Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
File:                     kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json)
Hash identifier:          2/MNkHyDikkmm4T6+7nL+JKMGValGmGQXiYMBzzgryQ=
Subject key identifier:   94:B4:79:D8:C0:C6:7C:13:12:D8:DD:78:C3:06:98:0E:16:BA:2D:68
Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4
Certificate issuer:       /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
Manifest number:          0801
Signing time:             Fri 31 May 2024 22:39:23 +0000
Manifest this update:     Fri 31 May 2024 22:39:23 +0000
Manifest next update:     Fri 07 Jun 2024 22:39:23 +0000
Files and hashes:         1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: ktBMWV3w4cwg4/+6PzmVT6iMnvK0Y5TFVSrdMuF41rs=)
                          2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: Y0o7/HKtcH1NN/yWT+yuyqcdDZa4lqAdEtD3R2MaRJs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4
        Validity
            Not Before: May 31 22:39:23 2024 GMT
            Not After : Jun  7 22:39:23 2024 GMT
        Subject: CN=665a519b-e02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:a2:08:c9:2a:7f:ad:52:d9:db:be:61:59:
                    63:a0:56:65:8c:7c:b5:85:a5:ee:a1:49:a2:1a:78:
                    7a:e7:41:ed:85:55:20:7a:b2:34:53:d7:a9:43:8d:
                    03:5e:67:b9:87:5e:c6:aa:fe:df:c4:73:fb:fa:af:
                    ee:6b:6e:a9:df:43:49:ba:eb:d7:6c:43:3e:4e:8a:
                    75:11:3b:a3:51:ea:a5:de:de:5e:7b:cf:de:0f:fe:
                    45:72:e6:82:e0:a4:6b:0f:76:2c:3a:7f:a7:93:22:
                    32:e1:26:69:e5:1f:6c:a4:a3:1a:7d:c4:f4:18:75:
                    f6:7e:80:76:e2:7d:c3:7c:7d:a2:19:46:88:2a:0b:
                    ec:63:5b:e6:93:bd:8f:0e:ee:93:62:99:a5:fb:a4:
                    44:8f:8c:6e:3d:c0:79:7f:50:b7:68:92:2d:42:cb:
                    d8:63:f8:71:b6:bb:dc:10:26:41:ca:4e:e7:17:d4:
                    5d:2a:6e:79:09:a6:48:ed:b8:ef:d0:a0:60:f9:a4:
                    12:e9:63:90:c1:c4:4a:d4:7b:32:72:97:ac:9c:c4:
                    12:d8:8f:96:32:95:89:6e:f5:e2:f0:74:d3:68:74:
                    32:14:1f:e2:ca:c9:ce:23:33:8f:e7:8b:0d:48:21:
                    66:f6:fb:7f:b1:00:c7:ca:e4:f9:65:ef:ae:f9:3d:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:79:D8:C0:C6:7C:13:12:D8:DD:78:C3:06:98:0E:16:BA:2D:68
            X509v3 Authority Key Identifier:
                keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:9a:1f:11:65:4d:2d:c3:d6:bc:17:33:ec:d0:10:93:43:
         ab:96:3d:db:33:ac:77:a8:5b:db:db:39:fb:b4:fb:d3:75:ed:
         66:9f:80:ae:30:a4:e6:ca:d0:5e:97:5b:fe:62:27:b9:33:31:
         09:a9:e6:ba:7c:3a:df:df:69:0b:64:32:4e:b8:d9:ff:0c:1e:
         2a:07:8e:2b:82:d1:d6:b7:60:30:ac:bb:4d:d1:a8:55:e2:34:
         7b:0b:ab:44:38:0e:78:a8:71:9a:0f:f1:84:fc:d3:cf:ba:86:
         8e:07:1d:56:04:56:3b:d2:12:ff:38:89:bd:ee:2a:ed:d7:73:
         e3:6a:8e:f9:53:9e:07:7e:78:36:a5:22:4c:24:57:cb:b9:d1:
         ab:2f:40:f7:4c:8e:67:ac:bb:54:f2:c9:7f:58:79:06:c2:4d:
         5f:82:1b:c5:c7:3a:9f:9c:7d:50:1a:3e:1f:78:aa:cf:39:33:
         74:13:7b:cd:ba:e3:73:bf:02:6d:75:99:18:b4:0a:8b:17:cd:
         7d:d0:86:ba:59:6b:1b:c4:25:c1:69:54:64:37:cf:93:43:b7:
         39:2d:a8:20:17:5a:4b:f3:87:86:c3:7d:5c:02:3a:ef:0c:56:
         c0:10:0c:74:94:3a:3a:e9:be:83:71:cf:79:7e:7b:a9:3a:d4:
         d3:37:76:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz
NzAzMkYzRDQwHhcNMjQwNTMxMjIzOTIzWhcNMjQwNjA3MjIzOTIzWjAYMRYwFAYD
VQQDEw02NjVhNTE5Yi1lMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowSiCMkqf61S2du+YVljoFZljHy1haXuoUmiGnh650HthVUgerI0U9epQ40D
Xme5h17Gqv7fxHP7+q/ua26p30NJuuvXbEM+Top1ETujUeql3t5ee8/eD/5FcuaC
4KRrD3YsOn+nkyIy4SZp5R9spKMafcT0GHX2foB24n3DfH2iGUaIKgvsY1vmk72P
Du6TYpml+6REj4xuPcB5f1C3aJItQsvYY/hxtrvcECZByk7nF9RdKm55CaZI7bjv
0KBg+aQS6WOQwcRK1HsycpesnMQS2I+WMpWJbvXi8HTTaHQyFB/iysnOIzOP54sN
SCFm9vt/sQDHyuT5Ze+u+T2RlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS0edjA
xnwTEtjdeMMGmA4Wui1oMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0
RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl
Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoWpofEWVNLcPWvBcz7NAQk0Orlj3bM6x3qFvb2zn7tPvTde1mn4Cu
MKTmytBel1v+Yie5MzEJqea6fDrf32kLZDJOuNn/DB4qB44rgtHWt2AwrLtN0ahV
4jR7C6tEOA54qHGaD/GE/NPPuoaOBx1WBFY70hL/OIm97irt13Pjao75U54Hfng2
pSJMJFfLudGrL0D3TI5nrLtU8sl/WHkGwk1fghvFxzqfnH1QGj4feKrPOTN0E3vN
uuNzvwJtdZkYtAqLF8190Ia6WWsbxCXBaVRkN8+TQ7c5LaggF1pL84eGw31cAjrv
DFbAEAx0lDo66b6Dcc95fnupOtTTN3YR
-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:25 2024 by rpki-client on console-ams.rpki-client.org