Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
File:                     FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft (raw, json)
Hash identifier:          YmZ+L7wTS4I8Gewts2OndqdOY2ZlC2L85nhpuRHdgtg=
Subject key identifier:   EC:F4:62:E0:EE:9F:FC:75:07:F9:54:BD:31:4D:8F:AB:AE:78:82:0F
Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Certificate issuer:       /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
Manifest number:          94
Signing time:             Sun 19 May 2024 06:58:31 +0000
Manifest this update:     Sun 19 May 2024 06:58:31 +0000
Manifest next update:     Sun 26 May 2024 06:58:31 +0000
Files and hashes:         1: FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl (hash: 71T5SBL8gZylHrAElgibsJHS0UFLg2O0TvXlE+aiGrs=)
                          2: 9D4041FA376411EEB0C70459C4F9AE02.roa (hash: ZFtHcBc54ZeKS+b4WzXq0vpdKRKFZcVziUY5NK5/ml8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl
                          rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
        Validity
            Not Before: May 19 06:58:31 2024 GMT
            Not After : May 26 06:58:31 2024 GMT
        Subject: CN=6649a317-e8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:53:e8:30:92:ee:f8:2e:d1:99:d8:76:9b:
                    69:43:d6:be:5e:b7:a4:aa:f1:8f:53:50:ff:f7:74:
                    95:6a:e9:85:36:70:2e:52:ae:ff:bd:b5:90:ee:f0:
                    88:b9:43:9e:77:1d:66:50:8e:b4:a5:d5:33:ca:ce:
                    42:b2:8b:27:b9:fd:71:a1:d9:f9:dd:2f:14:58:2e:
                    9b:13:07:2f:f8:58:1a:91:01:5d:40:49:79:31:c0:
                    a6:f8:05:3c:3d:24:fb:01:7f:2d:d2:d2:6e:8a:ad:
                    13:7f:fd:71:b7:88:c1:67:84:2d:c8:64:a2:83:84:
                    d7:54:6b:76:7f:fa:89:aa:ed:2c:87:84:9a:13:85:
                    7d:32:1c:a8:d8:b5:87:03:5e:f8:a2:e5:ce:d8:3e:
                    e3:bd:df:fd:05:19:17:b3:d6:65:ab:f5:87:63:57:
                    63:09:2d:68:64:4b:24:a0:22:e7:3e:23:1f:26:88:
                    4d:3e:4d:cd:dd:0d:6b:7c:07:eb:f1:e2:f5:dd:c3:
                    3d:e4:0a:34:40:4c:f5:67:d7:6c:96:73:88:62:52:
                    49:88:fb:d2:9e:2e:79:78:9b:ca:cd:9e:93:e1:55:
                    5a:c5:b5:f4:e7:e3:e8:18:26:f3:e2:ec:be:21:7f:
                    42:b8:30:f8:b4:c9:98:fc:bf:69:cd:ed:38:6a:c7:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F4:62:E0:EE:9F:FC:75:07:F9:54:BD:31:4D:8F:AB:AE:78:82:0F
            X509v3 Authority Key Identifier:
                keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9f:42:cf:5b:02:75:df:a2:54:b3:02:0d:91:e2:ad:16:50:
         0f:14:a3:21:64:48:d8:24:1f:15:53:50:35:69:f8:ce:1e:93:
         bd:88:c5:3f:8b:96:86:cf:32:cf:94:7b:02:e3:62:dd:82:36:
         8c:65:f2:7b:48:19:be:6e:5d:20:cc:d0:25:70:91:59:31:29:
         85:9e:7c:5f:7d:05:f3:40:34:9e:13:e7:c9:c4:ef:04:23:53:
         6b:0f:1e:38:3d:d2:c8:f4:a9:54:ba:ee:23:28:d4:3c:57:3e:
         4d:79:45:44:9a:ce:57:f5:b6:93:e6:61:9d:1f:65:20:1e:1e:
         74:8c:f0:28:77:94:35:a9:71:f6:2d:1a:08:0f:39:44:5f:f3:
         a8:03:00:f8:bc:64:d9:08:36:33:3f:44:70:5a:1b:83:bf:70:
         03:26:9e:3d:93:26:d3:af:82:4f:e3:8f:43:d9:50:c2:dc:2c:
         82:24:b8:ce:5e:a5:72:5c:42:39:fb:3c:e6:a9:24:5f:b9:9a:
         27:f3:67:65:43:89:7b:d8:60:98:6a:d4:a3:ca:86:d0:63:8f:
         f0:8b:56:2a:19:65:cc:c3:b6:1a:68:4f:41:f7:0e:fc:76:aa:
         4f:8b:a3:39:24:6b:07:1f:fc:2c:5e:84:89:92:7b:9e:d6:1e:
         62:ce:e2:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VEREYxMTAvBgNVBAUTKDE1RTFDREREQUVDQ0VBQkI2NTY2NUUzMEFDRjQ0NUY5
NzI5NjYzRTEwHhcNMjQwNTE5MDY1ODMxWhcNMjQwNTI2MDY1ODMxWjAYMRYwFAYD
VQQDEw02NjQ5YTMxNy1lOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvmdT6DCS7vgu0ZnYdptpQ9a+XrekqvGPU1D/93SVaumFNnAuUq7/vbWQ7vCI
uUOedx1mUI60pdUzys5Csosnuf1xodn53S8UWC6bEwcv+FgakQFdQEl5McCm+AU8
PST7AX8t0tJuiq0Tf/1xt4jBZ4QtyGSig4TXVGt2f/qJqu0sh4SaE4V9Mhyo2LWH
A174ouXO2D7jvd/9BRkXs9Zlq/WHY1djCS1oZEskoCLnPiMfJohNPk3N3Q1rfAfr
8eL13cM95Ao0QEz1Z9dslnOIYlJJiPvSni55eJvKzZ6T4VVaxbX05+PoGCbz4uy+
IX9CuDD4tMmY/L9pze04asd6tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz0YuDu
n/x1B/lUvTFNj6uueIIPMB8GA1UdIwQYMBaAFBXhzd2uzOq7ZWZeMKz0RflylmPh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRURERi81NDc4NTc5NjM3
NjQxMUVFQTVBQTdBNThDNEY5QUUwMi9GZUhOM2E3TTZydGxabDR3clBSRi1YS1dZ
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZlSE4zYTdNNnJ0bFpsNHdyUFJGLVhLV1ktRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RURERi81NDc4NTc5NjM3NjQxMUVFQTVBQTdBNThDNEY5QUUwMi9GZUhOM2E3TTZy
dGxabDR3clBSRi1YS1dZLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPn0LPWwJ136JUswINkeKtFlAPFKMhZEjYJB8VU1A1afjOHpO9iMU/
i5aGzzLPlHsC42LdgjaMZfJ7SBm+bl0gzNAlcJFZMSmFnnxffQXzQDSeE+fJxO8E
I1NrDx44PdLI9KlUuu4jKNQ8Vz5NeUVEms5X9baT5mGdH2UgHh50jPAod5Q1qXH2
LRoIDzlEX/OoAwD4vGTZCDYzP0RwWhuDv3ADJp49kybTr4JP449D2VDC3CyCJLjO
XqVyXEI5+zzmqSRfuZon82dlQ4l72GCYatSjyobQY4/wi1YqGWXMw7YaaE9B9w78
dqpPi6M5JGsHH/wsXoSJknue1h5izuJZ
-----END CERTIFICATE-----
Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org