Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File:                     xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier:          2Fv0mA2tDZrlLyMjSId2otU3BOCs6kGzEM9r6TU083I=
Subject key identifier:   2D:E3:FF:E0:3D:60:47:B7:EF:C9:66:C2:AF:EA:67:CF:C9:44:3A:F0
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number:          9E
Signing time:             Mon 13 May 2024 06:53:02 +0000
Manifest this update:     Mon 13 May 2024 06:53:01 +0000
Manifest next update:     Mon 20 May 2024 06:53:01 +0000
Files and hashes:         1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: LXuC2913z4UZoOMoocaHzquLE4uNA87efeOERy2M6eM=)
                          2: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=)
                          3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=)
                          4: 38A8C602296011EEA8C6E645C4F9AE02.roa (hash: 7iSRAuuGUowQHuYkrt9kMhGQ/KkLrZ5lfcWCt+JN0bI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 06:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: May 13 06:53:01 2024 GMT
            Not After : May 20 06:53:01 2024 GMT
        Subject: CN=6641b8ce-2da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:a2:b3:9b:bb:e8:69:8c:06:03:57:f3:1d:
                    fd:15:f8:75:1c:ff:bf:b8:05:3b:d9:42:fb:61:be:
                    6b:c3:7f:5f:9a:c8:5b:1b:a8:5e:20:a3:67:24:f1:
                    81:a8:05:d1:3d:29:96:b5:dd:35:7f:1e:78:a5:95:
                    c3:c4:7c:81:a8:5c:55:9a:11:43:6a:3d:bd:ec:34:
                    ab:b9:46:b4:e3:10:fd:b4:49:06:26:3b:a4:9d:fa:
                    26:1c:75:aa:52:92:a7:56:21:c5:7e:e8:2a:42:0a:
                    c7:bf:79:af:99:87:fc:74:94:1f:fd:7c:36:bd:dc:
                    dd:c4:47:fb:e1:3a:b1:4b:64:be:4c:0c:bd:5e:d8:
                    19:27:48:06:8e:d1:60:2b:03:c6:2c:fd:69:52:12:
                    72:e2:99:ce:eb:34:51:6a:21:99:9c:df:65:dc:f0:
                    5f:e0:3a:fe:00:92:af:c7:36:ed:5f:f0:eb:38:67:
                    81:86:19:83:30:fd:6f:ce:0c:38:fb:20:e5:57:20:
                    c4:42:97:8f:79:18:2b:74:16:89:5d:76:71:d0:c0:
                    f1:3c:31:85:f0:dc:4e:7e:02:db:ff:d7:ef:9b:0d:
                    51:36:24:2a:59:c9:10:bc:68:9c:5d:dc:b3:0e:f5:
                    a9:c8:2e:aa:c0:4b:41:be:7a:bd:b1:82:f8:f5:65:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:FF:E0:3D:60:47:B7:EF:C9:66:C2:AF:EA:67:CF:C9:44:3A:F0
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:2a:21:2f:9b:d8:19:51:34:a4:c8:9e:90:84:bb:58:d7:
         b9:48:59:74:03:bd:07:cd:7e:57:39:3f:fa:83:92:ae:88:6d:
         69:ac:9b:4c:98:58:ba:f2:09:a7:d6:4a:a7:4e:9d:d3:47:70:
         0e:db:9b:c9:41:28:56:e7:19:72:d0:dc:a2:d4:10:c7:bb:3c:
         15:60:13:84:45:45:f7:e5:d5:e0:45:bb:5c:77:8e:1a:89:6a:
         7f:1f:86:13:ea:a9:34:93:fb:bc:e6:f2:8b:76:3b:be:c1:35:
         bd:e4:55:78:c8:f3:6f:50:99:7e:9a:8c:80:e8:e7:6f:98:7d:
         a7:3e:08:15:d4:82:e2:ed:4a:1b:37:a1:77:45:4a:cd:47:4b:
         dc:f6:20:27:e1:77:68:6a:79:b8:f2:fc:95:89:d0:ae:a0:9c:
         5c:7b:1a:b9:d4:42:9c:5d:65:3a:ea:7a:ec:63:4f:4d:a3:a6:
         71:ba:6f:c8:87:98:e0:e7:4d:73:9d:65:63:bf:f4:20:aa:46:
         b4:df:36:e0:e9:2f:ad:ce:dd:e2:19:ce:b3:0b:47:ab:42:ea:
         1a:e0:b4:50:f6:e5:ee:18:8d:69:c9:32:4f:99:d6:a5:d2:72:
         37:95:e2:83:54:6a:af:b7:2f:08:7a:7f:db:ec:e5:b7:79:22:
         a9:1d:03:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB
NDk2RjQ0OTkwHhcNMjQwNTEzMDY1MzAxWhcNMjQwNTIwMDY1MzAxWjAYMRYwFAYD
VQQDEw02NjQxYjhjZS0yZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKuis5u76GmMBgNX8x39Ffh1HP+/uAU72UL7Yb5rw39fmshbG6heIKNnJPGB
qAXRPSmWtd01fx54pZXDxHyBqFxVmhFDaj297DSruUa04xD9tEkGJjuknfomHHWq
UpKnViHFfugqQgrHv3mvmYf8dJQf/Xw2vdzdxEf74TqxS2S+TAy9XtgZJ0gGjtFg
KwPGLP1pUhJy4pnO6zRRaiGZnN9l3PBf4Dr+AJKvxzbtX/DrOGeBhhmDMP1vzgw4
+yDlVyDEQpePeRgrdBaJXXZx0MDxPDGF8NxOfgLb/9fvmw1RNiQqWckQvGicXdyz
DvWpyC6qwEtBvnq9sYL49WXs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3j/+A9
YEe378lmwq/qZ8/JRDrwMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3
MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k
ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCudyohL5vYGVE0pMiekIS7WNe5SFl0A70HzX5XOT/6g5KuiG1prJtM
mFi68gmn1kqnTp3TR3AO25vJQShW5xly0Nyi1BDHuzwVYBOERUX35dXgRbtcd44a
iWp/H4YT6qk0k/u85vKLdju+wTW95FV4yPNvUJl+moyA6OdvmH2nPggV1ILi7Uob
N6F3RUrNR0vc9iAn4Xdoanm48vyVidCuoJxcexq51EKcXWU66nrsY09No6Zxum/I
h5jg501znWVjv/Qgqka03zbg6S+tzt3iGc6zC0erQuoa4LRQ9uXuGI1pyTJPmdal
0nI3leKDVGqvty8Ien/b7OW3eSKpHQM6
-----END CERTIFICATE-----
Generated at Mon May 13 12:07:25 2024 by rpki-client on console-ams.rpki-client.org