Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
File:                     fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft (raw, json)
Hash identifier:          fQKNIMGt9sxVwOAN9G6iBdBb/CrgvzxCQIQa5/fCXTQ=
Subject key identifier:   15:72:AD:DA:43:0A:49:37:3D:99:35:87:E3:F7:B2:64:A1:68:E5:2C
Authority key identifier: 7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9
Certificate issuer:       /CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
Manifest number:          0618
Signing time:             Fri 31 May 2024 00:19:17 +0000
Manifest this update:     Fri 31 May 2024 00:19:17 +0000
Manifest next update:     Fri 07 Jun 2024 00:19:17 +0000
Files and hashes:         1: fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl (hash: AwFT00CoxLcfqbAWZ0anF/cjUyOdrE7FuETZJJbW01I=)
                          2: 5AE4C7E2554C11EB87AB9070C4F9AE02.roa (hash: Or89czDxEvOmVhZzxW4eIqJ6wfH1q8wTK3ZnGTOYBjQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl
                          rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 00:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9
        Validity
            Not Before: May 31 00:19:17 2024 GMT
            Not After : Jun  7 00:19:17 2024 GMT
        Subject: CN=66591785-27a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:32:d1:bc:e3:e0:1f:48:31:f9:f4:a5:09:
                    a6:b1:a3:43:65:7f:8d:66:6a:41:ed:4e:a4:39:62:
                    1f:4a:18:24:46:e7:de:62:b4:62:b0:5f:bd:ae:2b:
                    87:18:e0:bc:a5:c9:f3:39:f4:7f:4d:94:b8:f1:3e:
                    cf:30:ff:e7:12:16:78:0f:7a:ad:fa:cb:6e:48:69:
                    f3:fa:57:af:d4:9c:52:ed:c0:be:74:79:d1:cf:c5:
                    33:c6:d8:24:8b:b6:95:a0:d4:b1:09:ce:fa:02:92:
                    bb:37:74:9a:3a:4a:b2:21:68:b5:11:61:2f:a1:d7:
                    d2:cf:75:b4:7c:b9:b8:e7:8a:30:ef:58:2d:b7:e9:
                    6d:9a:0d:62:cd:db:76:42:34:01:4e:50:68:40:69:
                    9d:b7:93:b0:d3:8c:32:eb:9b:d3:86:dc:8f:87:0d:
                    ec:c8:60:5c:44:2a:18:80:3f:a8:20:d0:03:5f:1f:
                    04:56:50:8b:37:2a:6e:be:e5:92:f5:58:8e:6d:b7:
                    69:b4:0e:c1:55:4f:b0:6c:96:55:1a:ed:4d:a1:7d:
                    d0:c5:e9:30:3e:3d:19:2b:15:71:a7:54:34:49:d5:
                    33:a4:33:32:41:f2:1e:ce:35:65:c7:86:11:88:49:
                    9d:06:6c:93:7b:c7:09:5d:43:8f:8a:38:4c:9a:ac:
                    1c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:72:AD:DA:43:0A:49:37:3D:99:35:87:E3:F7:B2:64:A1:68:E5:2C
            X509v3 Authority Key Identifier:
                keyid:7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d4:54:2c:b4:29:67:b6:76:81:32:11:61:07:22:2e:4e:88:
         f1:be:2e:61:25:83:bb:35:75:15:0d:88:ac:25:0c:61:41:33:
         63:2f:ca:2b:ab:3d:c5:fa:34:6c:2f:78:01:13:ee:4b:a4:f8:
         3a:5b:d4:97:98:a9:87:66:09:3d:23:2d:c9:71:57:8f:46:22:
         dd:4d:1b:e3:71:7a:42:c2:fe:66:02:95:ba:94:70:f6:d1:4d:
         2c:67:53:16:75:eb:98:6c:fb:ad:8d:75:7f:86:9f:e4:e1:ab:
         be:93:7d:b2:bc:d1:b8:d2:05:09:5c:9f:fa:9d:87:a8:88:fc:
         5f:60:b6:07:86:37:21:9d:40:10:dd:44:9b:73:f7:c9:4e:9c:
         04:fb:67:f9:d9:0c:64:ad:df:15:70:97:d6:cc:43:1e:63:03:
         4a:c4:a2:45:03:e0:bc:09:8d:55:8f:a5:75:76:ac:c4:b4:91:
         03:5a:15:e8:4c:32:4e:f9:33:ce:d8:26:6c:c9:55:9d:70:a2:
         0a:62:07:88:31:2a:a6:48:06:ff:6c:20:df:33:8c:0a:d8:c8:
         69:96:68:03:c1:e5:f4:0e:a0:39:01:fa:f7:9e:8e:6c:0f:c7:
         ee:db:b1:db:1e:0e:82:35:1a:b5:6d:ae:84:12:a1:a4:96:3c:
         f4:3b:a4:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU4QjExMTAvBgNVBAUTKDdDMzJFNjZGMzVDMDNCQzI3QkUwRENGN0NBNDZCOTY2
MTYwOTlFRTkwHhcNMjQwNTMxMDAxOTE3WhcNMjQwNjA3MDAxOTE3WjAYMRYwFAYD
VQQDEw02NjU5MTc4NS0yN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueAy0bzj4B9IMfn0pQmmsaNDZX+NZmpB7U6kOWIfShgkRufeYrRisF+9riuH
GOC8pcnzOfR/TZS48T7PMP/nEhZ4D3qt+stuSGnz+lev1JxS7cC+dHnRz8Uzxtgk
i7aVoNSxCc76ApK7N3SaOkqyIWi1EWEvodfSz3W0fLm454ow71gtt+ltmg1izdt2
QjQBTlBoQGmdt5Ow04wy65vThtyPhw3syGBcRCoYgD+oINADXx8EVlCLNypuvuWS
9ViObbdptA7BVU+wbJZVGu1NoX3QxekwPj0ZKxVxp1Q0SdUzpDMyQfIezjVlx4YR
iEmdBmyTe8cJXUOPijhMmqwc0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVyrdpD
Ckk3PZk1h+P3smShaOUsMB8GA1UdIwQYMBaAFHwy5m81wDvCe+Dc98pGuWYWCZ7p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThCMS80Nzc2M0JBQTU1
M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84Sjc0TnozeWthNVpoWUpu
dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZETG1ielhBTzhKNzROejN5a2E1WmhZSm51ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NThCMS80Nzc2M0JBQTU1M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84
Sjc0TnozeWthNVpoWUpudWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBb1FQstClntnaBMhFhByIuTojxvi5hJYO7NXUVDYisJQxhQTNjL8or
qz3F+jRsL3gBE+5LpPg6W9SXmKmHZgk9Iy3JcVePRiLdTRvjcXpCwv5mApW6lHD2
0U0sZ1MWdeuYbPutjXV/hp/k4au+k32yvNG40gUJXJ/6nYeoiPxfYLYHhjchnUAQ
3USbc/fJTpwE+2f52Qxkrd8VcJfWzEMeYwNKxKJFA+C8CY1Vj6V1dqzEtJEDWhXo
TDJO+TPO2CZsyVWdcKIKYgeIMSqmSAb/bCDfM4wK2MhplmgDweX0DqA5Afr3no5s
D8fu27HbHg6CNRq1ba6EEqGkljz0O6SQ
-----END CERTIFICATE-----
Generated at Fri May 31 01:36:42 2024 by rpki-client on console-fra.rpki-client.org