Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
File:                     RxYGeFsy9N8-yUPyp4fbohJpbh8.mft (raw, json)
Hash identifier:          kyD7e5T/XGISQyIcIIc6RQBKu/e2fvR2btLA+EM50Qo=
Subject key identifier:   94:02:4A:23:69:35:67:C2:33:16:05:50:9E:BF:2E:62:0A:0F:3D:7A
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Certificate issuer:       /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial:       24DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
Manifest number:          24BF
Signing time:             Thu 02 May 2024 16:06:00 +0000
Manifest this update:     Thu 02 May 2024 16:05:59 +0000
Manifest next update:     Thu 09 May 2024 16:05:59 +0000
Files and hashes:         1: RxYGeFsy9N8-yUPyp4fbohJpbh8.crl (hash: 2XC9jYvxGx6ONj80GmWPCf55gGoGSV8CnrJYl2AQlLc=)
                          2: 9E7A9830049911E89DF5A065C4F9AE02.roa (hash: TTyQzKMXjkPWyXvajVKaBFtUmzYEXlg1V3ki4Q5gLXA=)
                          3: A6A6CE0A54EC11E791C3F825C4F9AE02.roa (hash: 4QcgdmcvyPNdPhT87G+sQdUMVg68ImM1OW15fSmBLuk=)
                          4: 58EB6F3E115511EC97960769C4F9AE02.roa (hash: UeXSFF+zo/4rj+qYv4V/Cq4ESD6uTAvgoBhZgRFq1yI=)
                          5: 598E740E5A6011EDAF6FC679C4F9AE02.roa (hash: 3eeHDdujkj77hyV5pPsFs+/eKETlfaPERkEWNCG2P6E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 16:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9437 (0x24dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
        Validity
            Not Before: May  2 16:05:59 2024 GMT
            Not After : May  9 16:05:59 2024 GMT
        Subject: CN=6633b9e7-87a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:fd:24:9e:60:54:ee:15:36:e7:a8:be:1b:
                    c6:e5:e8:ac:b8:01:f1:d9:df:21:04:86:c3:ec:ed:
                    6a:4c:0d:3a:eb:0d:50:b0:a2:95:c2:d2:ec:ee:67:
                    a7:de:83:db:10:5a:ea:77:41:5c:b1:36:6b:ed:22:
                    dc:d0:e2:7a:f1:e8:79:52:25:ae:e8:7e:df:2e:5f:
                    22:ab:cd:c1:79:24:1f:1c:9d:53:75:2f:32:d4:f7:
                    ac:7c:fb:79:a8:6f:7a:f9:bc:bb:30:ca:a7:27:cb:
                    8d:ad:40:44:4e:cd:20:b9:91:60:11:91:b4:7f:3b:
                    0e:27:1c:ef:5c:a1:e3:80:45:e1:1f:60:70:ba:d4:
                    d9:da:53:66:c4:bf:37:2d:58:76:82:04:59:30:f0:
                    a6:e7:c9:14:f5:77:30:d0:ad:bb:66:b3:98:82:6b:
                    cd:27:d4:08:20:6b:6a:f8:53:ef:02:89:a3:21:f9:
                    fb:bb:15:d1:0d:18:a7:65:15:e6:94:91:22:9c:6c:
                    92:ab:69:c4:03:2e:a4:2a:35:5f:bb:57:2c:27:ac:
                    54:14:65:b2:84:92:2f:f2:b5:09:95:01:ac:a1:ac:
                    00:ea:50:55:ba:cb:2a:66:ec:30:e0:11:25:b3:bb:
                    a2:58:2c:b7:a9:d9:2d:ff:10:a5:61:a8:1d:bc:1d:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:4A:23:69:35:67:C2:33:16:05:50:9E:BF:2E:62:0A:0F:3D:7A
            X509v3 Authority Key Identifier:
                keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:af:26:68:f3:ad:fd:e9:db:d1:15:10:ad:81:76:2c:99:
         eb:47:d9:57:8b:ee:6d:5e:10:90:57:ea:ab:44:24:65:2a:e7:
         09:d5:5a:0f:97:dd:1b:62:19:8f:dc:b7:05:fd:a4:e8:31:d8:
         4e:d6:ba:aa:18:41:5c:6b:d8:89:3d:37:95:d1:45:f5:bf:e8:
         a7:cc:8a:be:72:8b:05:8c:b2:a8:29:42:d5:ca:09:77:70:d9:
         76:9c:dd:ca:95:28:35:7f:07:07:b8:f6:10:7a:f6:34:4e:72:
         93:31:ad:5c:fc:d2:c2:07:45:22:14:b8:07:c5:a3:78:92:23:
         b0:bd:36:f8:40:21:a6:9f:eb:95:91:15:d5:77:6e:df:c9:6c:
         ac:d0:84:bb:8e:ea:6a:42:fa:06:60:fa:d2:cc:3e:3f:c6:45:
         c8:70:35:39:8e:a9:b2:63:e6:a6:af:a6:04:69:2f:83:66:79:
         56:e1:3f:8b:30:d9:93:fc:5b:87:5a:52:de:55:35:b4:10:89:
         f8:cc:20:81:0b:43:5e:05:4e:b1:aa:75:ed:23:0e:89:ea:fd:
         d3:e9:9d:58:f2:39:c6:ad:e1:06:71:d8:29:1c:c5:42:b2:d9:
         84:51:05:a8:5e:41:69:4a:6a:f4:05:36:11:c3:b4:a0:82:c6:
         ca:46:95:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNGMkE3ODdEQkEy
MTI2OTZFMUYwHhcNMjQwNTAyMTYwNTU5WhcNMjQwNTA5MTYwNTU5WjAYMRYwFAYD
VQQDEw02NjMzYjllNy04N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/T9JJ5gVO4VNueovhvG5eisuAHx2d8hBIbD7O1qTA066w1QsKKVwtLs7men
3oPbEFrqd0FcsTZr7SLc0OJ68eh5UiWu6H7fLl8iq83BeSQfHJ1TdS8y1PesfPt5
qG96+by7MMqnJ8uNrUBETs0guZFgEZG0fzsOJxzvXKHjgEXhH2BwutTZ2lNmxL83
LVh2ggRZMPCm58kU9Xcw0K27ZrOYgmvNJ9QIIGtq+FPvAomjIfn7uxXRDRinZRXm
lJEinGySq2nEAy6kKjVfu1csJ6xUFGWyhJIv8rUJlQGsoawA6lBVussqZuww4BEl
s7uiWCy3qdkt/xClYagdvB1VdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQCSiNp
NWfCMxYFUJ6/LmIKDz16MB8GA1UdIwQYMBaAFEcWBnhbMvTfPslD8qeH26ISaW4f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyOC9GQUVGOENCRTEz
NDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlOOC15VVB5cDRmYm9oSnBi
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4WUdlRnN5OU44LXlVUHlwNGZib2hKcGJoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkIyOC9GQUVGOENCRTEzNDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlO
OC15VVB5cDRmYm9oSnBiaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGJK8maPOt/enb0RUQrYF2LJnrR9lXi+5tXhCQV+qrRCRlKucJ1VoP
l90bYhmP3LcF/aToMdhO1rqqGEFca9iJPTeV0UX1v+inzIq+cosFjLKoKULVygl3
cNl2nN3KlSg1fwcHuPYQevY0TnKTMa1c/NLCB0UiFLgHxaN4kiOwvTb4QCGmn+uV
kRXVd27fyWys0IS7jupqQvoGYPrSzD4/xkXIcDU5jqmyY+amr6YEaS+DZnlW4T+L
MNmT/FuHWlLeVTW0EIn4zCCBC0NeBU6xqnXtIw6J6v3T6Z1Y8jnGreEGcdgpHMVC
stmEUQWoXkFpSmr0BTYRw7SggsbKRpVD
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:27 2024 by rpki-client on console-ams.rpki-client.org