Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
File:                     wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft (raw, json)
Hash identifier:          h+eMWokiKq4jsBK3BJLnJBxCzJBmrgNKZvsoMtBOUl4=
Subject key identifier:   31:59:EE:15:00:D5:FE:72:19:3B:21:F3:EB:52:09:82:D5:9C:36:48
Authority key identifier: C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF
Certificate issuer:       /CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
Certificate serial:       06B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
Manifest number:          06B4
Signing time:             Sat 04 May 2024 23:17:27 +0000
Manifest this update:     Sat 04 May 2024 23:17:26 +0000
Manifest next update:     Sat 11 May 2024 23:17:26 +0000
Files and hashes:         1: wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl (hash: PtCvTakgVGkyzJUN4kv0j5/gAzkhGPjh9VQCYKaRnnY=)
                          2: 575CFFB013BE11EB943B905BC4F9AE02.roa (hash: eMi7JojnrPXwFatGK1KuVs8dPZ4W3e/MU1ZBjc9IFZw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl
                          rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FF31/serialNumber=C2AC9454158A37C1A1189D46A2EE1453750DA9AF
        Validity
            Not Before: May  4 23:17:26 2024 GMT
            Not After : May 11 23:17:26 2024 GMT
        Subject: CN=6636c206-55bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:77:bd:94:9e:43:08:eb:77:54:c8:61:6c:
                    df:a1:c3:50:9b:35:ee:f2:9c:5c:b0:86:5b:00:53:
                    1e:ce:3c:85:26:97:46:53:e7:81:2c:7b:8f:06:03:
                    b1:4c:8e:17:4b:a3:10:55:51:01:0e:92:d2:e8:a2:
                    91:2f:cb:0d:bc:ad:94:b7:59:84:33:e5:92:02:01:
                    2c:5a:c2:f0:85:ed:61:1a:4c:37:e5:52:5d:11:bd:
                    14:60:c0:9e:fa:36:2e:0b:6e:2c:4d:dd:c0:8b:be:
                    78:ff:63:d5:8e:ef:20:2f:1c:23:fb:2c:e6:34:14:
                    f5:ff:41:e7:1d:7a:c3:11:96:78:45:8d:19:94:5e:
                    f3:cd:c2:dc:fa:d8:74:45:a1:52:89:bc:db:69:e1:
                    52:66:3c:ef:ff:e6:01:ef:d5:01:75:72:6b:c3:e7:
                    fe:b0:5f:a0:7d:ce:08:40:0d:fb:a2:e8:46:72:97:
                    7b:0e:35:4b:5f:78:3a:9d:95:14:9d:ba:6c:a3:9d:
                    58:0e:df:7f:2d:a6:36:d7:7f:db:38:e9:92:81:d9:
                    e2:2c:33:79:9f:29:d8:99:42:dd:4a:9f:f0:6b:76:
                    9f:b6:cf:60:63:48:cf:04:02:81:a2:cb:82:ae:32:
                    b3:2b:2a:23:70:a6:83:87:c4:c9:7c:66:86:d0:7a:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:59:EE:15:00:D5:FE:72:19:3B:21:F3:EB:52:09:82:D5:9C:36:48
            X509v3 Authority Key Identifier:
                keyid:C2:AC:94:54:15:8A:37:C1:A1:18:9D:46:A2:EE:14:53:75:0D:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF31/B56BB72413BC11EBBCFEB359C4F9AE02/wqyUVBWKN8GhGJ1Gou4UU3UNqa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:dc:75:8d:f5:3c:3a:b9:a1:44:a9:d0:c3:56:d4:be:b8:
         e7:96:e3:96:0c:c3:a3:65:58:a0:8e:bd:35:d8:43:0a:64:45:
         0c:eb:55:9d:3f:af:d1:d3:51:33:4d:d2:3b:59:7b:3c:b1:e7:
         ca:40:34:c4:3d:ed:80:c3:23:be:27:9d:64:5c:49:b4:a0:f9:
         c5:f0:87:7f:69:f2:ec:e0:2e:7f:dd:9d:99:46:70:e9:d3:be:
         4f:a0:74:3f:ca:c9:b3:ec:ca:fb:51:66:f8:c1:58:cb:74:ed:
         df:11:3f:c7:83:e0:4d:7d:5c:5b:06:19:d2:db:50:47:6e:78:
         cf:67:d0:04:47:4f:77:67:ac:b6:83:13:a5:59:25:00:9c:ba:
         66:ce:ae:dc:ed:d6:bc:db:d5:33:b1:7d:06:14:7a:75:e4:28:
         c8:33:ce:c8:2e:c1:63:38:08:95:cc:04:e3:25:05:22:58:3a:
         ef:1a:cb:ab:df:6b:91:24:4f:e8:43:b2:7c:1e:7d:7d:d3:93:
         be:79:00:db:a6:b5:2e:ba:7d:69:4e:15:e2:4b:15:61:e3:92:
         b8:cd:84:06:d1:7b:f6:54:c8:e7:16:fc:64:94:a8:43:74:71:
         0e:c3:4e:30:05:92:21:16:73:5d:6c:d6:c9:d8:3b:39:65:9b:
         1f:0f:d6:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZGMzExMTAvBgNVBAUTKEMyQUM5NDU0MTU4QTM3QzFBMTE4OUQ0NkEyRUUxNDUz
NzUwREE5QUYwHhcNMjQwNTA0MjMxNzI2WhcNMjQwNTExMjMxNzI2WjAYMRYwFAYD
VQQDEw02NjM2YzIwNi01NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBl3vZSeQwjrd1TIYWzfocNQmzXu8pxcsIZbAFMezjyFJpdGU+eBLHuPBgOx
TI4XS6MQVVEBDpLS6KKRL8sNvK2Ut1mEM+WSAgEsWsLwhe1hGkw35VJdEb0UYMCe
+jYuC24sTd3Ai754/2PVju8gLxwj+yzmNBT1/0HnHXrDEZZ4RY0ZlF7zzcLc+th0
RaFSibzbaeFSZjzv/+YB79UBdXJrw+f+sF+gfc4IQA37ouhGcpd7DjVLX3g6nZUU
nbpso51YDt9/LaY213/bOOmSgdniLDN5nynYmULdSp/wa3afts9gY0jPBAKBosuC
rjKzKyojcKaDh8TJfGaG0Hr/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFZ7hUA
1f5yGTsh8+tSCYLVnDZIMB8GA1UdIwQYMBaAFMKslFQVijfBoRidRqLuFFN1Damv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkYzMS9CNTZCQjcyNDEz
QkMxMUVCQkNGRUIzNTlDNEY5QUUwMi93cXlVVkJXS044R2hHSjFHb3U0VVUzVU5x
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dxeVVWQldLTjhHaEdKMUdvdTRVVTNVTnFhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkYzMS9CNTZCQjcyNDEzQkMxMUVCQkNGRUIzNTlDNEY5QUUwMi93cXlVVkJXS044
R2hHSjFHb3U0VVUzVU5xYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbS9x1jfU8OrmhRKnQw1bUvrjnluOWDMOjZVigjr012EMKZEUM61Wd
P6/R01EzTdI7WXs8sefKQDTEPe2AwyO+J51kXEm0oPnF8Id/afLs4C5/3Z2ZRnDp
075PoHQ/ysmz7Mr7UWb4wVjLdO3fET/Hg+BNfVxbBhnS21BHbnjPZ9AER093Z6y2
gxOlWSUAnLpmzq7c7da829UzsX0GFHp15CjIM87ILsFjOAiVzATjJQUiWDrvGsur
32uRJE/oQ7J8Hn1905O+eQDbprUuun1pThXiSxVh45K4zYQG0Xv2VMjnFvxklKhD
dHEOw04wBZIhFnNdbNbJ2Ds5ZZsfD9ad
-----END CERTIFICATE-----
Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org