Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File:                     cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier:          0hokAYyLiweZcamf3PhKN9x9OY0gDdZblnV9HS7hZNA=
Subject key identifier:   61:EE:7C:5F:BC:B4:86:7E:53:6A:F5:AD:2C:92:26:B4:62:1F:3F:E5
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer:       /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number:          50
Signing time:             Sun 19 May 2024 08:03:35 +0000
Manifest this update:     Sun 19 May 2024 08:03:34 +0000
Manifest next update:     Sun 26 May 2024 08:03:34 +0000
Files and hashes:         1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: 1RaaOR/8iHd/Def1nUTxQwP2eUQ+a66tVGw1LkdfbT4=)
                          2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: fjydwDrZROwxfgj42CG2gOq+dhBEEh9PfDMSPGOK9ts=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
                          rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
        Validity
            Not Before: May 19 08:03:34 2024 GMT
            Not After : May 26 08:03:34 2024 GMT
        Subject: CN=6649b256-f6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:f9:98:2a:f7:da:ac:af:60:03:df:65:48:
                    d9:8d:fd:a3:99:3b:68:e7:47:e3:9e:97:df:71:4e:
                    45:17:0d:43:02:e8:00:6e:9e:76:36:db:42:d2:a4:
                    0f:46:10:00:78:f7:52:d2:37:6e:1c:0d:a4:6d:98:
                    01:6d:89:86:36:c5:16:6e:f2:c4:f6:c2:ba:cd:9f:
                    cf:be:1c:67:43:56:2b:21:2f:70:24:d9:20:df:bf:
                    ee:4b:84:2c:09:06:be:82:ac:97:2e:03:23:b8:57:
                    cb:43:3a:46:b9:cb:07:5b:9d:79:9b:b8:2c:6a:c7:
                    60:88:cc:e3:f9:15:a9:bf:31:72:bf:32:cd:36:33:
                    ff:cc:f2:4e:97:83:89:21:56:78:5c:ac:ab:ae:1c:
                    b4:c0:38:4c:76:88:29:bd:af:ba:1f:e6:0f:8a:26:
                    ab:10:63:b2:1f:73:a1:cd:59:45:2e:52:df:c9:0f:
                    0b:4f:b6:49:9d:7a:73:13:36:34:56:9f:d5:90:05:
                    2b:3c:c0:8a:7e:ee:a8:be:1e:f1:8a:8f:29:be:ad:
                    1b:18:23:01:19:a9:ff:95:de:31:c2:69:bd:cf:ba:
                    27:2f:91:0f:47:6f:d7:38:69:be:4b:a0:0b:71:fb:
                    2b:50:5b:15:96:dc:77:2b:04:36:27:40:04:3b:9a:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EE:7C:5F:BC:B4:86:7E:53:6A:F5:AD:2C:92:26:B4:62:1F:3F:E5
            X509v3 Authority Key Identifier:
                keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:91:74:26:c8:09:c7:c4:eb:35:da:3c:9e:2a:b6:80:33:e9:
         d4:21:1c:f7:55:52:57:9d:12:54:d1:84:c4:e9:09:b2:cb:d4:
         76:85:5b:68:b5:0b:5f:d4:cc:aa:a2:71:8d:1f:5e:6e:fc:bc:
         3c:04:f4:83:e6:dd:19:2b:91:e6:54:68:8a:dc:68:5c:b6:38:
         19:fd:c6:e4:53:af:ba:9a:83:92:ba:0c:ca:1c:dd:ff:da:db:
         b4:d4:84:ca:aa:45:c5:f9:3e:50:8d:c4:35:da:c2:86:a0:f3:
         fa:d3:28:61:93:4e:63:b5:4c:1c:e5:1b:5d:05:26:82:d1:4e:
         89:ea:1a:a3:22:76:5f:37:b8:da:a7:34:60:7c:b3:bc:9d:56:
         7d:c6:16:39:2f:3c:6c:da:97:78:6f:43:d1:17:f6:a2:ab:40:
         4b:28:7b:3f:f7:8e:65:06:d2:fe:59:50:dc:97:43:c3:da:71:
         9d:c7:10:2e:ad:6b:e8:9d:b1:03:0c:be:43:8f:1e:23:cb:95:
         3b:78:c3:64:2f:8c:5d:0d:90:51:f9:49:b3:39:14:25:1a:29:
         8d:3f:b9:27:99:74:26:d0:d1:7c:a7:57:0b:48:a1:02:c7:76:
         9e:2a:4c:fb:10:10:78:02:e6:01:43:79:3c:7c:7e:7e:40:ce:
         5a:fa:02:cd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDVDRTExMC8GA1UEBRMoNzI5MjZGQzYwRjdDMTg0QTYxRDczQkQwOTRBQTZBMzg2
QjYzMDAyQTAeFw0yNDA1MTkwODAzMzRaFw0yNDA1MjYwODAzMzRaMBgxFjAUBgNV
BAMTDTY2NDliMjU2LWY2YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsNPmYKvfarK9gA99lSNmN/aOZO2jnR+Oel99xTkUXDUMC6ABunnY220LSpA9G
EAB491LSN24cDaRtmAFtiYY2xRZu8sT2wrrNn8++HGdDVishL3Ak2SDfv+5LhCwJ
Br6CrJcuAyO4V8tDOka5ywdbnXmbuCxqx2CIzOP5Fam/MXK/Ms02M//M8k6Xg4kh
VnhcrKuuHLTAOEx2iCm9r7of5g+KJqsQY7Ifc6HNWUUuUt/JDwtPtkmdenMTNjRW
n9WQBSs8wIp+7qi+HvGKjym+rRsYIwEZqf+V3jHCab3PuicvkQ9Hb9c4ab5LoAtx
+ytQWxWW3HcrBDYnQAQ7mrMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYe58X7y0
hn5TavWtLJImtGIfP+UwHwYDVR0jBBgwFoAUcpJvxg98GEph1zvQlKpqOGtjACow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNUNFLzBFQjA5RDM2QUU3
NDExRUU4Q0VEMjM1Q0M0RjlBRTAyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFD
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY3BKdnhnOThHRXBoMXp2UWxLcHFPR3RqQUNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
NUNFLzBFQjA5RDM2QUU3NDExRUU4Q0VEMjM1Q0M0RjlBRTAyL2NwSnZ4Zzk4R0Vw
aDF6dlFsS3BxT0d0akFDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADORdCbICcfE6zXaPJ4qtoAz6dQhHPdVUledElTRhMTpCbLL1HaFW2i1
C1/UzKqicY0fXm78vDwE9IPm3RkrkeZUaIrcaFy2OBn9xuRTr7qag5K6DMoc3f/a
27TUhMqqRcX5PlCNxDXawoag8/rTKGGTTmO1TBzlG10FJoLRTonqGqMidl83uNqn
NGB8s7ydVn3GFjkvPGzal3hvQ9EX9qKrQEsoez/3jmUG0v5ZUNyXQ8PacZ3HEC6t
a+idsQMMvkOPHiPLlTt4w2QvjF0NkFH5SbM5FCUaKY0/uSeZdCbQ0XynVwtIoQLH
dp4qTPsQEHgC5gFDeTx8fn5Azlr6As0=
-----END CERTIFICATE-----
Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org