Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          /EKvSpkGK0ljuvnNc14V9kLQQgVUnQvT4OahZ84O0jc=
Subject key identifier:   57:63:E2:2D:7C:EC:8E:CE:3F:80:4E:13:EC:BD:15:58:CE:46:70:58
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       26FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          2510
Signing time:             Tue 16 Apr 2024 16:10:00 +0000
Manifest this update:     Tue 16 Apr 2024 16:09:59 +0000
Manifest next update:     Tue 23 Apr 2024 16:09:59 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: i2DtUJ4gp7ggw3oziqTQMhaZyL7/3VkFas1UA2juJX0=)
                          2: A5AEC7A6AFED11EE9561416EC4F9AE02.roa (hash: Y5BuqFwbaI7re63o5PmqE7mrBh4jMGt1r0BLlHhNpfY=)
                          3: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: Qh7RN7YeyLrBGg7zxhK2Oe7wCm6h247/lDwDvm2kiNU=)
                          4: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: aAJLZjPUJuACCTvpSy1kxXadKYkNDTXzx0xj86mXBww=)
                          5: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: LP2p8BumLBYIO5+Yri43PDp4VbJIF6Xk1wtVXR0TnJg=)
                          6: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: h4/OAT+qJGylddnfn76cU70rc+hVAMJXrP4UtwDGK6I=)
                          7: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: 4jnK7laCVS60yhzcSVuYYNZQUIQpO+TJ9kufeaAY1cw=)
                          8: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: i6C+rXJeMqEy7X+CLnHWmnvmmbA5b893zKi/snovhvo=)
                          9: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: ixoy/wSKSmOGrPFBpmxrv5LsVkj2d8kI+W7jCW3vKJg=)
                          10: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: 2ne+z7g4C6hTWhNL7yfi5iWGj3rq/tLUH4y+aF2dJpI=)
                          11: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: BXf5GujzbS02LR1rm/GFLIluNcgnrubsWH5+vN+D36o=)
                          12: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: 1e03UWRVZ/5+y32SmpXe+TP1XJKPxBIsU/jxs0BWjSw=)
                          13: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: /Wt1Z8ZJ6pWEHDdoPKqKbe9iqHVuyV2AhukpepB9rOg=)
                          14: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: GfGKAdxNud+tUACjn3g5T9nVRLbkaqoQER5BfZEX8Y0=)
                          15: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: 2bINfJ63q0aI3/3Hj1Y/Xau/Srglj2VJ3QG3xLDskFc=)
                          16: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: qPJPPIhLucg7hVkunwTvkDm5ubZVClK+d8L9bJRO7JY=)
                          17: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: CgbtG6DGasO3uGNbTpcS06AefmbLFN8i1Wy06zcKMCQ=)
                          18: E681416041C511E8BEC06D36C4F9AE02.roa (hash: m+MvcbU53Q16b+EdR5S8QxCPrNXmDUERv6o94uYRjp0=)
                          19: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: Rgz3ppKREwJUQu+zJGW3pophrE6u2sRsREWmlvm9yTE=)
                          20: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: iv8nOulwcqxdim1eSXcRBYccKrkLkRNyX1DMR62JmfM=)
                          21: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: MH6nb/cUkptzt3+5pJf6PeBjbU6MEqAkVIzm0C8RdQU=)
                          22: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: ZqVDdf5yHYROu2F/jkHzaPvEliQhiiqrae0HpBjvn6g=)
                          23: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: BfI++zL7rX8hbCo8B0hIfCfWtfcAlWLoZxVH5oImA/8=)
                          24: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: iy6Hm/YV3Bpxh/WxkcBtCjgTs5v9J59W/QXNqYBswK0=)
                          25: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: DyBmAdnALuAG+BC7Mn1Sv8SDHm5yM2ahcyQ87t6NGNk=)
                          26: 350965D2992511EC94DB646EC4F9AE02.roa (hash: +u2SVI972hRXhRuB75bpOCoj9ih6sM/GEyOFtyDgjHE=)
                          27: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: a676MkfOFJvjQvvnutPHQX9t6yFU4IW/yDz19Wtuc8g=)
                          28: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: RMTyF1uVj6VY8nxNhmDfSAr1MFyTvQHhmDo/BRp8UzQ=)
                          29: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: 9aIp/N5OrLmp5johI1UAuK6fY33crcOAWHGl+qeCwjw=)
                          30: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: +RE8oCaJNdExWaDlVPdQMC0UCLjU80u7pWRHEKM7csY=)
                          31: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: 6dGXihWYlk63zsrg4KaIWx7U5Nn9c2sytIJqGtzNtxQ=)
                          32: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: ZtiK8rwojk9vk+8x3OZJpJzAAm04W0wNqieKrAANUXI=)
                          33: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: TEb6fiq9/f5LZ+elOa5ALyHgoVgSw553mtzVzxyagRQ=)
