Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          Mcl8sbeduivvo6OMgBv3K4VW8bEVK6GgCgpDRgpSrlc=
Subject key identifier:   7B:59:5E:A3:4D:AE:F6:F4:79:57:4B:3F:D5:B0:C7:78:E0:7F:D4:C0
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          0563
Signing time:             Sun 19 May 2024 00:48:50 +0000
Manifest this update:     Sun 19 May 2024 00:48:50 +0000
Manifest next update:     Sun 26 May 2024 00:48:49 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: lDouE/lccb3acmH8iru1WNH3ebzfa/eXrS1dPH1qjyc=)
                          2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: n7yymcew5hzT7njduUJvlGlJ1K2WBEkhMccGENvjdEE=)
                          3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: MuATCGcZOkbB2MHaT4sYHUzXSWtgP+zm9vYxzgJtTks=)
                          4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: zyxFYh58VCphZ88XBtO8boEFXBQoIhSIgP+BmjV4mDc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: May 19 00:48:50 2024 GMT
            Not After : May 26 00:48:49 2024 GMT
        Subject: CN=66494c72-480b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:a0:ab:1d:98:3f:6c:77:a6:73:c1:c4:62:
                    f2:40:f2:01:fb:96:f8:56:7c:62:34:4d:e9:94:c0:
                    ac:76:20:c2:b2:10:d7:d6:0c:40:65:0e:93:e5:29:
                    7b:5b:98:88:3d:6d:a8:77:4a:61:c1:16:b1:e8:8b:
                    81:8e:1c:25:9e:93:ef:42:3f:99:20:59:3a:40:9c:
                    ea:40:70:fb:ca:35:2b:b9:38:17:aa:30:a5:f7:b5:
                    cd:d7:3f:4e:09:2a:d0:9a:1e:55:7c:1e:35:6a:82:
                    79:0b:78:9e:e2:60:74:f0:f6:40:37:0f:f5:91:f6:
                    bd:51:ac:91:b8:65:9c:28:2b:1c:09:8d:a5:8e:4f:
                    4b:5e:bb:58:6a:c4:94:9c:86:36:66:1f:5f:56:fa:
                    32:84:2a:87:91:64:93:2b:47:53:cb:19:a0:8c:c5:
                    c6:a9:27:c0:53:be:5c:7b:6b:42:88:6a:3d:21:94:
                    4f:a2:d2:63:d5:98:03:59:47:8b:23:fd:00:1a:3d:
                    36:24:c8:77:04:2d:5e:e5:f1:82:17:60:10:b8:d5:
                    87:c8:57:d2:85:66:76:88:0b:34:83:de:28:d8:4c:
                    74:a9:64:34:0c:b1:c3:4c:75:3b:bd:35:48:8a:4d:
                    41:90:4f:5a:2a:03:90:57:16:a0:3a:5e:73:dd:40:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:5E:A3:4D:AE:F6:F4:79:57:4B:3F:D5:B0:C7:78:E0:7F:D4:C0
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:95:f7:00:3c:30:e5:14:47:3d:92:ea:36:50:af:b3:87:7a:
         21:8a:a4:f2:c3:72:73:bf:e9:52:88:b2:ac:aa:fb:0a:0e:0e:
         0d:b6:c0:38:97:f0:04:f4:8e:40:60:02:79:7f:1c:3b:15:e8:
         5c:3d:a5:4d:96:9f:77:4a:da:6a:cc:a0:11:38:23:27:e5:16:
         e2:65:09:32:99:8e:6c:3c:75:25:1c:e6:e9:a8:04:9e:41:b7:
         0f:df:c8:83:b0:fa:e1:61:7a:1e:6e:82:86:63:c7:90:ea:8b:
         9d:8c:30:b4:29:c2:4a:51:27:7e:71:30:51:6b:0a:f4:4b:5a:
         30:e7:39:41:70:0a:d8:c2:b6:fe:5b:74:83:27:0f:5b:50:6c:
         50:2c:e3:c6:47:f1:1d:af:b6:26:1e:ff:de:4b:d4:a8:91:63:
         fd:bc:94:54:80:1c:2f:f7:b7:ac:75:c0:ca:c9:86:53:14:a6:
         86:42:8d:77:7c:c0:a8:6d:f1:f5:a2:ed:19:49:25:ae:e0:4d:
         3b:b3:c8:f3:85:b3:88:94:7a:2c:6e:fb:42:a2:a8:5f:18:b8:
         85:fc:40:28:c8:85:da:bc:c9:fa:8d:ca:62:fc:9a:be:56:a8:
         8c:73:1f:4b:8e:ae:b8:d3:35:5c:8f:e3:08:d1:a5:84:f7:26:
         b9:54:22:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1
NjNBMkNFOTQwHhcNMjQwNTE5MDA0ODUwWhcNMjQwNTI2MDA0ODQ5WjAYMRYwFAYD
VQQDEw02NjQ5NGM3Mi00ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzSgqx2YP2x3pnPBxGLyQPIB+5b4VnxiNE3plMCsdiDCshDX1gxAZQ6T5Sl7
W5iIPW2od0phwRax6IuBjhwlnpPvQj+ZIFk6QJzqQHD7yjUruTgXqjCl97XN1z9O
CSrQmh5VfB41aoJ5C3ie4mB08PZANw/1kfa9UayRuGWcKCscCY2ljk9LXrtYasSU
nIY2Zh9fVvoyhCqHkWSTK0dTyxmgjMXGqSfAU75ce2tCiGo9IZRPotJj1ZgDWUeL
I/0AGj02JMh3BC1e5fGCF2AQuNWHyFfShWZ2iAs0g94o2Ex0qWQ0DLHDTHU7vTVI
ik1BkE9aKgOQVxagOl5z3UBkiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtZXqNN
rvb0eVdLP9Wwx3jgf9TAMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF
OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW
TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSlfcAPDDlFEc9kuo2UK+zh3ohiqTyw3Jzv+lSiLKsqvsKDg4NtsA4
l/AE9I5AYAJ5fxw7FehcPaVNlp93StpqzKAROCMn5RbiZQkymY5sPHUlHObpqASe
QbcP38iDsPrhYXoeboKGY8eQ6oudjDC0KcJKUSd+cTBRawr0S1ow5zlBcArYwrb+
W3SDJw9bUGxQLOPGR/Edr7YmHv/eS9SokWP9vJRUgBwv97esdcDKyYZTFKaGQo13
fMCobfH1ou0ZSSWu4E07s8jzhbOIlHosbvtCoqhfGLiF/EAoyIXavMn6jcpi/Jq+
VqiMcx9Ljq640zVcj+MI0aWE9ya5VCJW
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org