Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File:                     jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier:          N7xZ4yjQ2CCDirBGPu8ioCpmvscp9byDTg0cY2XGixA=
Subject key identifier:   DB:52:76:BD:23:EE:43:97:71:80:8E:2F:1D:18:52:B2:3A:5C:79:A7
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number:          0342
Signing time:             Sun 19 May 2024 02:57:15 +0000
Manifest this update:     Sun 19 May 2024 02:57:15 +0000
Manifest next update:     Sun 26 May 2024 02:57:15 +0000
Files and hashes:         1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: VOUBl86BhDqXtVVUutAyjqVHcCxp5KuTbzC6ID+i9eM=)
                          2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: k+Z56AZRkmsg8G/VM5gkdImqRL0zYO34OeSgcqTOnfk=)
                          3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: g2dvLYBGOdMHNfTcKzHb+shJjdNBYdOW92QYVT374z4=)
                          4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: 4yf2iy/EaDycevCFtGY4EKlu7vgv+r5omMQGMcRFOK4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: May 19 02:57:15 2024 GMT
            Not After : May 26 02:57:15 2024 GMT
        Subject: CN=66496a8b-9cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:c7:c0:b0:9e:51:24:58:f0:46:4e:f6:6b:
                    37:e5:d7:16:18:1a:e1:ea:0a:83:1a:87:88:85:85:
                    42:64:33:37:e0:e5:41:58:76:42:15:a0:ed:9d:ea:
                    17:36:bc:78:d6:38:6f:c8:20:d5:6c:34:b1:24:f0:
                    d3:2e:ab:05:b0:ee:89:db:3f:5b:13:3f:f7:34:f4:
                    34:5f:21:7f:4e:5d:b0:57:0e:14:8b:45:91:74:96:
                    81:b9:ca:21:12:5f:5e:09:3b:b2:aa:09:33:90:cf:
                    5f:fd:40:bf:50:56:7c:42:91:2a:7f:00:62:f5:5d:
                    af:aa:2e:83:14:21:ba:bc:ec:8a:5d:f3:ca:da:09:
                    88:af:e1:9c:dc:97:4c:71:72:1c:b3:e7:21:91:a9:
                    8d:cc:37:aa:ba:73:cb:f7:5c:ba:48:90:be:c1:11:
                    08:66:f7:c6:b0:53:22:f3:1d:29:de:e5:c9:2b:ba:
                    17:aa:2b:f9:84:f7:fc:1a:f1:c2:21:70:a2:78:a2:
                    59:83:99:0f:48:d0:c9:70:49:29:68:93:2b:d0:71:
                    f6:9a:85:02:3d:01:9e:dc:0c:39:26:8d:f2:86:39:
                    84:18:22:b0:a5:56:48:8b:c8:fe:72:b8:f2:30:1b:
                    2e:44:96:b3:af:2c:28:80:1b:aa:0d:82:c6:96:ac:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:76:BD:23:EE:43:97:71:80:8E:2F:1D:18:52:B2:3A:5C:79:A7
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:e0:99:f1:05:5c:82:3a:33:f2:09:97:3a:80:4e:74:8b:
         dc:b7:d3:40:76:34:15:70:4f:0c:96:54:ea:75:2a:d6:bd:20:
         f3:3d:81:dc:6f:ad:d5:0e:a0:24:f6:5a:3c:a5:1f:44:df:60:
         3f:b1:b8:f7:12:ca:da:69:d0:90:8f:23:0f:02:e6:f8:72:ee:
         fe:b2:17:44:b3:e4:89:2f:a4:0e:26:e5:8c:0e:db:c1:f2:bb:
         33:a1:52:b4:38:b9:08:f1:5a:07:de:37:97:55:33:ac:56:b4:
         55:27:57:68:de:61:0e:53:62:64:1d:8f:de:97:b5:ee:07:8c:
         76:bf:2b:ba:d0:a6:d3:fb:b2:8b:f7:3c:0a:cd:85:e9:e2:89:
         f4:a2:7f:1c:16:c3:0a:f1:a1:37:23:aa:3a:bd:a8:e2:72:84:
         1f:32:41:04:cf:6b:df:28:36:d8:55:a2:f3:db:ff:63:f4:15:
         b9:b7:e9:7a:80:f3:ae:54:43:fe:28:b0:77:2c:34:c7:a6:1a:
         a8:39:1e:9f:03:24:eb:00:55:29:75:81:b6:a1:a1:af:f1:cd:
         2a:b7:5c:42:69:a2:6a:e9:c9:2b:30:0b:25:a1:95:ae:31:6e:
         58:95:a3:eb:f8:ba:18:a7:c9:a9:39:c5:0f:42:c9:6b:06:7a:
         b2:6a:f3:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB
MEVCOThBMjYwHhcNMjQwNTE5MDI1NzE1WhcNMjQwNTI2MDI1NzE1WjAYMRYwFAYD
VQQDEw02NjQ5NmE4Yi05Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuozHwLCeUSRY8EZO9ms35dcWGBrh6gqDGoeIhYVCZDM34OVBWHZCFaDtneoX
Nrx41jhvyCDVbDSxJPDTLqsFsO6J2z9bEz/3NPQ0XyF/Tl2wVw4Ui0WRdJaBucoh
El9eCTuyqgkzkM9f/UC/UFZ8QpEqfwBi9V2vqi6DFCG6vOyKXfPK2gmIr+Gc3JdM
cXIcs+chkamNzDequnPL91y6SJC+wREIZvfGsFMi8x0p3uXJK7oXqiv5hPf8GvHC
IXCieKJZg5kPSNDJcEkpaJMr0HH2moUCPQGe3Aw5Jo3yhjmEGCKwpVZIi8j+crjy
MBsuRJazrywogBuqDYLGlqwCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtSdr0j
7kOXcYCOLx0YUrI6XHmnMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0
NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY
QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA88+CZ8QVcgjoz8gmXOoBOdIvct9NAdjQVcE8MllTqdSrWvSDzPYHc
b63VDqAk9lo8pR9E32A/sbj3EsraadCQjyMPAub4cu7+shdEs+SJL6QOJuWMDtvB
8rszoVK0OLkI8VoH3jeXVTOsVrRVJ1do3mEOU2JkHY/el7XuB4x2vyu60KbT+7KL
9zwKzYXp4on0on8cFsMK8aE3I6o6vajicoQfMkEEz2vfKDbYVaLz2/9j9BW5t+l6
gPOuVEP+KLB3LDTHphqoOR6fAyTrAFUpdYG2oaGv8c0qt1xCaaJq6ckrMAsloZWu
MW5YlaPr+LoYp8mpOcUPQslrBnqyavOy
-----END CERTIFICATE-----
Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org