                          34: C86BC12E4D8011EE972A6F42C4F9AE02.roa (hash: +6vn5lS0B/B+F7/pj3pLi35Hb114w+SSlqsg+HjZndA=)
                          35: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: HHsule7Jzvd4QV+yED8Sn/ERf9vT00bCvTMZvvj0JVA=)
                          36: 7B47F39C821711E993240872C4F9AE02.roa (hash: XJ2PxrTygP9XZyngq4wQqZfgw8dXc/jrGjFq/9DOs7w=)
                          37: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: XBY5wO3kMds9YL3WpFG/JM0u34QgMc4G65losa8LONs=)
                          38: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: Fdh0iKaN9s5KAJUbhgRdPhwHOcikk4DN5iWNxBmnnTo=)
                          39: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: NsG8Yym5x5YJhEE8TufznJsUv5yfLQb4efscI1Gv6KI=)
                          40: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: n3b03mCCm3Bfv6uh1Ib8btbPT/egkFdoycOm+gFds1Y=)
                          41: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: /YRVWRKqzDBmoAwhBy0Iqrj5OH4UFjkmhQ5kqpJnlJY=)
                          42: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: IjxHoMvQokP79pXGuaoRygmBq1zsF0YktpQuqQZ+7HI=)
                          43: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: qzPjyr9EpmNtUu1Sgb+DxHbEaZiwqxj6sIunF5BOJKY=)
                          44: 411624587D2511ECA2A43549C4F9AE02.roa (hash: maVii3oQQBQ9WbSOvdxQACdm++4nijrCJMiZfKRjh7Q=)
                          45: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: QVezbCdzM6SE9QxfNOIImHSnrbfD4zoKYFkFUOwxOhs=)
                          46: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: U1plRsCurStd6Nqc7j5j6FlFBwkWx8gqnc/uWB3zfhY=)
                          47: F636F748DC9811EEA15ED615C4F9AE02.roa (hash: NGmjzPUFcJMJisK6EuQlnshsk6rgiaDitzzS7O1VM+c=)
                          48: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: epxoMjo4+1o5XT28i8TYAbk1iircLzPSgeEY8DzHNmQ=)
                          49: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: ihk91+q7IgNyUjYKGL+u42e69xVnX0pAZbLXyW700vM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 16:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9981 (0x26fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Apr 16 16:09:59 2024 GMT
            Not After : Apr 23 16:09:59 2024 GMT
        Subject: CN=661ea2d7-29d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:81:c8:04:8c:2d:d4:40:3b:e5:97:71:e1:
                    88:b9:3b:ef:cb:4c:bb:54:7a:89:58:07:4e:fe:c7:
                    ad:c6:07:81:ca:e4:d5:42:10:98:6b:93:1c:08:aa:
                    d9:7a:34:af:a9:b6:ea:39:88:b6:15:ba:01:81:61:
                    5f:36:aa:ad:67:77:49:5d:69:d4:7c:11:0e:1f:aa:
                    cf:89:f7:e0:f7:f7:b2:26:77:07:72:f5:e3:34:1f:
                    e6:c1:9b:98:52:f4:8d:0f:3c:59:9d:70:68:e0:b0:
                    68:85:e4:0f:f0:99:92:e2:32:81:f1:9a:e3:24:14:
                    ea:3e:e1:25:ae:93:c5:39:05:f0:af:3b:75:6f:6b:
                    02:f0:7b:6f:e4:47:ee:f0:1d:b7:b2:8a:ec:b9:d1:
                    94:49:e1:76:1f:cf:b0:f5:4e:4b:da:ee:02:58:52:
                    0e:a2:95:97:1d:df:e9:08:17:42:cc:0e:ca:f4:59:
                    5d:31:ed:66:0f:d2:2e:54:32:8b:26:b9:e3:6e:32:
                    9a:b9:74:0b:b8:f9:11:36:bd:10:a2:4c:4e:f5:87:
                    80:44:fb:b5:ec:70:b0:76:58:2e:9a:8b:23:c5:f8:
                    a9:2d:a3:2b:e3:b6:04:76:ce:db:a8:b9:7d:6c:66:
                    b4:aa:88:b6:e9:88:ff:c2:a1:24:7c:31:be:e4:d0:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:E2:2D:7C:EC:8E:CE:3F:80:4E:13:EC:BD:15:58:CE:46:70:58
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:78:d5:0d:f9:68:af:42:c9:a7:5c:be:f6:4f:f5:57:c1:47:
         ba:17:4c:01:a5:87:18:73:1b:36:28:79:d0:8c:b6:51:b5:29:
         e8:d0:3c:48:bb:a8:7e:72:ff:97:9d:55:af:28:74:a3:82:7e:
         f1:76:6d:e8:09:d4:d8:fb:1b:56:aa:06:cb:24:03:3e:57:dd:
         bf:43:67:61:85:f8:b4:dd:e9:fd:d3:44:62:e7:70:8b:6c:7c:
         54:be:0a:57:87:e6:3d:52:03:20:16:ad:90:24:f0:d1:fe:0a:
         9d:07:2f:fe:93:9d:cc:cb:92:dd:47:de:0c:b0:4c:df:9f:42:
         f8:19:89:db:0a:fe:1d:9e:e0:ba:e2:fc:9c:fc:c2:b1:de:77:
         4e:52:d3:d8:60:b3:c7:9c:6f:d7:20:21:71:0a:86:c0:d0:3f:
         22:43:41:2d:60:a1:8e:08:04:d8:a1:92:f2:05:1f:55:22:98:
         6d:eb:e4:d4:f0:ea:c2:5f:ef:b1:fe:a2:7d:6d:9d:e2:27:3e:
         4a:74:6d:07:74:f8:65:ce:53:da:72:e8:1b:6a:e1:3a:4a:fc:
         0d:78:63:33:7e:dc:44:cb:58:a1:48:04:c9:4d:dd:f5:d8:ee:
         a8:71:46:aa:74:26:e1:6c:89:30:b8:0b:6e:5f:fb:23:93:55:
         99:1d:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 17:33:32 2024 by rpki-client on console-ams.rpki-client.org