Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
File:                     yVIsOLleGYHYPa86djWzGQlA_Fs.mft (raw, json)
Hash identifier:          dgDLI0sq2QcgcTTmt9NLF//NY9fWXWkNeoh6rFNv7pQ=
Subject key identifier:   04:20:52:7A:6D:41:F3:B5:05:C1:58:79:F5:0C:1D:84:A5:45:F9:A4
Authority key identifier: C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B
Certificate issuer:       /CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
Manifest number:          0467
Signing time:             Sun 19 May 2024 01:47:10 +0000
Manifest this update:     Sun 19 May 2024 01:47:09 +0000
Manifest next update:     Sun 26 May 2024 01:47:09 +0000
Files and hashes:         1: yVIsOLleGYHYPa86djWzGQlA_Fs.crl (hash: Wm8hYUwwHM9B5RXYpuaDLz/3X0uNFtA3H8FMI2qF7uM=)
                          2: 7EE8D4EAFF2311EB9FF89E53C4F9AE02.roa (hash: vc1gtB9xAcIGraqnYKfjHKZi9FvOmzyeoP+IzPibr9k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180161/serialNumber=C9522C38B95E1981D83DAF3A7635B3190940FC5B
        Validity
            Not Before: May 19 01:47:09 2024 GMT
            Not After : May 26 01:47:09 2024 GMT
        Subject: CN=66495a1d-2a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:74:f9:da:f1:d9:17:83:ce:8b:7f:95:8a:
                    a3:d7:48:2d:90:e9:eb:b0:1f:9a:91:1b:49:19:47:
                    10:f7:4d:c0:b4:d4:27:06:25:fd:b0:ae:2c:35:f6:
                    3a:9f:53:ec:49:29:8a:3f:14:a4:24:f3:f6:5a:c3:
                    f0:ea:bb:37:01:d1:a1:21:eb:d8:19:0a:56:a4:fd:
                    94:b9:54:5f:20:89:4d:1a:f0:76:23:46:7a:ea:71:
                    83:8c:08:02:7e:ca:82:6d:b3:7f:08:4b:30:0b:3d:
                    22:ea:59:a5:2d:9f:91:f9:c1:d8:6c:19:c7:74:e2:
                    4f:d5:83:7c:5b:91:2f:37:85:bd:8e:da:25:01:af:
                    fa:bb:ca:d1:56:cc:3a:73:16:d6:17:fa:e4:1f:21:
                    ea:46:2f:66:39:af:c5:2a:ad:63:a7:42:74:38:41:
                    62:d3:b0:1d:91:b4:d8:65:1e:8f:81:67:93:8a:e5:
                    15:88:2b:a1:d6:b8:29:01:f9:ed:6b:0e:8f:13:ad:
                    35:0a:42:56:0b:67:0e:3a:a5:a9:55:cb:7e:2d:2b:
                    ad:d0:d3:4d:fa:13:a6:63:5e:8b:5b:c7:a2:7a:78:
                    a4:5b:b0:3f:c5:19:db:92:95:49:62:1e:68:01:3c:
                    73:78:38:02:81:93:28:8a:d4:db:a4:89:20:ad:5b:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:20:52:7A:6D:41:F3:B5:05:C1:58:79:F5:0C:1D:84:A5:45:F9:A4
            X509v3 Authority Key Identifier:
