Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
File:                     8Odm-zGSJII8p502cgxR7fytz-Y.mft (raw, json)
Hash identifier:          9AYs2MwwzgCV1F246WKEGz3RIXfTpaHAJ9YOQlQhtdo=
Subject key identifier:   C1:6C:B5:0A:A8:BE:31:54:4B:66:03:26:E1:AA:45:21:EE:81:75:FD
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Certificate issuer:       /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial:       0899
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
Manifest number:          0892
Signing time:             Sat 18 May 2024 21:33:38 +0000
Manifest this update:     Sat 18 May 2024 21:33:38 +0000
Manifest next update:     Sat 25 May 2024 21:33:38 +0000
Files and hashes:         1: 8Odm-zGSJII8p502cgxR7fytz-Y.crl (hash: m0wOJFIZ2LlUaX7ijGZFmbngZgu/TLFcvYXa39+Jc+c=)
                          2: 55635E7C97B611EA97FDCB6EC4F9AE02.roa (hash: +u7S40/exZ66r9t1aHmQOHrrtRzPj7n3CsrDMsucOPs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
                          rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
        Validity
            Not Before: May 18 21:33:38 2024 GMT
            Not After : May 25 21:33:38 2024 GMT
        Subject: CN=66491eb2-761b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:a4:c7:7b:69:02:a5:a9:78:40:06:98:59:
                    ae:7a:22:10:49:4d:c3:cc:d2:26:4a:51:54:bd:3a:
                    8f:6a:de:b1:3e:35:db:af:b8:85:8a:c0:1b:e4:77:
                    ea:ba:59:21:0a:ad:47:91:79:39:d0:87:83:35:73:
                    cd:9a:54:b3:2b:7e:6a:d6:ea:a1:e3:92:f7:d4:66:
                    a0:6e:db:e7:53:57:14:bc:c0:93:47:b3:2e:0c:09:
                    50:d9:ff:b0:02:e4:4e:c2:bc:cf:30:e5:d7:73:df:
                    1d:df:d6:d2:cb:41:13:b9:a5:39:26:a0:73:2c:4f:
                    30:1f:cf:66:13:f0:45:03:1d:e7:f4:3d:c7:cc:36:
                    69:39:03:c3:e6:17:b7:a1:c0:d9:79:0f:f6:f6:3d:
                    6f:13:0e:fe:28:4e:3b:9a:a7:19:aa:ec:4c:08:f5:
                    49:83:0b:05:30:48:48:fc:f4:59:b0:c5:b2:99:7d:
                    12:90:d1:4f:99:2c:3d:59:67:40:f8:74:a0:f7:6e:
                    fd:7b:7d:32:b4:fc:aa:06:8f:55:51:04:38:ab:4d:
                    49:6f:8b:e6:59:37:14:3e:aa:6a:98:e3:87:d3:70:
                    f7:af:4d:82:f6:cc:cc:7d:4b:b0:ac:22:ce:01:3e:
                    5d:7d:85:42:ac:96:9e:88:65:73:e1:f7:e8:b8:87:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:B5:0A:A8:BE:31:54:4B:66:03:26:E1:AA:45:21:EE:81:75:FD
            X509v3 Authority Key Identifier:
                keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e9:be:61:4f:bb:84:53:6f:23:f8:4c:e0:08:7b:34:d1:de:
         b3:e8:67:a8:79:f0:4e:c6:43:13:57:e2:ef:3c:f8:12:8b:67:
         4e:72:d8:96:c3:36:c9:79:51:26:13:15:5c:b7:3e:4b:76:6f:
         0f:04:21:d4:6f:25:e0:40:a3:14:1b:82:6a:19:ea:ad:06:bc:
         89:8f:a3:23:d2:14:ae:59:0e:f0:13:c5:69:a1:c7:1e:4b:be:
         ac:ad:e5:aa:b6:93:9b:16:e4:1d:75:03:ae:14:e5:f7:36:04:
         f7:05:ef:e5:59:32:e6:e9:78:56:2b:8b:da:e4:ed:ee:37:5a:
         66:49:3c:66:cb:d2:5c:3c:b7:3c:e0:95:a7:c0:d8:92:68:7d:
         5a:0b:0f:f3:ca:9e:04:46:76:bd:7b:e0:43:f5:0e:2f:61:03:
         58:82:85:a0:7c:e3:4e:b7:e0:59:cc:c8:99:63:dc:8b:58:7e:
         ef:fd:b0:bb:da:65:5e:ca:65:5b:51:29:1d:c3:4f:52:c8:45:
         3b:65:e9:a6:a1:be:27:17:95:31:e0:88:5e:6b:e9:92:3e:6d:
         9e:aa:63:e2:4e:eb:ac:e3:c0:49:55:9f:ec:af:36:40:87:56:
         d5:a2:aa:fb:39:28:c5:c4:11:02:d6:e5:32:d9:5b:8d:5e:d8:
         9c:29:35:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE
RkNBRENGRTYwHhcNMjQwNTE4MjEzMzM4WhcNMjQwNTI1MjEzMzM4WjAYMRYwFAYD
VQQDEw02NjQ5MWViMi03NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhakx3tpAqWpeEAGmFmueiIQSU3DzNImSlFUvTqPat6xPjXbr7iFisAb5Hfq
ulkhCq1HkXk50IeDNXPNmlSzK35q1uqh45L31GagbtvnU1cUvMCTR7MuDAlQ2f+w
AuROwrzPMOXXc98d39bSy0ETuaU5JqBzLE8wH89mE/BFAx3n9D3HzDZpOQPD5he3
ocDZeQ/29j1vEw7+KE47mqcZquxMCPVJgwsFMEhI/PRZsMWymX0SkNFPmSw9WWdA
+HSg9279e30ytPyqBo9VUQQ4q01Jb4vmWTcUPqpqmOOH03D3r02C9szMfUuwrCLO
AT5dfYVCrJaeiGVz4ffouIcA2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFstQqo
vjFUS2YDJuGqRSHugXX9MB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3
QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjM4RC8wMjU5QjYxRTk3QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJ
SThwNTAyY2d4UjdmeXR6LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC26b5hT7uEU28j+EzgCHs00d6z6GeoefBOxkMTV+LvPPgSi2dOctiW
wzbJeVEmExVctz5Ldm8PBCHUbyXgQKMUG4JqGeqtBryJj6Mj0hSuWQ7wE8Vpocce
S76sreWqtpObFuQddQOuFOX3NgT3Be/lWTLm6XhWK4va5O3uN1pmSTxmy9JcPLc8
4JWnwNiSaH1aCw/zyp4ERna9e+BD9Q4vYQNYgoWgfONOt+BZzMiZY9yLWH7v/bC7
2mVeymVbUSkdw09SyEU7Zemmob4nF5Ux4Ihea+mSPm2eqmPiTuus48BJVZ/srzZA
h1bVoqr7OSjFxBEC1uUy2VuNXticKTXJ
-----END CERTIFICATE-----
Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org