Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          yKffmTDxlrcYWQsNFPCcY0hEJbbvY6lPwgXN/fiYPvs=
Subject key identifier:   34:23:2E:F3:70:62:90:2D:E0:EB:5F:03:9E:1E:C9:71:41:8B:30:53
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          35
Signing time:             Wed 15 May 2024 08:28:57 +0000
Manifest this update:     Wed 15 May 2024 08:28:57 +0000
Manifest next update:     Wed 22 May 2024 08:28:57 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: h/llJ53ISAqZ8sJb6z+/5NnOeQGOM50GG7eAvX4Oyiw=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: +EZuiXa6xRwpbcKtp4FRN0MvHlDfGmQTO3Xpng4ngHU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 08:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: May 15 08:28:57 2024 GMT
            Not After : May 22 08:28:57 2024 GMT
        Subject: CN=66447249-91da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:74:2e:fc:2b:a5:ac:c3:0d:f9:a8:40:a6:
                    91:3c:69:0b:5c:cf:86:66:e1:a5:ec:ec:42:99:53:
                    8e:fb:62:5c:72:c5:a3:60:a1:94:27:a5:c8:dd:90:
                    f5:21:e8:a9:ab:a9:6a:1c:ee:6c:36:56:8c:71:44:
                    87:47:57:98:98:4c:0e:e2:71:cb:76:f2:75:72:56:
                    3f:8b:12:2f:ce:f3:8e:41:90:55:3c:09:c7:a0:ba:
                    4d:99:fb:d0:fd:71:f4:76:c8:0f:95:53:67:ca:bc:
                    88:53:87:b5:e9:0a:8b:4a:79:b1:08:b7:52:bb:ac:
                    c2:07:72:f8:06:fb:44:46:24:b6:50:8e:ba:2a:7f:
                    c1:92:aa:2a:ba:e4:da:d2:ef:2f:f3:7c:0c:e2:60:
                    44:62:69:07:ae:37:e9:76:7b:94:7d:2e:6d:ea:18:
                    40:7b:2b:f0:44:ff:8f:48:59:ce:f3:05:a5:a4:f6:
                    21:54:f3:1b:d8:5b:ce:99:5e:11:3c:b3:8e:c0:44:
                    4e:aa:eb:8f:80:91:1b:c4:6f:f9:48:d4:a3:69:40:
                    5a:7b:cf:9a:24:50:83:d2:8b:93:10:df:84:78:01:
                    9b:cc:3d:64:de:b3:8e:d7:d5:51:30:f9:3b:b5:7f:
                    00:fc:2a:f6:98:12:35:8a:af:61:49:de:65:3b:71:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:2E:F3:70:62:90:2D:E0:EB:5F:03:9E:1E:C9:71:41:8B:30:53
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:a5:56:d9:22:d7:1e:23:ec:75:98:45:aa:aa:16:cf:5c:
         bd:ca:9d:b9:b1:9f:56:58:75:ad:57:57:5b:66:5d:4d:82:c4:
         af:fd:8b:bb:4e:6f:ff:31:1e:ce:ee:8e:8b:9c:fe:32:73:98:
         b0:9f:ac:90:cf:5b:0c:09:88:66:2b:ca:4c:77:f8:d5:47:c1:
         00:68:0e:c0:81:d7:b5:16:27:d6:0a:c0:51:7d:29:82:ca:5b:
         b6:90:6b:1c:98:ad:10:50:16:4b:1a:fe:ab:45:55:4a:71:f8:
         86:c9:3a:bb:1f:b1:f0:bd:9e:45:e7:6a:46:0d:7b:94:34:fd:
         21:a9:6e:2a:00:4a:aa:ff:d8:0e:59:ba:71:a0:99:d0:a3:db:
         a8:a4:97:5d:54:3c:a5:3c:7f:bc:41:29:03:a4:49:f6:1b:87:
         a7:ef:56:85:b8:03:69:db:c9:a1:9b:f8:1f:7f:81:95:f9:37:
         de:9d:bd:5e:71:5b:ec:92:c1:63:ae:9b:be:7b:fd:88:1f:ca:
         f7:e3:9b:00:81:16:ac:93:fd:41:cf:a0:ad:36:86:60:59:83:
         1a:2d:d4:ac:2e:15:69:49:b9:f4:ed:e3:23:a9:73:7a:59:02:
         7a:b3:11:34:92:8b:ae:8f:fe:3f:0a:9a:99:d3:1e:73:d0:08:
         e8:6d:56:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
ODY4OTExMC8GA1UEBRMoNjNGQzJGNURFMDk0QzgzOTZEQzhCQzk3NDRFRDY4MkZG
NEIyMzg4MTAeFw0yNDA1MTUwODI4NTdaFw0yNDA1MjIwODI4NTdaMBgxFjAUBgNV
BAMTDTY2NDQ3MjQ5LTkxZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNwHQu/CulrMMN+ahAppE8aQtcz4Zm4aXs7EKZU477YlxyxaNgoZQnpcjdkPUh
6KmrqWoc7mw2VoxxRIdHV5iYTA7icct28nVyVj+LEi/O845BkFU8Cceguk2Z+9D9
cfR2yA+VU2fKvIhTh7XpCotKebEIt1K7rMIHcvgG+0RGJLZQjroqf8GSqiq65NrS
7y/zfAziYERiaQeuN+l2e5R9Lm3qGEB7K/BE/49IWc7zBaWk9iFU8xvYW86ZXhE8
s47ARE6q64+AkRvEb/lI1KNpQFp7z5okUIPSi5MQ34R4AZvMPWTes47X1VEw+Tu1
fwD8KvaYEjWKr2FJ3mU7cU31AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNCMu83Bi
kC3g618Dnh7JcUGLMFMwHwYDVR0jBBgwFoAUY/wvXeCUyDltyLyXRO1oL/SyOIEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4Njg5LzUxNUVDQjMyQzRB
NzExRUU4NzVEMDgyQ0M0RjlBRTAyL1lfd3ZYZUNVeURsdHlMeVhSTzFvTF9TeU9J
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWV93dlhlQ1V5RGx0eUx5WFJPMW9MX1N5T0lFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4
Njg5LzUxNUVDQjMyQzRBNzExRUU4NzVEMDgyQ0M0RjlBRTAyL1lfd3ZYZUNVeURs
dHlMeVhSTzFvTF9TeU9JRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF8MpVbZItceI+x1mEWqqhbPXL3Knbmxn1ZYda1XV1tmXU2CxK/9i7tO
b/8xHs7ujouc/jJzmLCfrJDPWwwJiGYrykx3+NVHwQBoDsCB17UWJ9YKwFF9KYLK
W7aQaxyYrRBQFksa/qtFVUpx+IbJOrsfsfC9nkXnakYNe5Q0/SGpbioASqr/2A5Z
unGgmdCj26ikl11UPKU8f7xBKQOkSfYbh6fvVoW4A2nbyaGb+B9/gZX5N96dvV5x
W+ySwWOum757/YgfyvfjmwCBFqyT/UHPoK02hmBZgxot1KwuFWlJufTt4yOpc3pZ
AnqzETSSi66P/j8KmpnTHnPQCOhtVi0=
-----END CERTIFICATE-----
Generated at Wed May 15 09:04:06 2024 by rpki-client on console-ams.rpki-client.org