Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
File:                     QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json)
Hash identifier:          y740PH/EBNNg2NCNzjvkl2nyhehd9BNmWX7bnjNY+os=
Subject key identifier:   4A:88:E2:93:9E:6B:E1:26:8A:9C:14:2F:0C:E0:91:4C:05:50:8E:AF
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Certificate issuer:       /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial:       084F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
Manifest number:          0849
Signing time:             Sat 04 May 2024 21:51:09 +0000
Manifest this update:     Sat 04 May 2024 21:51:09 +0000
Manifest next update:     Sat 11 May 2024 21:51:09 +0000
Files and hashes:         1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: LOAku7WIUjBghq08c4XoD+DvWZzAdBgO/LrB3Bnoxtk=)
                          2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: XjI//uz3MIHrje/lHeiBp2v7ZWt9cLzLUWC9pX6gjb8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
                          rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127 (0x84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
        Validity
            Not Before: May  4 21:51:09 2024 GMT
            Not After : May 11 21:51:09 2024 GMT
        Subject: CN=6636adcd-ad96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:a6:ea:4f:3c:22:2f:26:38:2f:ef:74:62:
                    c3:10:9c:09:7d:34:1c:16:dd:8d:7b:db:bf:56:91:
                    3e:0c:f0:5d:28:1f:f2:99:ed:e3:83:2b:f8:8f:1e:
                    5a:72:e4:b8:b5:4b:1b:67:02:49:b4:66:38:70:ca:
                    79:47:d1:7b:04:6f:0c:0b:b8:a7:03:f0:ea:f5:b4:
                    4b:d4:fd:07:e8:17:15:a6:97:c4:8a:1b:3a:04:7d:
                    db:29:42:17:8c:fb:8f:c1:46:0e:80:28:81:64:e6:
                    bf:a8:65:4a:dd:63:a5:8a:fa:da:d9:eb:86:e7:d6:
                    00:d9:9d:66:63:80:bd:7c:ff:35:04:fc:89:f5:d1:
                    a4:68:44:44:71:b9:85:4a:24:b6:9c:f8:90:1e:ee:
                    2e:4f:84:5b:32:6d:81:f4:7b:88:63:d8:22:2f:8c:
                    20:25:86:ab:c6:00:c8:b0:31:bb:62:63:cd:68:af:
                    bb:f0:d8:a0:51:0a:95:b2:c7:14:2d:b6:53:96:c3:
                    c4:16:18:f6:3c:7a:f9:c9:18:6f:74:64:55:23:14:
                    f6:32:64:23:93:f8:d1:c2:ff:7d:ca:90:1c:4b:74:
                    ff:58:07:30:6d:30:b5:ef:05:a7:3c:d2:0a:8e:4e:
                    07:6d:2d:f9:27:7e:d8:af:dd:81:50:50:f0:18:8b:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:E2:93:9E:6B:E1:26:8A:9C:14:2F:0C:E0:91:4C:05:50:8E:AF
            X509v3 Authority Key Identifier:
                keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:7c:c5:8b:f2:f7:16:72:d1:93:69:c5:6d:17:3c:8e:9a:
         03:5a:57:59:f2:ea:9c:f5:84:b4:0b:30:a8:1b:87:49:c5:fb:
         54:09:3f:7c:61:e3:74:41:3f:48:a9:f6:9b:a4:13:63:0e:bb:
         1d:7f:92:68:b4:3b:57:36:12:43:c2:07:b6:d6:cd:03:b7:81:
         9b:89:83:ef:93:cc:13:cb:e7:ee:1d:80:3c:bd:81:9e:dd:fa:
         18:17:4a:3d:6c:4d:1a:82:84:31:8e:8a:5a:a3:20:9c:f7:fc:
         91:fc:19:b8:82:25:2f:60:c9:4f:2d:41:69:cc:af:eb:9c:0a:
         f4:63:5f:b0:0e:6c:db:46:9b:89:4b:13:11:aa:d9:25:ef:c3:
         1f:40:8e:35:a3:1b:fc:74:26:35:f1:2d:cf:f5:64:9d:22:9c:
         a9:f3:20:23:85:df:1c:7d:4b:f1:48:4a:d8:11:4b:5e:41:88:
         a5:ab:b1:1d:c7:3c:45:24:ff:e2:ed:b8:bc:84:73:53:7d:7a:
         ea:e8:54:46:87:15:69:b2:1f:72:2d:25:37:88:42:df:58:de:
         41:70:e1:0f:00:91:6a:6d:fe:6f:aa:1c:54:54:75:19:4f:4a:
         53:00:ca:70:a2:84:ce:ce:64:6d:fb:22:83:0e:39:31:26:74:
         84:d8:70:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD
N0ZFNjg4Q0UwHhcNMjQwNTA0MjE1MTA5WhcNMjQwNTExMjE1MTA5WjAYMRYwFAYD
VQQDEw02NjM2YWRjZC1hZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Aqm6k88Ii8mOC/vdGLDEJwJfTQcFt2Ne9u/VpE+DPBdKB/yme3jgyv4jx5a
cuS4tUsbZwJJtGY4cMp5R9F7BG8MC7inA/Dq9bRL1P0H6BcVppfEihs6BH3bKUIX
jPuPwUYOgCiBZOa/qGVK3WOlivra2euG59YA2Z1mY4C9fP81BPyJ9dGkaEREcbmF
SiS2nPiQHu4uT4RbMm2B9HuIY9giL4wgJYarxgDIsDG7YmPNaK+78NigUQqVsscU
LbZTlsPEFhj2PHr5yRhvdGRVIxT2MmQjk/jRwv99ypAcS3T/WAcwbTC17wWnPNIK
jk4HbS35J37Yr92BUFDwGIsaTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqI4pOe
a+EmipwULwzgkUwFUI6vMB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0
MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr
Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfSHzFi/L3FnLRk2nFbRc8jpoDWldZ8uqc9YS0CzCoG4dJxftUCT98
YeN0QT9IqfabpBNjDrsdf5JotDtXNhJDwge21s0Dt4GbiYPvk8wTy+fuHYA8vYGe
3foYF0o9bE0agoQxjopaoyCc9/yR/Bm4giUvYMlPLUFpzK/rnAr0Y1+wDmzbRpuJ
SxMRqtkl78MfQI41oxv8dCY18S3P9WSdIpyp8yAjhd8cfUvxSErYEUteQYilq7Ed
xzxFJP/i7bi8hHNTfXrq6FRGhxVpsh9yLSU3iELfWN5BcOEPAJFqbf5vqhxUVHUZ
T0pTAMpwooTOzmRt+yKDDjkxJnSE2HCr
-----END CERTIFICATE-----
Generated at Sun May 5 00:12:21 2024 by rpki-client on console-fra.rpki-client.org