Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          tKEi6V1xXr4JMgxuVOVWxnxzagQ4NJs9zbrek6SJgqE=
Subject key identifier:   8B:1E:88:80:0A:3A:A3:2A:88:0A:2E:E3:B3:ED:8A:DC:1E:27:90:3C
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          02B8
Signing time:             Sat 01 Jun 2024 04:39:22 +0000
Manifest this update:     Sat 01 Jun 2024 04:39:21 +0000
Manifest next update:     Sat 08 Jun 2024 04:39:21 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: rUUh3CgpLoJ+xs3hrp90wS4RKnGNRB9R/9/v25M9Vcg=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: deXf14KsHTj6pfBYqF9cBs+V+3eFMnPwxxjR8ucX3ok=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Jun  1 04:39:21 2024 GMT
            Not After : Jun  8 04:39:21 2024 GMT
        Subject: CN=665aa5f9-60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:a7:9f:9e:a6:48:92:0d:f5:8e:40:ee:4a:
                    ac:04:d1:85:65:0d:0d:ce:60:da:73:25:1c:13:c9:
                    b9:b8:8b:49:01:4f:8d:cf:b8:54:37:e9:d3:8d:4b:
                    9a:9d:5d:34:88:44:ee:cc:be:78:99:04:e2:1b:85:
                    46:ba:6a:79:60:9d:fb:4f:df:df:cd:f7:85:04:a6:
                    e0:48:8e:90:7b:20:65:56:bd:ab:c6:87:df:8a:7f:
                    08:27:e4:b1:28:07:ce:1a:65:12:af:04:32:a5:76:
                    52:e3:69:b2:fd:5b:5b:67:4d:11:57:7a:99:e8:b6:
                    be:97:ae:57:ce:b9:29:fb:4d:f7:0b:9d:c7:0e:ca:
                    29:04:cc:0c:77:b1:f4:e1:92:0b:36:86:17:10:5e:
                    c7:3d:2f:a0:a0:9a:f0:d8:f1:13:9b:05:43:72:ce:
                    05:68:44:2d:80:eb:81:8d:a0:d2:0f:04:ac:d5:a4:
                    33:d3:23:c5:53:f8:83:ce:62:5b:de:3f:18:50:db:
                    ec:9e:4f:94:04:1b:ac:1a:9d:38:f1:42:3b:88:26:
                    a1:d8:ea:a8:92:77:55:3e:10:41:87:e4:4b:88:75:
                    3b:4b:ee:61:4b:59:c6:72:c2:af:99:71:aa:6b:d8:
                    65:77:c2:b5:2a:16:c1:eb:33:bb:43:3f:8c:c7:53:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:88:80:0A:3A:A3:2A:88:0A:2E:E3:B3:ED:8A:DC:1E:27:90:3C
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:7c:bd:21:b4:3f:77:ea:0e:07:46:24:c6:5e:30:76:45:
         f7:91:50:4c:a2:3a:21:4f:9b:e6:e6:e9:38:12:33:fc:4e:3b:
         64:c2:a2:89:47:fc:71:f8:16:65:e1:5f:64:6b:cf:99:ac:c8:
         7f:20:5e:75:86:90:dd:54:c8:07:ce:6e:17:68:66:0a:88:4e:
         22:72:a5:f1:c6:03:6e:10:e3:a8:a8:be:6f:1b:ae:4d:86:12:
         b4:01:82:80:ce:99:fd:92:ef:2c:db:27:6e:6a:c9:67:b4:92:
         a0:b3:83:89:70:29:2d:cc:b3:3b:f2:0e:51:49:f8:af:a3:f4:
         ae:e7:34:22:1a:c1:77:b9:c4:3b:02:70:cb:88:9d:09:79:8a:
         48:ee:25:4f:d3:bd:2e:66:fc:07:59:f7:d1:46:11:84:99:5c:
         07:73:c3:cb:da:8e:f5:58:4b:54:ec:58:95:e9:c4:42:46:f4:
         f4:a8:e1:7c:ad:d0:1c:c0:9c:c3:59:61:e1:77:48:59:03:79:
         e1:c2:f9:2a:d6:cc:c2:b2:44:a5:24:c8:af:4c:b8:f1:eb:4c:
         f4:5b:46:68:5f:6d:93:c3:01:f4:2b:a9:fe:6f:77:7b:99:52:
         49:10:b0:c2:b2:91:63:44:a8:87:03:8d:a1:62:1c:1a:3d:88:
         07:7c:c8:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG
NTczOEY5MEEwHhcNMjQwNjAxMDQzOTIxWhcNMjQwNjA4MDQzOTIxWjAYMRYwFAYD
VQQDEw02NjVhYTVmOS02MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAriCnn56mSJIN9Y5A7kqsBNGFZQ0NzmDacyUcE8m5uItJAU+Nz7hUN+nTjUua
nV00iETuzL54mQTiG4VGump5YJ37T9/fzfeFBKbgSI6QeyBlVr2rxoffin8IJ+Sx
KAfOGmUSrwQypXZS42my/VtbZ00RV3qZ6La+l65Xzrkp+033C53HDsopBMwMd7H0
4ZILNoYXEF7HPS+goJrw2PETmwVDcs4FaEQtgOuBjaDSDwSs1aQz0yPFU/iDzmJb
3j8YUNvsnk+UBBusGp048UI7iCah2OqokndVPhBBh+RLiHU7S+5hS1nGcsKvmXGq
a9hld8K1KhbB6zO7Qz+Mx1OLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIseiIAK
OqMqiAou47PtitweJ5A8MB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC
MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO
VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzbHy9IbQ/d+oOB0Ykxl4wdkX3kVBMojohT5vm5uk4EjP8TjtkwqKJ
R/xx+BZl4V9ka8+ZrMh/IF51hpDdVMgHzm4XaGYKiE4icqXxxgNuEOOoqL5vG65N
hhK0AYKAzpn9ku8s2yduaslntJKgs4OJcCktzLM78g5RSfivo/Su5zQiGsF3ucQ7
AnDLiJ0JeYpI7iVP070uZvwHWffRRhGEmVwHc8PL2o71WEtU7FiV6cRCRvT0qOF8
rdAcwJzDWWHhd0hZA3nhwvkq1szCskSlJMivTLjx60z0W0ZoX22TwwH0K6n+b3d7
mVJJELDCspFjRKiHA42hYhwaPYgHfMju
-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org