Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          wqU7EH1ruIzGgHjneX21ioQifqtv5BnL9wSBqohqhkA=
Subject key identifier:   D6:C7:FA:E9:36:D3:0F:29:BE:01:FA:0F:A9:6C:43:B1:D9:8E:BD:A0
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          05C6
Signing time:             Sun 19 May 2024 00:13:07 +0000
Manifest this update:     Sun 19 May 2024 00:13:06 +0000
Manifest next update:     Sun 26 May 2024 00:13:06 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: tZTVVoP1I7dlfchm+VrTyaO6kJiASR68wKYw0Bh9ASE=)
                          2: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: Y3iS5VpFUc/8nPHXLw4F8oIqQSYEqcr5KXrjmB0CWFc=)
                          3: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: UzAOJzchYI0KBCmJKr19caqb3pKRmc9CEA6f8ewhPi8=)
                          4: 93AC2C18CF5811ED9DBB075DC4F9AE02.roa (hash: IYRSYMirnI/4f15g7vC8gFyBZd1d5hcclcg3AieMEi8=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: 9K1TLbceOCj363mZcvZESxHx6gEBmof/a/yMY2JyU5g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: May 19 00:13:06 2024 GMT
            Not After : May 26 00:13:06 2024 GMT
        Subject: CN=66494413-9008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:94:4b:87:03:1c:8e:43:d4:4b:0e:fa:d3:
                    e7:9b:67:70:74:10:e4:34:90:a8:94:5e:fa:37:19:
                    f4:76:b1:c1:1f:58:4e:a0:52:5b:5a:27:e5:86:99:
                    75:3d:59:fa:93:a3:d8:5e:aa:48:85:de:8b:0e:23:
                    dd:38:44:3d:5d:0a:6f:1d:67:5a:2a:e8:4d:e1:cf:
                    03:41:a2:7e:24:0f:59:ca:fd:a9:aa:2a:4d:b5:fe:
                    7a:90:db:4f:cf:61:d1:f6:38:6b:ce:74:2b:4c:60:
                    cb:cb:bb:df:76:da:7d:ad:09:52:db:62:13:fb:af:
                    96:60:9b:8f:8c:51:e7:e3:0d:64:18:5f:37:92:cf:
                    4c:7f:21:dd:8a:a5:cb:34:37:dd:46:94:52:24:d0:
                    c8:c5:b8:ec:66:c6:42:f3:f6:46:7c:0f:16:71:15:
                    75:f8:df:2a:df:dc:7f:8b:f1:9d:5c:b4:12:6f:17:
                    64:c3:f1:ca:a1:be:7e:0e:c3:fa:ff:6c:48:38:f0:
                    f9:dc:a0:57:8d:b4:bf:b9:d7:af:9d:8c:a0:91:0d:
                    4d:a6:79:52:15:10:9a:d9:19:e9:13:d8:8d:31:6e:
                    a0:60:4a:02:9f:4e:b1:08:1d:3c:80:f3:dc:ab:1a:
                    76:a5:64:11:79:84:85:0c:6e:e4:68:2b:72:d8:ee:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C7:FA:E9:36:D3:0F:29:BE:01:FA:0F:A9:6C:43:B1:D9:8E:BD:A0
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:cd:c2:f2:e1:cf:90:ee:9b:dd:ed:12:39:02:3e:3d:7b:
         26:ed:7e:41:a0:6a:84:98:f8:75:e1:26:93:ca:99:5d:82:2f:
         0b:fd:1f:d0:e6:23:80:65:b7:fe:22:1a:78:b8:14:54:4a:8d:
         61:89:81:53:b1:0d:66:ea:82:31:5d:6f:d6:69:d6:58:cc:54:
         4f:90:6d:0d:fa:61:a6:cf:1d:e1:e1:7c:31:ec:d7:13:7e:02:
         85:7d:c6:29:82:55:1c:bd:a5:17:ac:c3:2c:d2:49:ac:ce:68:
         b5:5f:17:d3:04:ff:4d:0b:21:59:64:ca:b4:ad:25:89:32:5e:
         8b:aa:0d:00:21:1c:b7:b4:cc:6e:5b:26:e1:e5:98:78:28:bf:
         fe:8a:38:78:cf:e8:d9:09:b8:19:99:dc:d4:e6:33:2f:1e:25:
         48:08:aa:5f:c8:b3:1a:65:c7:2f:42:84:52:45:d3:ec:74:a0:
         91:3e:f9:a8:d1:06:48:65:eb:5b:30:6a:bb:c9:b9:70:1c:ff:
         7d:ef:25:bf:ae:b2:e7:41:58:d2:95:d7:de:78:d6:1b:82:4e:
         16:da:e5:38:94:bc:b8:7c:99:b1:d7:59:6d:07:59:89:04:3f:
         f7:de:4e:ad:ae:6d:d6:dd:9e:c9:f3:62:20:b0:99:00:75:8d:
         f1:53:f8:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRTYxMTAvBgNVBAUTKDMzMTk1Rjk2QzQ2RDREMjg1RDVCREU0QjBCMDMwRTM4
MzE0RThGQ0IwHhcNMjQwNTE5MDAxMzA2WhcNMjQwNTI2MDAxMzA2WjAYMRYwFAYD
VQQDEw02NjQ5NDQxMy05MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yGUS4cDHI5D1EsO+tPnm2dwdBDkNJColF76Nxn0drHBH1hOoFJbWiflhpl1
PVn6k6PYXqpIhd6LDiPdOEQ9XQpvHWdaKuhN4c8DQaJ+JA9Zyv2pqipNtf56kNtP
z2HR9jhrznQrTGDLy7vfdtp9rQlS22IT+6+WYJuPjFHn4w1kGF83ks9MfyHdiqXL
NDfdRpRSJNDIxbjsZsZC8/ZGfA8WcRV1+N8q39x/i/GdXLQSbxdkw/HKob5+DsP6
/2xIOPD53KBXjbS/udevnYygkQ1NpnlSFRCa2RnpE9iNMW6gYEoCn06xCB08gPPc
qxp2pWQReYSFDG7kaCty2O4RvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbH+uk2
0w8pvgH6D6lsQ7HZjr2gMB8GA1UdIwQYMBaAFDMZX5bEbU0oXVveSwsDDjgxTo/L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wRThFMjc4MDdC
RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRTaGRXOTVMQ3dNT09ERk9q
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL014bGZsc1J0VFNoZFc5NUxDd01PT0RGT2o4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NFNi8wRThFMjc4MDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9NeGxmbHNSdFRT
aGRXOTVMQ3dNT09ERk9qOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLJM3C8uHPkO6b3e0SOQI+PXsm7X5BoGqEmPh14SaTypldgi8L/R/Q
5iOAZbf+Ihp4uBRUSo1hiYFTsQ1m6oIxXW/WadZYzFRPkG0N+mGmzx3h4Xwx7NcT
fgKFfcYpglUcvaUXrMMs0kmszmi1XxfTBP9NCyFZZMq0rSWJMl6Lqg0AIRy3tMxu
Wybh5Zh4KL/+ijh4z+jZCbgZmdzU5jMvHiVICKpfyLMaZccvQoRSRdPsdKCRPvmo
0QZIZetbMGq7yblwHP997yW/rrLnQVjSldfeeNYbgk4W2uU4lLy4fJmx11ltB1mJ
BD/33k6trm3W3Z7J82IgsJkAdY3xU/iz
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org