Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File:                     EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier:          fli/17nahXkJovhCCFYVZSRZ6uCYxPyn2o0We3YsXds=
Subject key identifier:   E1:3D:A8:80:71:BD:A5:65:61:03:2E:1D:DB:AF:4C:79:A3:EA:F4:D8
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer:       /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number:          07F2
Signing time:             Mon 06 May 2024 22:01:38 +0000
Manifest this update:     Mon 06 May 2024 22:01:38 +0000
Manifest next update:     Mon 13 May 2024 22:01:38 +0000
Files and hashes:         1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: 7pmyX6fP8+7MlH7uuhFuHgv/BnVAokfBBppEE8QcpZk=)
                          2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: Y47apNgOzJ6xhPSgejM+cnUgXuOKmmkEQCObfhcCUEc=)
                          3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: EQkdIXE9oGGaOVDVqrl5JyY1I+BIM2lR/j5wezDZbyw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
                          rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
        Validity
            Not Before: May  6 22:01:38 2024 GMT
            Not After : May 13 22:01:38 2024 GMT
        Subject: CN=66395342-2d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:0a:96:48:39:d9:2e:e6:7b:42:f9:a0:58:
                    a5:54:8b:3d:11:72:2b:2b:4b:93:6e:6d:72:f0:16:
                    a1:d4:ac:17:4c:44:24:d6:05:85:00:1a:6f:2c:c0:
                    12:dd:7b:eb:f7:f1:c5:f6:16:02:d9:75:8c:46:42:
                    e6:04:de:4c:36:8b:37:1d:15:8a:77:b9:f1:b8:9c:
                    2e:65:5e:fa:71:1a:37:44:7a:58:9f:03:dc:1f:93:
                    fb:f2:e9:1e:bc:32:88:f3:ef:9a:c2:6f:66:3b:51:
                    62:b0:5a:fd:21:86:9d:2b:4f:f7:17:b4:05:6d:0e:
                    e8:27:15:80:1f:86:ca:e8:65:26:26:90:ea:ab:67:
                    40:e8:24:8d:f5:f2:b5:34:80:e3:c9:e8:58:86:ca:
                    59:a2:b4:76:fb:50:43:3a:12:7f:51:d7:24:67:31:
                    62:a2:b3:9b:0e:1a:ee:59:d8:1a:10:b7:29:51:0f:
                    11:8f:96:d1:2c:24:fc:1a:19:aa:3b:88:fc:f4:81:
                    0f:54:a8:40:7e:35:ad:e6:3d:86:6f:1b:b5:a8:ba:
                    c7:9e:d8:bf:a5:b5:d5:7e:a3:74:d5:74:90:e9:73:
                    b0:af:5e:40:5a:95:70:4c:56:ee:2e:62:99:5f:cb:
                    e9:bf:f3:d6:70:f7:1d:fe:92:95:10:75:5b:38:35:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3D:A8:80:71:BD:A5:65:61:03:2E:1D:DB:AF:4C:79:A3:EA:F4:D8
            X509v3 Authority Key Identifier:
                keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:46:e2:72:bb:96:e5:57:1b:8f:e0:32:ab:48:f9:58:f9:52:
         9e:e5:31:0b:47:bd:d7:a5:59:1c:60:87:f1:60:a9:6f:23:c8:
         d8:d7:a8:51:aa:fa:43:d0:33:0e:0a:61:18:2c:9b:0c:9d:5c:
         88:66:a1:e8:0f:8a:cb:10:d5:37:82:54:bf:78:2a:91:84:ec:
         40:d5:7e:66:a2:88:11:fa:51:fd:03:80:3e:fe:da:ad:fa:7d:
         8e:a1:0e:31:ff:b5:a5:da:f1:9d:6c:63:c4:3a:91:5b:6c:d8:
         33:c9:39:c3:28:4b:05:92:19:4f:8f:15:40:f5:98:4b:ad:f1:
         2f:87:50:9f:01:ea:bd:21:39:63:7a:45:fd:1b:8f:1c:5a:ab:
         5f:fb:f9:3c:db:84:2f:23:ea:cb:72:89:38:27:5c:a8:6f:f5:
         19:63:82:b1:99:58:7d:a5:0e:a9:50:48:fd:19:4e:63:a0:48:
         72:71:52:9d:98:f1:1d:66:3b:40:16:a9:e5:9f:80:63:41:e8:
         eb:ec:b4:02:b3:73:d1:f8:b7:ff:9f:a5:0a:5c:d5:dc:72:50:
         14:d6:8b:3e:27:a3:56:ca:7a:8a:12:ee:8a:05:44:60:22:f8:
         52:bd:1d:35:2f:65:d9:7a:17:10:4f:79:4c:50:71:0c:cd:e3:
         86:18:55:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg0OUQxMTAvBgNVBAUTKDExQzk3MjdDQTUyOTJDRTVEQTVENzBCQTg4MkJDMkQ2
NDNGNDEwODUwHhcNMjQwNTA2MjIwMTM4WhcNMjQwNTEzMjIwMTM4WjAYMRYwFAYD
VQQDEw02NjM5NTM0Mi0yZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9oKlkg52S7me0L5oFilVIs9EXIrK0uTbm1y8Bah1KwXTEQk1gWFABpvLMAS
3Xvr9/HF9hYC2XWMRkLmBN5MNos3HRWKd7nxuJwuZV76cRo3RHpYnwPcH5P78uke
vDKI8++awm9mO1FisFr9IYadK0/3F7QFbQ7oJxWAH4bK6GUmJpDqq2dA6CSN9fK1
NIDjyehYhspZorR2+1BDOhJ/UdckZzFiorObDhruWdgaELcpUQ8Rj5bRLCT8Ghmq
O4j89IEPVKhAfjWt5j2Gbxu1qLrHnti/pbXVfqN01XSQ6XOwr15AWpVwTFbuLmKZ
X8vpv/PWcPcd/pKVEHVbODUJrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE9qIBx
vaVlYQMuHduvTHmj6vTYMB8GA1UdIwQYMBaAFBHJcnylKSzl2l1wuogrwtZD9BCF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ5RC80NDFBNzI2NEI2
NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExPWGFYWEM2aUN2QzFrUDBF
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VjbHlmS1VwTE9YYVhYQzZpQ3ZDMWtQMEVJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODQ5RC80NDFBNzI2NEI2NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExP
WGFYWEM2aUN2QzFrUDBFSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYRuJyu5blVxuP4DKrSPlY+VKe5TELR73XpVkcYIfxYKlvI8jY16hR
qvpD0DMOCmEYLJsMnVyIZqHoD4rLENU3glS/eCqRhOxA1X5moogR+lH9A4A+/tqt
+n2OoQ4x/7Wl2vGdbGPEOpFbbNgzyTnDKEsFkhlPjxVA9ZhLrfEvh1CfAeq9ITlj
ekX9G48cWqtf+/k824QvI+rLcok4J1yob/UZY4KxmVh9pQ6pUEj9GU5joEhycVKd
mPEdZjtAFqnln4BjQejr7LQCs3PR+Lf/n6UKXNXcclAU1os+J6NWynqKEu6KBURg
IvhSvR01L2XZehcQT3lMUHEMzeOGGFVI
-----END CERTIFICATE-----
Generated at Mon May 6 22:40:52 2024 by rpki-client on console-ams.rpki-client.org