Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
File:                     9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json)
Hash identifier:          IhdUs5qZ55tINNKQCNObagn7Egu70O3l8WFIFo6xkQ8=
Subject key identifier:   74:06:17:C6:85:59:F5:6C:54:57:A4:45:9C:E3:C8:31:38:A4:55:79
Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6
Certificate issuer:       /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
Certificate serial:       0564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
Manifest number:          055F
Signing time:             Tue 07 May 2024 00:48:02 +0000
Manifest this update:     Tue 07 May 2024 00:48:01 +0000
Manifest next update:     Tue 14 May 2024 00:48:01 +0000
Files and hashes:         1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: PeKaO6hST/1LmtW+L7r4GLUAUc7EJz43rZQbrAeTWk0=)
                          2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: WhjYXkxZApUyC6kLLwWsyENauT6qc8+742zotM8AzHo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl
                          rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6
        Validity
            Not Before: May  7 00:48:01 2024 GMT
            Not After : May 14 00:48:01 2024 GMT
        Subject: CN=66397a42-8aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:66:2a:2a:fd:6c:85:45:ae:ff:23:48:08:
                    4a:a9:b6:bf:f6:6e:2b:20:0c:28:89:7f:5a:8b:11:
                    66:58:99:c5:63:96:88:f2:f2:62:9e:7a:bc:4e:86:
                    1a:45:28:ed:52:32:4b:3b:6a:08:7e:2f:d4:9b:d6:
                    d4:54:18:a8:34:15:6d:54:13:86:8e:ed:78:fd:40:
                    a7:c8:33:a2:8e:85:dd:ae:c8:da:be:0e:75:ca:ec:
                    07:fe:dd:17:6f:b4:f2:78:de:ef:d3:43:31:39:c5:
                    e5:9e:4a:88:ec:24:a1:5c:85:4e:10:bc:d2:1b:6a:
                    ac:db:ba:44:35:7e:c8:da:d1:81:cc:6b:b3:47:59:
                    80:79:7a:ca:71:32:fe:cf:fe:b3:86:83:bb:2e:59:
                    3a:68:84:31:87:06:3c:c8:e0:a7:62:cc:9c:af:af:
                    be:f0:6a:3c:f9:d9:b5:8e:5d:d6:78:0b:18:d5:33:
                    b3:4b:1e:13:60:df:d6:8e:b6:5e:14:38:43:8b:0d:
                    29:c0:b7:0b:be:8f:59:bb:2d:aa:dc:06:e8:8f:71:
                    2f:cc:34:12:0e:b5:0e:02:25:3e:35:ac:40:f1:bb:
                    f5:cb:9f:73:27:46:e4:e1:c3:f9:8b:09:f4:ac:3b:
                    e2:f2:76:94:e9:48:66:c6:48:d5:b7:1c:5b:4c:ef:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:17:C6:85:59:F5:6C:54:57:A4:45:9C:E3:C8:31:38:A4:55:79
            X509v3 Authority Key Identifier:
                keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:9d:23:47:0b:31:ab:67:77:1d:dd:ab:1b:e6:d0:c3:37:
         84:0d:42:c0:cd:32:d0:f9:3d:86:5e:1c:c1:db:17:f1:a0:dc:
         cb:38:38:55:1c:14:77:d0:54:70:a4:e3:63:77:c4:6c:da:33:
         c7:b0:27:f7:1d:b5:ce:68:90:03:be:1e:8b:1c:94:89:e6:c4:
         72:1f:43:43:8f:d4:83:82:3f:ec:36:1e:12:1b:1c:68:74:d3:
         1c:71:a6:fe:40:c4:6e:24:cd:c7:1f:ba:b7:da:19:7a:f1:6d:
         1e:fd:69:9d:12:7b:e1:15:4d:ee:6e:4a:60:7c:13:6a:6a:19:
         de:d4:35:6e:fe:d7:f0:c9:f5:eb:2b:0d:a6:8d:9d:45:47:fd:
         a9:10:b0:d0:2c:6e:09:b0:e4:4b:e8:64:a7:b6:b8:bc:94:f0:
         fa:ba:cb:50:b2:10:cc:be:c6:f0:a5:66:6d:d6:39:30:28:1c:
         80:df:c2:22:cd:f6:42:c2:0a:6e:b6:d6:99:b9:e4:3d:79:ca:
         92:d0:83:d4:cf:b6:ba:c9:12:f1:af:c1:ce:58:5b:f2:93:f0:
         ed:a8:ea:e8:3c:a4:90:a3:fb:27:4f:10:76:23:e9:8b:f8:e9:
         62:8e:01:ca:39:84:c6:e7:d4:b9:ab:fd:63:e3:7a:b0:ad:a8:
         9e:99:78:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG
NzU4MEJFRDYwHhcNMjQwNTA3MDA0ODAxWhcNMjQwNTE0MDA0ODAxWjAYMRYwFAYD
VQQDEw02NjM5N2E0Mi04YWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sxmKir9bIVFrv8jSAhKqba/9m4rIAwoiX9aixFmWJnFY5aI8vJinnq8ToYa
RSjtUjJLO2oIfi/Um9bUVBioNBVtVBOGju14/UCnyDOijoXdrsjavg51yuwH/t0X
b7TyeN7v00MxOcXlnkqI7CShXIVOELzSG2qs27pENX7I2tGBzGuzR1mAeXrKcTL+
z/6zhoO7Llk6aIQxhwY8yOCnYsycr6++8Go8+dm1jl3WeAsY1TOzSx4TYN/WjrZe
FDhDiw0pwLcLvo9Zuy2q3Aboj3EvzDQSDrUOAiU+NaxA8bv1y59zJ0bk4cP5iwn0
rDvi8naU6UhmxkjVtxxbTO8XuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQGF8aF
WfVsVFekRZzjyDE4pFV5MB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5
NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243
b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCePZ0jRwsxq2d3Hd2rG+bQwzeEDULAzTLQ+T2GXhzB2xfxoNzLODhV
HBR30FRwpONjd8Rs2jPHsCf3HbXOaJADvh6LHJSJ5sRyH0NDj9SDgj/sNh4SGxxo
dNMccab+QMRuJM3HH7q32hl68W0e/WmdEnvhFU3ubkpgfBNqahne1DVu/tfwyfXr
Kw2mjZ1FR/2pELDQLG4JsORL6GSntri8lPD6ustQshDMvsbwpWZt1jkwKByA38Ii
zfZCwgputtaZueQ9ecqS0IPUz7a6yRLxr8HOWFvyk/DtqOroPKSQo/snTxB2I+mL
+OlijgHKOYTG59S5q/1j43qwraiemXhA
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:14 2024 by rpki-client on console-fra.rpki-client.org