                keyid:C9:52:2C:38:B9:5E:19:81:D8:3D:AF:3A:76:35:B3:19:09:40:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVIsOLleGYHYPa86djWzGQlA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180161/78309E24FF2011EBA06F520DC4F9AE02/yVIsOLleGYHYPa86djWzGQlA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:c9:33:49:6d:73:d6:20:18:04:7c:90:ff:04:e6:d0:73:
         c3:f1:4f:88:77:59:75:f1:1a:6c:ac:f5:d4:c9:7b:a8:e6:0c:
         5d:e1:84:c8:ba:91:22:92:85:41:0b:1b:53:a3:0f:ba:d5:66:
         48:e0:96:81:79:fe:23:ac:24:11:9a:08:ef:6c:0b:a1:14:43:
         9f:91:1d:34:48:3d:a7:13:5d:87:bd:06:dc:c8:2e:3c:47:a4:
         9d:c5:e1:c1:c1:8e:e0:49:e9:4f:c9:80:5e:1f:2d:ef:15:2b:
         4b:24:93:66:90:b2:57:19:4a:ed:10:b0:d8:33:59:ba:88:bb:
         96:26:f6:64:03:fa:43:ec:fe:b1:49:c3:f5:11:e7:36:eb:23:
         f5:79:09:8c:9d:24:e0:b0:8f:e9:b5:3a:be:1f:7c:0a:ec:b6:
         bf:52:f2:49:af:63:fb:e4:99:21:3e:68:90:cc:6a:69:e2:8a:
         09:86:18:0f:45:82:1d:9c:5a:7a:96:f6:58:44:72:b4:dd:01:
         ba:e2:0f:d3:b6:66:be:02:bc:ba:e2:9b:78:b0:24:0c:04:34:
         65:21:b9:30:13:59:fb:01:ea:21:ba:5d:42:d5:3e:60:99:f7:
         dc:a5:5a:3e:a8:59:04:f1:2a:66:e0:92:f0:5b:f7:73:bd:73:
         02:99:95:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNjExMTAvBgNVBAUTKEM5NTIyQzM4Qjk1RTE5ODFEODNEQUYzQTc2MzVCMzE5
MDk0MEZDNUIwHhcNMjQwNTE5MDE0NzA5WhcNMjQwNTI2MDE0NzA5WjAYMRYwFAYD
VQQDEw02NjQ5NWExZC0yYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGt0+drx2ReDzot/lYqj10gtkOnrsB+akRtJGUcQ903AtNQnBiX9sK4sNfY6
n1PsSSmKPxSkJPP2WsPw6rs3AdGhIevYGQpWpP2UuVRfIIlNGvB2I0Z66nGDjAgC
fsqCbbN/CEswCz0i6lmlLZ+R+cHYbBnHdOJP1YN8W5EvN4W9jtolAa/6u8rRVsw6
cxbWF/rkHyHqRi9mOa/FKq1jp0J0OEFi07AdkbTYZR6PgWeTiuUViCuh1rgpAfnt
aw6PE601CkJWC2cOOqWpVct+LSut0NNN+hOmY16LW8eienikW7A/xRnbkpVJYh5o
ATxzeDgCgZMoitTbpIkgrVsdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQgUnpt
QfO1BcFYefUMHYSlRfmkMB8GA1UdIwQYMBaAFMlSLDi5XhmB2D2vOnY1sxkJQPxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2MS83ODMwOUUyNEZG
MjAxMUVCQTA2RjUyMERDNEY5QUUwMi95VklzT0xsZUdZSFlQYTg2ZGpXekdRbEFf
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWSXNPTGxlR1lIWVBhODZkald6R1FsQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE2MS83ODMwOUUyNEZGMjAxMUVCQTA2RjUyMERDNEY5QUUwMi95VklzT0xsZUdZ
SFlQYTg2ZGpXekdRbEFfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAanckzSW1z1iAYBHyQ/wTm0HPD8U+Id1l18RpsrPXUyXuo5gxd4YTI
upEikoVBCxtTow+61WZI4JaBef4jrCQRmgjvbAuhFEOfkR00SD2nE12HvQbcyC48
R6SdxeHBwY7gSelPyYBeHy3vFStLJJNmkLJXGUrtELDYM1m6iLuWJvZkA/pD7P6x
ScP1Eec26yP1eQmMnSTgsI/ptTq+H3wK7La/UvJJr2P75JkhPmiQzGpp4ooJhhgP
RYIdnFp6lvZYRHK03QG64g/Ttma+Ary64pt4sCQMBDRlIbkwE1n7Aeohul1C1T5g
mffcpVo+qFkE8Spm4JLwW/dzvXMCmZUh
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org