Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
File:                     MVUT5UqwyZuLyoQELjg1i2DbGyw.mft (raw, json)
Hash identifier:          1akbPB5/PkSu0hUNSOpCR8CDJQG9kcUvVofenb4VPfg=
Subject key identifier:   A2:BA:FC:DC:D2:95:EB:BC:95:FF:69:63:06:F9:32:12:B3:33:2E:44
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       065E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
Manifest number:          05F2
Signing time:             Fri 03 May 2024 00:36:56 +0000
Manifest this update:     Fri 03 May 2024 00:36:56 +0000
Manifest next update:     Fri 10 May 2024 00:36:56 +0000
Files and hashes:         1: MVUT5UqwyZuLyoQELjg1i2DbGyw.crl (hash: ebQRxoo5OWalrbhz49Ozo8vtab8csgWFCCWb6HC4GVM=)
                          2: B6F12A04A72E11EDA708F167C4F9AE02.roa (hash: GCD8NBoMqcZ0c7kk3zGV62PRpqxlpKnhyPSVN8HS6Ns=)
                          3: D0DC58F432C611ECA639A749C4F9AE02.roa (hash: pGddi0dgARM/Co4YbF0XLgCY0cVivgHVzlnQPF5c5tk=)
                          4: 3558D5DC1F1711EC924DB151C4F9AE02.roa (hash: vmKL9ES/41qaf2G6CmnaR/4nRFQxh8c6uQBzQEPSeKk=)
                          5: B2A86726A69A11ED83470E12C4F9AE02.roa (hash: hIbZAyPJ67F/rI4AQQk1xxh0vADOwMkIUcg+H9ZmNDQ=)
                          6: 35A803641F1C11ECAD024E53C4F9AE02.roa (hash: RXm6X8dPtin6b1fUphtcowFvgtCs8KVHWA4JzuYZ5z8=)
                          7: B3570772A69A11ED83470E12C4F9AE02.roa (hash: xM7w+4gY6+TWDCm0XJxwNxkPTvBftJ2/Vk5aPFMwGUs=)
                          8: 2784EDACA73711ED85D58D3CC4F9AE02.roa (hash: O5vC1vUqT3DKwr4mVLVnPqdYEKuQw9YbDElxI4VwiA0=)
                          9: BB571BD8998D11EE896F7A74C4F9AE02.roa (hash: +YOAvnKwpNFPxthlvsPCdWIOA3hmZOd6ZVwfWLyW1eU=)
                          10: B81F8808A72E11EDA708F167C4F9AE02.roa (hash: +C42MncUiVmA8hEMkv7M2svsEqpivYDCaY3SuFqVREQ=)
                          11: 350E08F41F1C11ECAD024E53C4F9AE02.roa (hash: 2KquaHf2QQT/V5i4i4IX4aVhysVuoIWkFQOIgboR6HA=)
                          12: DAAFB93452D811ECB51CE973C4F9AE02.roa (hash: vyGxkKLLnhbY49olKecp8DRN/sycq8gt4uYO+E595LY=)
                          13: E0125116A69711ED9DFF0870C4F9AE02.roa (hash: 43V8A8FZ79WX0xWq7N+VlWjorSdmJm0W+/h+2+Vpsvc=)
                          14: CEEBD0EC32C611ECA639A749C4F9AE02.roa (hash: kZCI4nH8sDsuaHAosn3dF9Fe9+XtFL6j4KF2Neo7CJU=)
                          15: 4A32E74C26D411EEA00C7C38C4F9AE02.roa (hash: L/i14I24+zJupsItDxx2ARJgZUzW+z1NrOKC2yo5r0I=)
                          16: 8205A466A73111ED97576186C4F9AE02.roa (hash: TNYo4/mkmU8nb5HKQOBxXwZvc4it5w2GIhCmllv4qwg=)
                          17: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (hash: zz0LzZcl2ISFqUptTsVUEdI8lLaBASG9UpkOj4p05LY=)
                          18: 47700FAC998F11EEBD7D785DC4F9AE02.roa (hash: GB0LyBPkHD+cznxszK2EgHCr7+tTITHWetcjBFxPeIM=)
