Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
File:                     8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json)
Hash identifier:          RAagLP9jibt52hPC7SsD+9Qe9A+CJ/rE32q2L1ANXy0=
Subject key identifier:   D7:5E:0E:1C:B2:FB:77:53:46:2F:52:9A:8A:9E:76:A5:7F:12:DC:92
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Certificate issuer:       /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
Manifest number:          06CE
Signing time:             Sat 18 May 2024 22:58:09 +0000
Manifest this update:     Sat 18 May 2024 22:58:08 +0000
Manifest next update:     Sat 25 May 2024 22:58:08 +0000
Files and hashes:         1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: O9xAC5XQH76RCIgVFMiI6asGvsVn+zv/uyH9YvVCiAE=)
                          2: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: YCjgtUnq0bK/nQUFojfVd+RvvleBXGJZLtaNdj95Zd4=)
                          3: 245DB0FE0C2B11EBAD607865C4F9AE02.roa (hash: e1RlAPLRReoXwau/miWWoK+7uPsm81zsRXmW+T8sh/E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
        Validity
            Not Before: May 18 22:58:08 2024 GMT
            Not After : May 25 22:58:08 2024 GMT
        Subject: CN=66493280-ca14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:f1:55:a9:00:0d:34:81:de:f1:a9:34:bc:
                    77:c1:4a:95:ac:a7:5c:8c:fd:cd:e5:c4:08:e1:4e:
                    1a:11:63:b5:7a:fd:76:c9:ad:59:cf:78:d2:59:02:
                    65:39:2c:7d:4c:6e:03:a7:27:10:87:ff:1e:ce:6e:
                    b7:f2:20:52:62:77:31:55:f0:10:ce:11:11:11:43:
                    c2:4b:2b:02:02:a4:75:27:aa:34:44:3b:0e:3d:8f:
                    fb:a6:2c:58:0e:b6:92:97:f2:9a:e1:71:01:d6:a7:
                    c5:bb:d0:04:93:f4:f2:f8:b5:3a:b4:2a:d5:29:24:
                    a6:76:86:93:df:21:12:bd:ee:86:30:a7:f7:13:ca:
                    80:36:0a:e9:ef:02:21:d8:be:73:7f:26:1d:e6:4f:
                    f9:79:27:1a:8e:7f:a6:0e:7a:c5:e9:95:98:ed:ca:
                    fc:49:38:9c:a0:43:a7:e9:58:33:d3:4b:a8:01:61:
                    69:22:3a:6c:c3:03:c4:3f:d3:7a:44:8e:2d:a2:e5:
                    07:d0:bf:54:70:ee:0e:8e:f0:87:b6:21:11:c7:85:
                    e9:2c:0f:28:2e:d7:81:d1:1b:8f:dd:ca:eb:4b:7b:
                    87:0b:9d:a4:2a:eb:95:8a:cc:46:21:d9:d5:e1:da:
                    08:65:73:ba:44:4e:42:04:1b:fc:89:e1:18:42:c1:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:0E:1C:B2:FB:77:53:46:2F:52:9A:8A:9E:76:A5:7F:12:DC:92
            X509v3 Authority Key Identifier:
                keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:44:33:f3:96:37:16:75:fd:16:40:b4:b0:03:84:ef:65:
         21:f4:39:1c:26:e1:8c:45:8f:f7:8d:94:10:c1:79:7e:e9:9e:
         e4:da:b0:1c:9b:97:c6:66:b6:fb:f5:e0:52:22:3e:a2:71:cc:
         73:18:67:58:03:cd:05:85:73:b9:e1:ee:d5:3f:67:42:08:2d:
         f7:76:9a:93:55:2f:43:15:c6:58:10:b5:e0:a7:dc:4a:5a:9a:
         60:d1:63:c5:ff:61:31:33:92:34:d5:33:3e:78:75:90:77:c6:
         73:3c:2d:ce:d6:75:74:de:d6:f4:9b:33:a2:20:a1:aa:3c:d6:
         cf:4f:bd:9d:3c:25:3c:46:58:ef:ac:69:c3:58:0a:28:fe:7e:
         26:c3:81:2e:4c:04:2f:9c:47:e3:a7:cf:1f:16:9c:d4:4b:c6:
         fd:b3:81:ef:9d:17:b4:c9:96:de:97:c6:0a:d1:c4:e6:dc:44:
         1a:e8:70:4b:e2:f7:0e:75:11:2e:5b:b0:b6:20:05:de:7a:39:
         b3:e3:c4:d5:28:45:04:27:9b:1f:1f:ec:40:e5:e8:23:5f:33:
         e3:08:20:7d:de:7b:e4:23:4a:2c:f8:e2:b3:7a:5d:38:11:77:
         a1:8b:1e:bb:ad:b0:30:99:e6:e7:81:c6:5c:3c:a9:ff:8c:70:
         3a:29:0b:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0
MDhEQUQyOUMwHhcNMjQwNTE4MjI1ODA4WhcNMjQwNTI1MjI1ODA4WjAYMRYwFAYD
VQQDEw02NjQ5MzI4MC1jYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQnxVakADTSB3vGpNLx3wUqVrKdcjP3N5cQI4U4aEWO1ev12ya1Zz3jSWQJl
OSx9TG4DpycQh/8ezm638iBSYncxVfAQzhEREUPCSysCAqR1J6o0RDsOPY/7pixY
DraSl/Ka4XEB1qfFu9AEk/Ty+LU6tCrVKSSmdoaT3yESve6GMKf3E8qANgrp7wIh
2L5zfyYd5k/5eScajn+mDnrF6ZWY7cr8STicoEOn6Vgz00uoAWFpIjpswwPEP9N6
RI4touUH0L9UcO4OjvCHtiERx4XpLA8oLteB0RuP3crrS3uHC52kKuuVisxGIdnV
4doIZXO6RE5CBBv8ieEYQsHCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdeDhyy
+3dTRi9SmoqedqV/EtySMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD
MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k
WXFsYTlkTHlMdkpBamEwcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs70Qz85Y3FnX9FkC0sAOE72Uh9DkcJuGMRY/3jZQQwXl+6Z7k2rAc
m5fGZrb79eBSIj6iccxzGGdYA80FhXO54e7VP2dCCC33dpqTVS9DFcZYELXgp9xK
Wppg0WPF/2ExM5I01TM+eHWQd8ZzPC3O1nV03tb0mzOiIKGqPNbPT72dPCU8Rljv
rGnDWAoo/n4mw4EuTAQvnEfjp88fFpzUS8b9s4HvnRe0yZbel8YK0cTm3EQa6HBL
4vcOdREuW7C2IAXeejmz48TVKEUEJ5sfH+xA5egjXzPjCCB93nvkI0os+OKzel04
EXehix67rbAwmebngcZcPKn/jHA6KQtp
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org