:c2:65:
                    84:ba:87:dc:08:6e:14:a4:4d:31:3d:6b:54:c5:ef:
                    e6:bc:af:73:25:89:fc:5c:e5:94:31:6e:86:83:0f:
                    31:02:b5:a7:e2:fc:9f:9e:fb:e8:d5:1b:2c:50:79:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:69:AF:04:BA:B5:40:92:DA:A5:D0:FA:A2:5C:65:6D:9B:86:45
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:85:16:b0:84:9c:a3:59:27:2c:a7:0f:e1:9a:0f:a3:49:05:
         fa:17:28:d6:9b:ab:8b:c3:9f:49:d2:53:fa:11:32:9d:e3:77:
         86:fc:da:0b:11:43:d8:a3:9a:98:45:13:13:bc:d5:f0:cf:86:
         d4:93:b2:de:b6:96:53:c9:2f:7a:dd:1e:a3:7b:44:1e:79:fa:
         c8:4f:30:4a:88:8f:99:50:88:ca:47:0a:5a:17:91:58:48:9f:
         63:fa:2f:19:9b:8a:83:3d:82:e2:d6:8f:a2:78:d8:1a:71:46:
         93:c7:ed:e4:90:ee:f7:02:97:89:51:1a:93:c1:d4:f1:f9:0b:
         51:f8:c6:0e:54:88:38:98:ef:58:64:e8:f8:38:23:84:a8:25:
         95:39:2f:39:b6:cd:45:96:70:22:94:68:ce:52:ef:2f:19:2e:
         84:fb:28:47:ba:e3:d2:3e:90:8a:44:a0:25:d8:45:cd:b4:cf:
         cf:81:24:df:79:e9:60:e3:a2:74:b6:bd:b1:d6:65:1a:f1:10:
         6e:7b:00:5f:be:20:a0:a4:0e:df:af:04:d0:4b:f9:7d:b2:b9:
         ae:eb:ad:7d:87:af:3e:31:91:b0:a5:34:66:84:c6:35:42:84:
         22:16:16:4a:b2:7f:12:fe:09:d1:d2:b4:78:02:60:e2:b1:62:
         d9:24:25:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBNzYxMTAvBgNVBAUTKDRERUJCOEUxMjIyQkUwRTNGMjNBRURCNzUyNDVFMEY5
N0I4N0M3NEQwHhcNMjQwNTMxMTQzOTI1WhcNMjQwNjA3MTQzOTI1WjAYMRYwFAYD
VQQDEw02NjU5ZTExZS1mYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruQJ4jsc4DxY6q+NYuojkdKMWLt2x4v6VMJGD5epPERE7cLVmW5u6YU7UKCY
YesEQuJVPPpVqc+mY0iwFsWAW6+mGZP4AqxuvBfvNuDAaWMfD9dpruI63g+eq/VG
9U1pv1a1R066X2Teh4kHhTUUGNjRbx1dWsSmwRTjT0E8LImvFp3Ahx5k5E/xLGUN
ynuabvyZOijClmPTYdVJ4ML/ps/Zuc/mC8M/GJN4mEnQaTGpHVZr0fMyFgORv0zE
77StvxhCpSrJ0WGLZ0yykuFCwmWEuofcCG4UpE0xPWtUxe/mvK9zJYn8XOWUMW6G
gw8xArWn4vyfnvvo1RssUHkEjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDejaa8E
urVAktql0PqiXGVtm4ZFMB8GA1UdIwQYMBaAFE3ruOEiK+Dj8jrtt1JF4Pl7h8dN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE3Ni9BQUJBMzQ5ODFE
OEIxMUUyQUE3NTZBRTYwOEIwMkNEMi9UZXU0NFNJcjRPUHlPdTIzVWtYZy1YdUh4
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RldTQ0U0lyNE9QeU91MjNVa1hnLVh1SHgwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REE3Ni9BQUJBMzQ5ODFEOEIxMUUyQUE3NTZBRTYwOEIwMkNEMi9UZXU0NFNJcjRP
UHlPdTIzVWtYZy1YdUh4MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXhRawhJyjWScspw/hmg+jSQX6FyjWm6uLw59J0lP6ETKd43eG/NoL
EUPYo5qYRRMTvNXwz4bUk7LetpZTyS963R6je0QeefrITzBKiI+ZUIjKRwpaF5FY
SJ9j+i8Zm4qDPYLi1o+ieNgacUaTx+3kkO73ApeJURqTwdTx+QtR+MYOVIg4mO9Y
ZOj4OCOEqCWVOS85ts1FlnAilGjOUu8vGS6E+yhHuuPSPpCKRKAl2EXNtM/PgSTf
eelg46J0tr2x1mUa8RBuewBfviCgpA7frwTQS/l9srmu6619h68+MZGwpTRmhMY1
QoQiFhZKsn8S/gnR0rR4AmDisWLZJCWS
-----END CERTIFICATE-----
Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org