Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          YCNxBz/z+pnZ3d8k0sQALxAuAaP1xufKxLR0DVvryAI=
Subject key identifier:   E3:C1:7A:21:0B:4B:2E:4C:7B:A6:7C:5D:69:44:6E:8E:B6:61:21:5A
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          A1
Signing time:             Sun 19 May 2024 06:44:45 +0000
Manifest this update:     Sun 19 May 2024 06:44:45 +0000
Manifest next update:     Sun 26 May 2024 06:44:45 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: Z+zbQ72VrP/7MP02a8L/7igHsPuRpt0cLJEQTosHRZA=)
                          2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: 9Xhq5syXnhM7rA7mq85gbiRpbgozkv4RbS/EX7KACYk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: May 19 06:44:45 2024 GMT
            Not After : May 26 06:44:45 2024 GMT
        Subject: CN=66499fdd-383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:e6:bb:00:f0:b3:93:d8:05:e1:8a:54:57:
                    b8:6d:eb:7e:86:19:47:af:db:16:76:07:9e:12:63:
                    95:64:87:03:fa:f8:ca:14:b7:b3:85:89:de:25:fe:
                    6f:64:bc:32:00:d7:3e:16:7d:a1:ba:96:77:6d:c9:
                    96:dc:de:d3:8b:6a:90:cb:6a:4b:ac:32:8b:ed:14:
                    cf:c4:d1:b1:bb:97:90:f6:3b:da:e4:93:86:a4:4d:
                    47:01:5e:10:3c:dc:c0:3e:7b:2c:6a:5f:a9:f8:2a:
                    ee:84:9f:97:0e:ba:ea:a0:9c:2f:72:20:3c:15:47:
                    5c:7b:8e:bb:ed:0a:c8:99:09:e5:16:a1:57:5a:43:
                    11:cd:fb:df:dc:c7:40:91:66:dd:aa:95:f8:75:29:
                    4b:89:79:7e:b4:58:2a:79:29:59:02:35:bc:c5:70:
                    cd:8e:cd:90:76:cb:8b:13:c3:7e:e0:18:f8:07:81:
                    1d:de:df:84:02:65:e3:e5:10:e8:29:b2:a4:08:0d:
                    91:b5:3d:26:44:4f:24:61:a2:0c:00:cd:7d:24:0e:
                    3a:b5:53:b8:5d:81:d7:be:3b:2b:3e:15:5b:2a:46:
                    52:05:e4:1c:fa:f4:33:52:1d:ca:f0:53:87:a1:e5:
                    9e:dd:1d:a9:b5:b0:f6:67:33:8c:f3:7f:7b:02:db:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:7A:21:0B:4B:2E:4C:7B:A6:7C:5D:69:44:6E:8E:B6:61:21:5A
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:26:7b:41:00:09:d5:6c:1f:16:ba:1e:93:4f:4d:e5:37:62:
         94:cf:10:6a:0d:54:4c:c3:38:7f:8f:64:96:83:2b:5a:43:20:
         71:fe:08:55:e0:da:3e:56:d5:c8:2e:d2:28:ab:24:9c:76:86:
         cb:5d:52:86:37:bb:05:96:6e:88:52:ae:7b:6c:0a:79:24:8d:
         9c:ab:e7:d4:60:00:9a:f8:d3:1c:02:24:1f:a3:0f:53:3d:55:
         32:3d:8d:2e:2e:bd:f8:e5:93:bf:18:87:b3:7a:06:a5:c9:f8:
         b1:00:1f:09:4f:b8:73:0b:a1:6b:be:9b:9e:d1:8a:d8:30:03:
         14:63:ed:ae:4b:9a:a9:fc:33:46:11:34:6c:4a:d8:9e:d6:f4:
         69:70:6e:46:e5:50:55:76:4b:97:d9:35:6c:70:00:8a:dc:bd:
         f2:4f:d9:a0:a5:8e:03:c0:63:28:95:cf:55:d7:39:8c:2e:d5:
         85:89:84:82:d4:64:80:35:07:94:ed:4b:5d:5e:f6:a6:16:72:
         4f:0e:b1:c0:27:fe:18:3b:2d:22:a8:08:18:88:b8:95:ff:de:
         12:ba:10:3b:b2:a3:4f:b7:36:9f:e2:ea:a2:a9:eb:82:61:08:
         30:99:3c:e6:e4:f3:b6:59:31:25:5d:7c:7a:32:d5:65:3d:ef:
         2a:e7:9d:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE
MjY2M0Q2QUUwHhcNMjQwNTE5MDY0NDQ1WhcNMjQwNTI2MDY0NDQ1WjAYMRYwFAYD
VQQDEw02NjQ5OWZkZC0zODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ObmuwDws5PYBeGKVFe4bet+hhlHr9sWdgeeEmOVZIcD+vjKFLezhYneJf5v
ZLwyANc+Fn2hupZ3bcmW3N7Ti2qQy2pLrDKL7RTPxNGxu5eQ9jva5JOGpE1HAV4Q
PNzAPnssal+p+CruhJ+XDrrqoJwvciA8FUdce4677QrImQnlFqFXWkMRzfvf3MdA
kWbdqpX4dSlLiXl+tFgqeSlZAjW8xXDNjs2QdsuLE8N+4Bj4B4Ed3t+EAmXj5RDo
KbKkCA2RtT0mRE8kYaIMAM19JA46tVO4XYHXvjsrPhVbKkZSBeQc+vQzUh3K8FOH
oeWe3R2ptbD2ZzOM8397AtuqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPBeiEL
Sy5Me6Z8XWlEbo62YSFaMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF
RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjAwNC8yMDFGNjg2MDFFRjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNH
NDUzcUNQNlZCRXpTWmoxcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEJntBAAnVbB8Wuh6TT03lN2KUzxBqDVRMwzh/j2SWgytaQyBx/ghV
4No+VtXILtIoqyScdobLXVKGN7sFlm6IUq57bAp5JI2cq+fUYACa+NMcAiQfow9T
PVUyPY0uLr345ZO/GIezegalyfixAB8JT7hzC6Frvpue0YrYMAMUY+2uS5qp/DNG
ETRsStie1vRpcG5G5VBVdkuX2TVscACK3L3yT9mgpY4DwGMolc9V1zmMLtWFiYSC
1GSANQeU7UtdXvamFnJPDrHAJ/4YOy0iqAgYiLiV/94SuhA7sqNPtzaf4uqiqeuC
YQgwmTzm5PO2WTElXXx6MtVlPe8q553P
-----END CERTIFICATE-----
Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org