Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
File:                     7euW8EyNPtzL7rpAxCQpIqgTa1M.mft (raw, json)
Hash identifier:          wzVqwETPceu0btiI/lAgqvsPM5xJ5pawqHUDRF5pdr8=
Subject key identifier:   ED:35:0E:1A:E4:BE:B8:F3:DF:65:8D:96:91:27:07:B1:B7:DC:89:B8
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Certificate issuer:       /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
Manifest number:          05F5
Signing time:             Sun 19 May 2024 00:05:08 +0000
Manifest this update:     Sun 19 May 2024 00:05:07 +0000
Manifest next update:     Sun 26 May 2024 00:05:07 +0000
Files and hashes:         1: 7euW8EyNPtzL7rpAxCQpIqgTa1M.crl (hash: XGcIBJhBuFr4dZVhpx17VZsFKoZRb9IIDTNiUuAhy6U=)
                          2: 065B926242FA11EDA305BE3EC4F9AE02.roa (hash: arVEiQ3SSn6XOV1bxq4ke/bcEglvnYmljHXYFvXQI7E=)
                          3: CD251666E84911EE9947A115C4F9AE02.roa (hash: jeCTjTVnbd3o/HVnFYIzUPoCLZ8YGFGFV8uSS/jh1zQ=)
                          4: CC57C044E84911EE9947A115C4F9AE02.roa (hash: 8ep9fejIYcO1oyTxPGricb+ARf1ahFMYbBwrMkvOlA4=)
                          5: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (hash: seasjD9mrkxvMtSwLJkMgG+iOd+sJnw7Qi8FHN49FB4=)
                          6: 78287A4A8F9311EE9CC9E648C4F9AE02.roa (hash: UFPy/RpeLdxBA0rmBrNKilpA8FkaduYWvtGQGT/DL1I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
        Validity
            Not Before: May 19 00:05:07 2024 GMT
            Not After : May 26 00:05:07 2024 GMT
        Subject: CN=66494233-192f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:96:04:60:c9:4c:4d:6c:2f:19:af:b9:1e:
                    ab:dc:27:3c:5a:b7:4f:d0:39:45:45:91:2a:b5:03:
                    87:6c:10:7b:7b:32:2a:19:71:56:60:f1:7d:9d:67:
                    e1:f0:2b:28:1f:f9:75:b2:1c:82:2b:08:0e:63:ba:
                    8e:f0:e4:16:4c:75:a8:6a:71:cd:1c:93:fd:06:df:
                    38:4e:e5:54:91:55:d4:a2:f9:c0:c1:9b:85:d9:ce:
                    ee:e9:3d:c3:39:bb:ae:4b:e9:a9:1f:53:c6:b4:de:
                    c0:d0:85:51:6f:8d:47:de:55:c2:9d:0f:33:66:c6:
                    6f:dd:6b:0a:56:d9:1d:43:d0:4d:62:dc:75:29:26:
                    29:c5:54:ab:0b:d8:00:14:e2:da:4a:1a:97:9c:0f:
                    b5:4e:86:6c:19:85:ac:48:65:d6:b4:a8:4f:f4:6f:
                    4d:5a:da:28:33:e2:59:e8:9f:af:3c:2f:2c:7b:56:
                    3a:d6:1b:6d:a9:78:71:be:7a:db:2d:b7:3d:1f:19:
                    1c:05:16:2d:60:25:82:1f:1d:7c:45:ec:69:59:f8:
                    a9:e6:aa:d4:0b:1b:1d:fe:c8:bb:bd:b3:ce:eb:ce:
