Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          FvCCLw8KoW+XyZiqxJP9bGwNT/B5671rPjNNlv2OETE=
Subject key identifier:   FF:4B:DD:8D:A4:D7:B1:D7:89:09:84:8A:8B:42:10:3F:0A:7E:38:03
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0A65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0A60
Signing time:             Sat 18 May 2024 20:19:40 +0000
Manifest this update:     Sat 18 May 2024 20:19:39 +0000
Manifest next update:     Sat 25 May 2024 20:19:39 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: HKpOarGfVQ8dAIV1xpDmCtT1Vd4DZMXFlJyL2LyX/TI=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: cOUG9AZv4ens5bJXYGgDSu06OlyCFYAg055PsMNTDCk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: May 18 20:19:39 2024 GMT
            Not After : May 25 20:19:39 2024 GMT
        Subject: CN=66490d5c-c5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:47:d0:be:4e:e8:29:de:b9:83:73:52:ab:
                    fc:60:aa:19:b3:d1:c1:f4:a0:d8:fa:24:90:60:55:
                    a8:03:84:d0:0c:eb:cc:cc:69:b4:ee:61:17:30:b6:
                    16:39:f8:be:37:f8:21:fb:6a:0e:a5:0b:60:29:f4:
                    4d:1e:88:7b:dd:e2:ed:04:5e:13:a9:db:4a:95:d9:
                    02:65:b1:90:cf:03:b5:ec:89:4c:39:56:c4:29:20:
                    aa:d2:8d:c3:9a:f4:e0:3b:e4:a0:5d:5c:a6:5b:0d:
                    18:e1:f0:ec:82:7d:82:93:8b:d6:ce:21:97:a1:f1:
                    ae:ba:2d:b7:60:7e:b9:28:21:c2:35:61:ff:24:b4:
                    99:2e:66:5e:34:ee:ad:39:c0:22:cc:60:ac:a3:61:
                    93:dd:4b:40:ac:8b:35:f7:41:8f:05:8c:20:31:78:
                    76:ef:c7:06:25:dd:fa:58:1b:85:78:11:73:67:44:
                    39:e4:0c:4a:0b:f8:f2:3c:46:f9:32:7d:01:18:b5:
                    bb:b2:ab:db:15:81:99:7e:35:80:c1:70:71:53:f8:
                    a9:1f:f4:61:47:d6:9f:3a:b9:0f:be:a5:01:b2:c7:
                    01:f7:76:2e:04:dc:9c:07:43:f5:75:6b:88:28:b8:
                    df:64:92:80:91:c5:bd:0a:fa:ec:c9:c4:7e:5c:93:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:DD:8D:A4:D7:B1:D7:89:09:84:8A:8B:42:10:3F:0A:7E:38:03
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a0:0b:67:47:6b:7b:8a:89:0d:c4:b2:74:a6:51:68:da:c6:
         bd:63:c2:25:bc:bd:88:6f:8c:ea:b3:c7:39:d0:60:8b:27:66:
         03:57:1a:68:1c:37:3f:a6:df:0d:0d:0f:34:49:8b:24:08:59:
         d4:bb:12:11:6c:54:bf:e9:cc:3d:34:af:f1:9d:a3:20:c6:b8:
         92:31:1d:58:3b:5b:46:2a:1f:4e:6c:39:a0:60:87:53:98:c5:
         38:2e:88:de:3c:f7:68:09:f7:60:f5:52:f9:05:01:1a:3a:db:
         7c:80:dd:f7:3b:6b:f1:2c:05:63:9d:80:3b:b1:a5:27:73:fa:
         08:c2:3a:ed:27:85:88:b1:41:4c:5b:cf:a7:62:c2:ad:4a:d9:
         93:a6:be:fa:a4:b9:7a:43:a1:3c:a5:2c:f7:f9:d8:16:3e:08:
         69:a6:06:50:53:57:84:6a:05:e3:e1:3b:65:86:c1:e9:4d:56:
         64:88:04:7f:50:f0:43:62:23:e8:a9:68:30:63:f2:a0:1e:30:
         b0:0e:79:21:69:f1:d5:33:ba:86:36:87:09:cb:d0:6e:64:c1:
         20:8f:0e:f2:a1:46:e2:3b:f1:c5:56:a3:8b:21:10:9b:75:7e:
         f9:53:c5:73:8f:85:08:2c:6a:79:cd:f0:5a:25:9a:14:c7:81:
         ee:3d:b5:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFBNjAxMTAvBgNVBAUTKDJFODIzRDU5NDk2Q0ZBQzczNzhGQTgyQkY4NERERjY4
NEQ5MzJCOUQwHhcNMjQwNTE4MjAxOTM5WhcNMjQwNTI1MjAxOTM5WjAYMRYwFAYD
VQQDEw02NjQ5MGQ1Yy1jNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx55H0L5O6CneuYNzUqv8YKoZs9HB9KDY+iSQYFWoA4TQDOvMzGm07mEXMLYW
Ofi+N/gh+2oOpQtgKfRNHoh73eLtBF4TqdtKldkCZbGQzwO17IlMOVbEKSCq0o3D
mvTgO+SgXVymWw0Y4fDsgn2Ck4vWziGXofGuui23YH65KCHCNWH/JLSZLmZeNO6t
OcAizGCso2GT3UtArIs190GPBYwgMXh278cGJd36WBuFeBFzZ0Q55AxKC/jyPEb5
Mn0BGLW7sqvbFYGZfjWAwXBxU/ipH/RhR9afOrkPvqUBsscB93YuBNycB0P1dWuI
KLjfZJKAkcW9CvrsycR+XJMhkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9L3Y2k
17HXiQmEiotCED8KfjgDMB8GA1UdIwQYMBaAFC6CPVlJbPrHN4+oK/hN32hNkyud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUE2MC84MDMxNEY4NjND
RkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1zYzNqNmdyLUUzZmFFMlRL
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvSTlXVWxzLXNjM2o2Z3ItRTNmYUUyVEs1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUE2MC84MDMxNEY4NjNDRkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1z
YzNqNmdyLUUzZmFFMlRLNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhoAtnR2t7iokNxLJ0plFo2sa9Y8IlvL2Ib4zqs8c50GCLJ2YDVxpo
HDc/pt8NDQ80SYskCFnUuxIRbFS/6cw9NK/xnaMgxriSMR1YO1tGKh9ObDmgYIdT
mMU4LojePPdoCfdg9VL5BQEaOtt8gN33O2vxLAVjnYA7saUnc/oIwjrtJ4WIsUFM
W8+nYsKtStmTpr76pLl6Q6E8pSz3+dgWPghppgZQU1eEagXj4TtlhsHpTVZkiAR/
UPBDYiPoqWgwY/KgHjCwDnkhafHVM7qGNocJy9BuZMEgjw7yoUbiO/HFVqOLIRCb
dX75U8Vzj4UILGp5zfBaJZoUx4HuPbVx
-----END CERTIFICATE-----
Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org