Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
File:                     RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json)
Hash identifier:          A5Q6F4lfbHwAaUZogseiZq+SS5FrqXmWEeD0ho2YsUo=
Subject key identifier:   A1:22:12:32:E6:B1:51:44:96:13:D9:5A:3F:D4:04:56:55:36:30:17
Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B
Certificate issuer:       /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
Certificate serial:       046E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
Manifest number:          0467
Signing time:             Sun 19 May 2024 01:46:51 +0000
Manifest this update:     Sun 19 May 2024 01:46:51 +0000
Manifest next update:     Sun 26 May 2024 01:46:51 +0000
Files and hashes:         1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: Quu48tJzd8Epvck02QV6x1HrDuLwekpV4v0SqAkX9I0=)
                          2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: szG9o84JwhJF7ZqqfGrr+Bp+3V+qvGW0UIeFIre0N30=)
                          3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: hwyEcWxcD0jdnSqRat0zxBBURHrGVwv/y11/VsXkjfQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl
                          rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B
        Validity
            Not Before: May 19 01:46:51 2024 GMT
            Not After : May 26 01:46:51 2024 GMT
        Subject: CN=66495a0b-031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:f7:93:02:78:39:e2:eb:30:ef:f2:5a:5d:
                    4f:63:1f:6c:25:6a:67:e7:82:e9:36:63:97:7d:d8:
                    27:37:6d:75:80:f4:dd:1b:72:ea:d9:e7:8a:bb:f0:
                    d2:c9:37:87:24:b5:45:8a:08:bb:23:0c:74:f4:1b:
                    bf:9f:4c:6d:26:fe:70:50:0d:0d:a4:96:0a:b3:02:
                    30:9e:75:d8:04:22:35:d0:8a:81:2e:e6:90:a5:75:
                    29:a2:5b:95:77:92:4e:10:f3:62:bb:de:58:8d:60:
                    2c:f9:b9:eb:8c:3c:01:e5:69:d6:f2:74:01:ad:10:
                    0e:33:e3:04:f1:55:20:25:6a:a9:49:a4:b5:15:9e:
                    55:ec:5f:9d:a0:3f:52:e5:b4:c7:ff:08:21:97:5f:
                    5b:52:35:35:4c:84:8c:e9:56:b3:44:a3:2c:7b:ff:
                    3a:f0:f2:61:5e:e8:5a:db:c3:ec:1f:2d:b1:f0:17:
                    62:28:ee:17:cc:06:02:9c:0f:9f:5c:2c:25:a8:9a:
                    a6:a0:c9:99:fb:0d:a2:c5:9a:4e:43:c6:ac:77:9d:
                    b6:9b:76:8b:e4:ba:da:f5:f7:15:d2:f0:03:27:88:
                    21:bc:98:e6:dc:0f:60:ed:83:c6:1b:3b:ab:74:81:
                    d4:27:4d:d6:52:30:59:86:1a:b6:84:f0:b9:00:43:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:12:32:E6:B1:51:44:96:13:D9:5A:3F:D4:04:56:55:36:30:17
            X509v3 Authority Key Identifier:
                keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:76:6f:78:e3:c9:b2:6c:9a:73:65:37:e8:49:f3:e4:04:
         93:6f:27:37:76:de:12:02:3c:1d:11:ad:60:72:b0:33:ce:b1:
         9c:47:5e:aa:2f:0e:91:46:28:cd:4f:ae:43:15:f4:d6:1e:b8:
         0c:24:18:e2:85:3f:14:e7:27:15:03:dc:7f:8e:ed:84:af:7f:
         d6:50:38:b4:c4:64:80:fd:65:76:50:f3:e6:c6:5d:ae:30:da:
         cb:ee:29:0f:f7:ea:b9:b9:89:df:3b:70:47:dc:f3:0f:ee:30:
         4b:7d:76:cb:b8:9e:fd:60:de:0f:a1:02:6d:f0:36:41:c5:49:
         38:f2:c9:58:b7:ed:51:32:ad:2d:56:d9:3b:16:cd:72:ca:5b:
         ab:d8:b3:4c:df:40:e2:99:4b:2d:bc:51:4a:12:9a:ad:ba:a5:
         8a:5c:29:6f:4e:34:db:74:d4:20:53:29:07:80:c0:10:4c:28:
         31:8d:3e:8a:0a:e4:80:8d:1b:72:53:94:43:1b:1c:db:bb:ca:
         a1:07:77:73:4f:c7:0e:ff:6d:c8:77:2d:28:db:8f:cb:d3:82:
         c2:24:b9:eb:16:d5:5e:aa:df:f2:42:83:39:b9:02:5e:7f:c7:
         c7:2a:9b:7e:e1:5c:2d:0d:4f:09:6a:b6:61:fa:59:f2:0d:d9:
         c9:53:b1:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2
N0IwMEZDNUIwHhcNMjQwNTE5MDE0NjUxWhcNMjQwNTI2MDE0NjUxWjAYMRYwFAYD
VQQDEw02NjQ5NWEwYi0wMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvmX3kwJ4OeLrMO/yWl1PYx9sJWpn54LpNmOXfdgnN211gPTdG3Lq2eeKu/DS
yTeHJLVFigi7Iwx09Bu/n0xtJv5wUA0NpJYKswIwnnXYBCI10IqBLuaQpXUpoluV
d5JOEPNiu95YjWAs+bnrjDwB5WnW8nQBrRAOM+ME8VUgJWqpSaS1FZ5V7F+doD9S
5bTH/wghl19bUjU1TISM6VazRKMse/868PJhXuha28PsHy2x8BdiKO4XzAYCnA+f
XCwlqJqmoMmZ+w2ixZpOQ8asd522m3aL5Lra9fcV0vADJ4ghvJjm3A9g7YPGGzur
dIHUJ03WUjBZhhq2hPC5AENVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEiEjLm
sVFElhPZWj/UBFZVNjAXMB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF
ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODJGQi85OTRENkRBNkZFODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdy
ajZyX1l2SjVEeTVuc0FfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxs3ZveOPJsmyac2U36Enz5ASTbyc3dt4SAjwdEa1gcrAzzrGcR16q
Lw6RRijNT65DFfTWHrgMJBjihT8U5ycVA9x/ju2Er3/WUDi0xGSA/WV2UPPmxl2u
MNrL7ikP9+q5uYnfO3BH3PMP7jBLfXbLuJ79YN4PoQJt8DZBxUk48slYt+1RMq0t
Vtk7Fs1yylur2LNM30DimUstvFFKEpqtuqWKXClvTjTbdNQgUykHgMAQTCgxjT6K
CuSAjRtyU5RDGxzbu8qhB3dzT8cO/23Idy0o24/L04LCJLnrFtVeqt/yQoM5uQJe
f8fHKpt+4VwtDU8JarZh+lnyDdnJU7Ed
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:09 2024 by rpki-client on console-ams.rpki-client.org