                          19: 3C30815CABB611ED8370AB5DC4F9AE02.roa (hash: LM8J2TeEZ+8O7pHvvdp0g2tWq3PSpVDh6Ktb0PkG7TE=)
                          20: 8188D300A73111ED97576186C4F9AE02.roa (hash: xY0Y67w9yZsT3E8wGT4arUdb6XKCd2LttLCE9xAT/SM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: May  3 00:36:56 2024 GMT
            Not After : May 10 00:36:56 2024 GMT
        Subject: CN=663431a8-6233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:e9:58:9c:29:9a:dc:82:bb:a9:f5:7f:05:
                    42:22:d9:21:c4:52:9d:c4:e6:31:aa:07:48:33:52:
                    d9:ab:6b:67:1a:77:d4:87:e7:b5:7f:b3:c5:c2:b3:
                    b8:1d:cb:4a:54:48:23:05:ea:b1:a7:68:23:80:2e:
                    eb:9f:f7:fb:b5:f8:54:1b:4b:e8:da:72:e1:99:30:
                    48:a8:b3:eb:7e:72:f9:c2:a2:86:50:4e:7f:53:03:
                    c0:1f:92:a7:a8:a4:c7:74:20:33:3c:75:2e:e4:57:
                    00:7e:c5:e7:43:51:c9:b2:81:1f:72:a1:92:a5:8c:
                    1e:10:4a:07:10:0d:44:e4:85:a5:e2:2c:0f:bd:a0:
                    73:c0:52:39:ce:bc:47:42:0c:d7:9f:40:d2:89:9a:
                    5b:ac:2f:4a:ef:81:96:33:e9:cb:39:f5:82:68:37:
                    5c:64:0d:c9:f5:ed:c1:65:3c:a1:57:fb:5c:f0:f4:
                    8f:81:e0:5b:23:8f:6c:52:72:98:57:9e:4f:ff:56:
                    54:3c:60:fb:ff:e4:0c:f9:28:ef:64:90:d5:15:93:
                    dd:eb:4d:14:b7:ed:38:ff:b6:c0:51:98:43:3f:4a:
                    fc:69:81:52:61:e0:c7:95:2b:0f:f8:84:62:f6:3e:
                    9a:a0:2d:11:6e:71:01:f0:d5:d6:b4:7e:4c:19:c6:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BA:FC:DC:D2:95:EB:BC:95:FF:69:63:06:F9:32:12:B3:33:2E:44
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:e2:0b:38:79:87:a6:f1:6e:60:11:65:3d:60:06:e7:6d:
         23:cf:25:94:21:ed:d8:82:c0:12:05:38:0c:48:d1:13:3b:f0:
         09:68:07:54:ff:14:55:47:64:47:dc:83:41:95:64:22:d5:ba:
         dd:cd:9e:f5:74:60:a5:a0:71:e3:d8:2c:40:b5:2d:7e:92:6d:
         97:6a:56:b2:34:99:11:7f:9b:28:e1:17:cc:e2:b6:5a:b7:3f:
         e8:41:6e:2a:42:e5:8e:45:0c:ae:91:44:ab:48:e2:5f:a3:b7:
         6d:e1:74:8f:00:14:67:6c:f5:d7:e2:75:8d:a8:e4:8c:62:10:
         9f:05:8f:2d:4d:3b:64:09:9c:6f:7f:db:ad:ec:8f:5f:16:4d:
         df:34:fc:f0:3e:04:38:3d:97:0d:2d:7c:e5:2b:70:ee:d4:05:
         00:27:2b:0e:33:84:9f:6d:22:c2:65:48:1a:58:b3:b1:82:03:
         54:34:ca:01:6c:2f:0b:1d:96:9d:b0:a1:b6:00:03:a9:7c:db:
         94:d8:e6:23:d4:88:31:ff:28:1a:bc:df:09:7e:b3:84:bf:e0:
         b4:7a:5f:f2:b7:60:c1:7b:9c:1b:31:fd:9d:16:95:8b:23:67:
         91:df:ee:d4:13:89:aa:9c:0a:91:7b:0b:dd:f4:f7:f3:3a:0c:
         0a:aa:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:24 2024 by rpki-client on console-fra.rpki-client.org