                    f1:2b:77:d0:a6:64:dd:a8:92:d1:24:1e:fd:c9:22:
                    81:b8:37:a1:56:40:28:9e:81:57:d3:c8:9d:e6:2a:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:0E:1A:E4:BE:B8:F3:DF:65:8D:96:91:27:07:B1:B7:DC:89:B8
            X509v3 Authority Key Identifier:
                keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:33:1d:17:7b:b6:52:05:8e:41:6e:66:a0:2f:4b:48:5b:
         11:63:f7:e8:8f:09:48:45:33:aa:1d:d8:55:e8:cd:96:f8:1b:
         89:c5:3b:a7:b6:fd:83:a1:53:23:f4:14:a8:b3:51:a2:28:3c:
         6e:b9:f7:78:56:25:48:e4:be:66:66:e0:52:06:fb:9e:93:69:
         3c:3d:b5:f0:23:b7:0a:e8:da:8f:31:b9:f3:c5:d3:77:5a:d2:
         c2:2a:d2:f2:ef:08:55:b9:5e:30:89:c7:0b:67:0f:da:35:c9:
         da:08:bc:c8:f8:7b:34:3f:32:40:2a:18:26:ad:10:4f:35:c7:
         3d:56:cc:ec:96:8c:ed:6e:db:84:47:a7:e2:8a:9a:18:1f:6e:
         93:78:fc:0b:fe:56:0f:9c:ff:ee:f5:20:26:01:95:96:22:1a:
         74:cb:db:fa:f1:c0:30:d0:99:d6:74:af:c0:65:44:b9:37:b6:
         bc:e7:af:82:3d:66:bb:4e:98:52:e9:bc:62:1c:0e:90:05:bb:
         eb:c7:af:40:6a:2d:83:ed:0b:b7:33:79:e6:5c:c8:b6:be:b8:
         72:8d:49:b7:9f:6b:0f:c7:8c:38:1f:4f:21:66:3f:de:fe:67:
         7b:1e:02:f4:36:81:17:aa:71:b4:fc:7f:d3:bb:87:4a:78:57:
         70:be:5a:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy
QTgxMzZCNTMwHhcNMjQwNTE5MDAwNTA3WhcNMjQwNTI2MDAwNTA3WjAYMRYwFAYD
VQQDEw02NjQ5NDIzMy0xOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAksSWBGDJTE1sLxmvuR6r3Cc8WrdP0DlFRZEqtQOHbBB7ezIqGXFWYPF9nWfh
8CsoH/l1shyCKwgOY7qO8OQWTHWoanHNHJP9Bt84TuVUkVXUovnAwZuF2c7u6T3D
ObuuS+mpH1PGtN7A0IVRb41H3lXCnQ8zZsZv3WsKVtkdQ9BNYtx1KSYpxVSrC9gA
FOLaShqXnA+1ToZsGYWsSGXWtKhP9G9NWtooM+JZ6J+vPC8se1Y61httqXhxvnrb
Lbc9HxkcBRYtYCWCHx18RexpWfip5qrUCxsd/si7vbPO687xK3fQpmTdqJLRJB79
ySKBuDehVkAonoFX08id5ip/OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO01Dhrk
vrjz32WNlpEnB7G33Im4MB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG
ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTFGRS8zODYyMzVGMDZGODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0
ekw3cnBBeENRcElxZ1RhMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7RDMdF3u2UgWOQW5moC9LSFsRY/fojwlIRTOqHdhV6M2W+BuJxTun
tv2DoVMj9BSos1GiKDxuufd4ViVI5L5mZuBSBvuek2k8PbXwI7cK6NqPMbnzxdN3
WtLCKtLy7whVuV4wiccLZw/aNcnaCLzI+Hs0PzJAKhgmrRBPNcc9VszsloztbtuE
R6fiipoYH26TePwL/lYPnP/u9SAmAZWWIhp0y9v68cAw0JnWdK/AZUS5N7a856+C
PWa7TphS6bxiHA6QBbvrx69Aai2D7Qu3M3nmXMi2vrhyjUm3n2sPx4w4H08hZj/e
/md7HgL0NoEXqnG0/H/Tu4dKeFdwvloz
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org