Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
File:                     qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json)
Hash identifier:          rv8uqLEhaA10D/rmhZq8P198jS5FvfWOPM5WpzMUWGo=
Subject key identifier:   EA:37:37:DF:70:92:38:8E:91:B6:8E:0C:0B:87:5A:1D:38:8A:44:1A
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Certificate issuer:       /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
Manifest number:          34
Signing time:             Fri 31 May 2024 09:22:20 +0000
Manifest this update:     Fri 31 May 2024 09:22:19 +0000
Manifest next update:     Fri 07 Jun 2024 09:22:19 +0000
Files and hashes:         1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: oFCR6K96ngbj/7akfZiKmZGjfHEaBVJVTjukQjmkzU8=)
                          2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: zaJAYhQTcybhHQIlp/uCcC9JLNAhj46aBOJI3WaHnt0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
        Validity
            Not Before: May 31 09:22:19 2024 GMT
            Not After : Jun  7 09:22:19 2024 GMT
        Subject: CN=665996cc-ca5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:ac:4f:cd:9f:42:22:85:60:d5:03:f8:a8:
                    c6:c2:c2:41:3d:b6:50:7c:6a:84:83:c6:5d:87:e1:
                    3b:03:3a:5f:b2:db:d8:13:29:c6:50:66:e0:48:ec:
                    ec:e9:77:55:98:7d:72:34:94:92:15:5f:e9:ef:1e:
                    a0:53:5c:a7:ce:29:64:0f:87:78:ff:e5:2b:b8:5d:
                    1d:38:5c:6e:7a:19:a0:32:a0:dc:e5:7d:43:ba:b3:
                    e1:de:73:85:a0:5f:4a:58:3a:94:3e:a7:45:5e:6b:
                    68:63:cf:85:5b:b9:e4:1c:c1:9f:b8:90:3e:66:a1:
                    82:75:a6:02:4b:9f:85:9e:cf:75:b5:7d:9f:de:a4:
                    44:3c:4a:a2:60:7d:18:72:df:41:3a:0b:3a:39:67:
                    fb:8a:64:fa:8d:a7:54:6e:c0:3b:36:f5:79:24:c1:
                    c8:52:67:b4:75:e5:de:5c:ca:ec:61:63:5c:25:56:
                    6c:13:2f:e1:ad:65:e0:58:07:b0:d3:0e:71:76:0c:
                    f1:8e:a7:8c:ee:c0:b8:fc:e0:f0:12:03:6e:78:0a:
                    28:3f:ac:93:c1:ac:3c:96:e0:76:8d:61:c5:26:32:
                    15:8c:41:d3:e6:11:7f:3c:a7:e1:a0:98:46:a3:1f:
                    62:dd:75:f6:d1:e0:27:d7:8e:3a:25:ec:7c:28:28:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:37:DF:70:92:38:8E:91:B6:8E:0C:0B:87:5A:1D:38:8A:44:1A
            X509v3 Authority Key Identifier:
                keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:78:3d:ed:95:48:3f:7e:a6:11:fa:f4:bd:4d:a1:e8:7c:6b:
         30:d5:f0:db:58:a4:10:bd:54:64:0d:36:84:32:ea:f3:25:43:
         6b:d4:92:ed:6e:d5:9c:08:26:36:72:74:ec:4f:23:d8:b8:d8:
         ef:17:42:d4:e7:28:01:08:16:c6:37:67:25:7a:6b:2b:d3:49:
         ea:68:8e:dd:1b:7f:21:16:6c:a8:7a:74:46:50:22:d2:09:5f:
         2f:97:98:c5:50:38:3a:61:b5:f3:a7:6c:26:ab:29:e0:f9:ae:
         93:df:a1:9b:a9:32:f2:a8:54:60:49:29:d8:a8:56:b5:0a:26:
         82:62:ef:5b:0c:3b:ee:ef:d8:a7:c7:e4:eb:c3:45:93:1c:dc:
         5b:c0:f3:6a:a5:c0:f4:69:42:4d:2d:1d:99:58:0d:68:c2:8a:
         24:4d:0f:e7:1a:b7:6b:91:90:d1:b3:a7:f7:7e:8d:a3:a5:f5:
         92:e2:42:8e:f0:9e:8b:3d:70:3d:31:15:3b:4e:43:77:53:c3:
         82:cf:df:8e:da:63:9d:36:dc:a0:98:04:f3:d2:af:d0:93:53:
         d1:eb:44:50:de:59:c7:d0:e5:6d:8a:a4:70:fb:88:9f:10:64:
         58:bf:ff:c6:f3:05:10:73:be:de:ef:86:29:bc:58:6b:2b:55:
         26:c2:e8:78
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzQxNTExMC8GA1UEBRMoQTgyRTYzMzFFQkY0NEY1OEZDNjU5OTg2REIwNTQ0QzY2
MTVGMjZGMTAeFw0yNDA1MzEwOTIyMTlaFw0yNDA2MDcwOTIyMTlaMBgxFjAUBgNV
BAMTDTY2NTk5NmNjLWNhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvE6xPzZ9CIoVg1QP4qMbCwkE9tlB8aoSDxl2H4TsDOl+y29gTKcZQZuBI7Ozp
d1WYfXI0lJIVX+nvHqBTXKfOKWQPh3j/5Su4XR04XG56GaAyoNzlfUO6s+Hec4Wg
X0pYOpQ+p0Vea2hjz4VbueQcwZ+4kD5moYJ1pgJLn4Wez3W1fZ/epEQ8SqJgfRhy
30E6Czo5Z/uKZPqNp1RuwDs29XkkwchSZ7R15d5cyuxhY1wlVmwTL+GtZeBYB7DT
DnF2DPGOp4zuwLj84PASA254Cig/rJPBrDyW4HaNYcUmMhWMQdPmEX88p+GgmEaj
H2LddfbR4CfXjjol7HwoKAqhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6jc333CS
OI6Rto4MC4daHTiKRBowHwYDVR0jBBgwFoAUqC5jMev0T1j8ZZmG2wVExmFfJvEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNDE1L0JEMUM5MzVDRDcz
MjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUM1ak1ldjBUMWo4WlptRzJ3VkV4bUZmSnZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
NDE1L0JEMUM5MzVDRDczMjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFq
OFpabUcyd1ZFeG1GZkp2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAV4Pe2VSD9+phH69L1Noeh8azDV8NtYpBC9VGQNNoQy6vMlQ2vUku1u
1ZwIJjZydOxPI9i42O8XQtTnKAEIFsY3ZyV6ayvTSepojt0bfyEWbKh6dEZQItIJ
Xy+XmMVQODphtfOnbCarKeD5rpPfoZupMvKoVGBJKdioVrUKJoJi71sMO+7v2KfH
5OvDRZMc3FvA82qlwPRpQk0tHZlYDWjCiiRND+cat2uRkNGzp/d+jaOl9ZLiQo7w
nos9cD0xFTtOQ3dTw4LP347aY5023KCYBPPSr9CTU9HrRFDeWcfQ5W2KpHD7iJ8Q
ZFi//8bzBRBzvt7vhim8WGsrVSbC6Hg=
-----END CERTIFICATE-----
Generated at Fri May 31 10:02:40 2024 by rpki-client on console-ams.rpki-client.org