Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          5gRqBuXhXODtuc2kfcWdNFWqvbXKXBkefwQuy40LlR8=
Subject key identifier:   4B:32:95:CD:06:A3:0F:6C:5D:C4:D8:C8:FF:CA:68:15:A7:B4:E4:A9
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       1158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          1136
Signing time:             Thu 02 May 2024 17:54:37 +0000
Manifest this update:     Thu 02 May 2024 17:54:37 +0000
Manifest next update:     Thu 09 May 2024 17:54:36 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: stKbUnu9eJCEmYsmkSVDISmayM4ax18gY9MMe6mb664=)
                          2: 5604A238BB1C11ECBF12EE13C4F9AE02.roa (hash: ycVOkebWkWYLc1jBcD0MeUNRQH9rZsz7aLvT5lyWGzY=)
                          3: 1DFE0A801E4211ED82CEED40C4F9AE02.roa (hash: qofRcsCAp7YanmisT0f2RJffUD+YfgKyIiAI6uWRbzY=)
                          4: 41D236B27D2D11EDAFFEDF7CC4F9AE02.roa (hash: 9gGaws8FgVlbbs1c3Jna09SH8lkjBGf6jFRMXVIFpTo=)
                          5: 54581848BB1C11ECBF12EE13C4F9AE02.roa (hash: oDCBGGViAVElW64qKmesDuljzAM+qbpQYE3AsleW23E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4440 (0x1158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: May  2 17:54:37 2024 GMT
            Not After : May  9 17:54:36 2024 GMT
        Subject: CN=6633d35d-4964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:d8:87:ac:e1:e5:4a:1e:f9:f0:a8:07:0c:
                    2d:00:35:94:aa:69:b4:10:bb:8a:b9:92:1f:3b:05:
                    34:ea:b2:9c:82:10:7e:7a:5c:77:76:67:92:2e:2d:
                    32:64:84:6e:1e:37:e4:7c:91:8e:34:88:c9:a4:97:
                    b1:e5:af:13:62:64:7e:5d:96:3d:75:6b:71:c6:00:
                    8c:d8:1d:4d:b2:be:61:63:b8:96:d4:f7:f0:98:6c:
                    bc:6c:7e:2d:c4:5c:58:41:e0:57:df:79:a7:16:af:
                    32:5c:43:67:49:b3:73:d2:ad:9e:1e:45:04:b5:3c:
                    77:11:16:08:f8:ea:e4:45:36:09:91:a9:c4:be:9f:
                    51:d6:97:38:51:ed:07:2a:94:88:92:27:e4:6b:81:
                    b2:0b:c2:4d:e3:4b:69:ed:d7:ab:23:ec:1c:d1:ef:
                    7a:c9:f5:68:e1:32:f7:a9:7a:05:aa:74:7a:77:72:
                    85:6f:94:49:3d:83:62:2d:70:ef:ac:e9:84:50:25:
                    87:b4:03:65:17:ac:a9:bc:f9:c1:e7:d4:0f:06:e3:
                    45:e9:7b:84:a5:8d:b8:4b:6b:eb:ac:f3:10:65:64:
                    96:bb:ff:33:a9:32:d7:d7:5c:66:55:1f:24:48:d9:
                    47:ad:31:8b:58:68:a1:c2:74:77:bc:4c:f6:b3:26:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:95:CD:06:A3:0F:6C:5D:C4:D8:C8:FF:CA:68:15:A7:B4:E4:A9
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:32:61:03:9c:24:87:3f:35:25:4f:58:d3:40:b0:13:60:
         8b:dd:7c:90:d7:d2:57:a0:02:69:7b:29:27:73:4d:3d:c8:2c:
         be:13:7f:8c:1c:74:38:f4:df:b3:65:11:23:ca:e5:2f:50:5e:
         6f:cc:22:9d:a2:69:8f:2e:00:3f:66:e5:45:77:8b:4b:fa:62:
         a2:5e:23:a0:60:aa:f6:ca:c4:ec:31:6e:ed:18:e7:42:18:64:
         73:bc:d8:86:fb:73:91:fb:e3:eb:83:1a:9f:b6:5f:24:68:8b:
         6d:47:5d:35:69:74:91:8d:ba:2c:ac:29:56:19:65:6d:0b:46:
         2b:4d:6e:f0:92:61:6b:b3:6e:00:3e:ac:53:72:69:ec:24:b0:
         d7:2e:7b:cf:d4:a0:5c:22:e4:bc:ed:73:aa:de:59:07:1e:aa:
         7e:41:ac:66:b2:06:e1:e8:84:11:8c:44:3a:ea:ce:83:7f:ef:
         fa:69:1b:32:0d:4c:d0:19:75:0e:18:f8:51:8d:87:00:28:c8:
         7c:31:0f:d8:f9:f7:0d:68:eb:6c:be:37:62:93:13:1c:f3:b7:
         5c:bb:79:ea:c5:cc:83:f4:19:3b:84:64:73:4b:67:fe:d7:cb:
         45:53:51:3f:91:81:48:a0:9d:0d:12:df:9c:80:6d:df:5e:f7:
         f9:f0:7c:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB
NzNDQjQ4MTIwHhcNMjQwNTAyMTc1NDM3WhcNMjQwNTA5MTc1NDM2WjAYMRYwFAYD
VQQDEw02NjMzZDM1ZC00OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOPYh6zh5Uoe+fCoBwwtADWUqmm0ELuKuZIfOwU06rKcghB+elx3dmeSLi0y
ZIRuHjfkfJGONIjJpJex5a8TYmR+XZY9dWtxxgCM2B1Nsr5hY7iW1PfwmGy8bH4t
xFxYQeBX33mnFq8yXENnSbNz0q2eHkUEtTx3ERYI+OrkRTYJkanEvp9R1pc4Ue0H
KpSIkifka4GyC8JN40tp7derI+wc0e96yfVo4TL3qXoFqnR6d3KFb5RJPYNiLXDv
rOmEUCWHtANlF6ypvPnB59QPBuNF6XuEpY24S2vrrPMQZWSWu/8zqTLX11xmVR8k
SNlHrTGLWGihwnR3vEz2syZWfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsylc0G
ow9sXcTYyP/KaBWntOSpMB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5
QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QThBNC83OTBFNjEwQ0U5QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJs
YVYwM3AteTQzTE9uUExTQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAazDJhA5wkhz81JU9Y00CwE2CL3XyQ19JXoAJpeyknc009yCy+E3+M
HHQ49N+zZREjyuUvUF5vzCKdommPLgA/ZuVFd4tL+mKiXiOgYKr2ysTsMW7tGOdC
GGRzvNiG+3OR++Prgxqftl8kaIttR101aXSRjbosrClWGWVtC0YrTW7wkmFrs24A
PqxTcmnsJLDXLnvP1KBcIuS87XOq3lkHHqp+Qaxmsgbh6IQRjEQ66s6Df+/6aRsy
DUzQGXUOGPhRjYcAKMh8MQ/Y+fcNaOtsvjdikxMc87dcu3nqxcyD9Bk7hGRzS2f+
18tFU1E/kYFIoJ0NEt+cgG3fXvf58Hzb
-----END CERTIFICATE-----
Generated at Thu May 2 20:04:27 2024 by rpki-client on console-ams.rpki-client.org