Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
File:                     XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft (raw, json)
Hash identifier:          EC47HfnU4yZRYqjiRqXgktrc6DIt2QoSuhZ/RIOQJMw=
Subject key identifier:   42:FA:4A:4C:59:7A:09:64:39:E8:EF:6E:1E:82:E0:E8:36:0C:B5:53
Authority key identifier: 5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
Certificate issuer:       /CN=A91C9561/serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Certificate serial:       0236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
Manifest number:          0235
Signing time:             Sun 19 May 2024 03:58:54 +0000
Manifest this update:     Sun 19 May 2024 03:58:54 +0000
Manifest next update:     Sun 26 May 2024 03:58:54 +0000
Files and hashes:         1: XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl (hash: XdFzIUVm0Meim0hWnwyrjRdCCX1sb1uP19npsoUxvH8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl
                          rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9561/serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
        Validity
            Not Before: May 19 03:58:54 2024 GMT
            Not After : May 26 03:58:54 2024 GMT
        Subject: CN=664978fe-0e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:98:e9:54:58:0b:c5:52:82:ea:30:be:36:
                    fe:a9:a3:2f:b9:34:3f:2d:36:95:3a:67:e0:f2:d1:
                    54:a0:3b:98:2f:74:2a:29:82:a6:70:1d:01:48:89:
                    23:d4:d9:d3:6f:5d:93:dc:3d:bc:d8:3f:9b:b1:e0:
                    4b:8b:1d:cd:bd:49:67:8b:78:d4:8e:0b:e7:f4:50:
                    5c:a2:d5:f7:62:45:7b:38:58:8e:4e:5a:32:f9:b8:
                    a6:be:4b:5c:28:64:6e:3a:4a:49:40:5f:3c:19:0f:
                    2e:da:08:fe:c9:03:a3:57:3a:b2:cc:ae:4f:cc:f5:
                    70:27:60:0a:f4:f2:ec:e3:a5:67:aa:41:e1:ec:27:
                    61:44:d5:37:22:f3:ce:b8:d7:ba:32:4e:c7:f4:cf:
                    7c:de:b3:0e:c3:d3:e8:86:ff:7a:fc:2d:ea:c6:87:
                    af:30:4d:93:af:72:7f:c4:14:e2:42:8f:32:9f:18:
                    97:cf:a9:f7:7f:1d:a9:02:fd:47:e8:a6:98:cb:72:
                    05:2d:5b:4a:89:6a:fe:6d:27:42:e5:0a:c2:52:9c:
                    57:a4:89:47:53:a2:01:54:4d:50:cd:d3:8d:47:8f:
                    c7:18:31:4d:4e:1a:42:c1:4e:67:17:62:8e:f3:77:
                    b0:45:48:3b:c9:af:7a:1b:ea:dd:2b:d3:42:d1:ec:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:4A:4C:59:7A:09:64:39:E8:EF:6E:1E:82:E0:E8:36:0C:B5:53
            X509v3 Authority Key Identifier:
                keyid:5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:7a:bf:11:9a:5a:6f:6d:2d:f1:62:97:de:8f:8f:c8:4c:
         60:d3:a1:24:e0:65:12:1e:c4:8e:c9:05:a8:93:8a:c3:09:db:
         9b:66:00:24:80:48:07:ec:65:29:00:1e:b9:ce:ee:e1:8a:57:
         f6:02:65:df:a0:60:24:3c:bd:7e:dd:cb:37:3f:8a:b4:08:a4:
         ae:07:48:37:9e:f5:e8:69:5f:ee:31:43:ed:b5:1f:aa:60:86:
         c4:2e:7b:16:ac:96:59:35:34:8c:67:1a:78:48:e1:88:73:c8:
         20:7e:37:04:7b:7c:f7:b2:4d:3a:22:b7:98:41:11:6c:4b:eb:
         9c:56:05:1f:58:b2:24:ff:92:f7:5f:44:2b:a5:b4:d2:45:b8:
         ef:cc:64:f6:ee:20:a7:c9:a6:98:c5:2f:93:b4:97:b6:66:90:
         b0:de:e5:c5:5a:b0:f6:1d:4f:05:fd:7d:c6:cb:db:f7:8d:2a:
         50:2a:01:61:aa:32:e0:cf:68:e3:23:83:5d:9d:d8:5f:e2:3a:
         d0:bf:f0:94:ff:e3:e1:be:37:7a:11:f0:b9:f4:08:4d:f8:18:
         70:83:c1:23:0b:d3:c5:1d:ea:b6:ab:e8:43:89:1f:50:51:7c:
         34:56:2f:26:4a:24:f0:4e:e2:50:3a:19:97:23:d5:12:bf:b3:
         12:ae:58:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1NjExMTAvBgNVBAUTKDVFM0NGMDI1MUQ4QTYwMDZCODI4NUJEMDk0OUZDRDlC
QTNGOUVCQjgwHhcNMjQwNTE5MDM1ODU0WhcNMjQwNTI2MDM1ODU0WjAYMRYwFAYD
VQQDEw02NjQ5NzhmZS0wZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2BmY6VRYC8VSguowvjb+qaMvuTQ/LTaVOmfg8tFUoDuYL3QqKYKmcB0BSIkj
1NnTb12T3D282D+bseBLix3NvUlni3jUjgvn9FBcotX3YkV7OFiOTloy+bimvktc
KGRuOkpJQF88GQ8u2gj+yQOjVzqyzK5PzPVwJ2AK9PLs46VnqkHh7CdhRNU3IvPO
uNe6Mk7H9M983rMOw9Pohv96/C3qxoevME2Tr3J/xBTiQo8ynxiXz6n3fx2pAv1H
6KaYy3IFLVtKiWr+bSdC5QrCUpxXpIlHU6IBVE1QzdONR4/HGDFNThpCwU5nF2KO
83ewRUg7ya96G+rdK9NC0ezZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL6SkxZ
eglkOejvbh6C4Og2DLVTMB8GA1UdIwQYMBaAFF488CUdimAGuChb0JSfzZuj+eu4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2MS9DOUE4REZEQURB
NjkxMUVDOUM4MTUzNThDNEY5QUUwMi9Yanp3SlIyS1lBYTRLRnZRbEpfTm02UDU2
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hqendKUjJLWUFhNEtGdlFsSl9ObTZQNTY3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTU2MS9DOUE4REZEQURBNjkxMUVDOUM4MTUzNThDNEY5QUUwMi9Yanp3SlIyS1lB
YTRLRnZRbEpfTm02UDU2N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsgHq/EZpab20t8WKX3o+PyExg06Ek4GUSHsSOyQWok4rDCdubZgAk
gEgH7GUpAB65zu7hilf2AmXfoGAkPL1+3cs3P4q0CKSuB0g3nvXoaV/uMUPttR+q
YIbELnsWrJZZNTSMZxp4SOGIc8ggfjcEe3z3sk06IreYQRFsS+ucVgUfWLIk/5L3
X0QrpbTSRbjvzGT27iCnyaaYxS+TtJe2ZpCw3uXFWrD2HU8F/X3Gy9v3jSpQKgFh
qjLgz2jjI4Ndndhf4jrQv/CU/+Phvjd6EfC59AhN+Bhwg8EjC9PFHeq2q+hDiR9Q
UXw0Vi8mSiTwTuJQOhmXI9USv7MSrljH
-----END CERTIFICATE-----
Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org