Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          XOKFeCH9trIlbj+TlpXpCM2qhRufvXCOD0Th2BbZ8BU=
Subject key identifier:   14:C3:EC:8B:34:8E:0D:64:A6:8B:01:38:0E:7B:E9:3A:FA:F4:FC:21
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       06DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          06D4
Signing time:             Fri 24 May 2024 23:08:16 +0000
Manifest this update:     Fri 24 May 2024 23:08:16 +0000
Manifest next update:     Fri 31 May 2024 23:08:16 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: 0iGux0KqjaNAvaHmNLKjxqwzfgNToqKIwQGp356+biQ=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: +IWbZ/7PgA6d6vOIX20SVgEuJVAS5imzV4sSU3cCP90=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 23:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: May 24 23:08:16 2024 GMT
            Not After : May 31 23:08:16 2024 GMT
        Subject: CN=66511de0-18e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:8a:a1:d4:21:80:5a:2b:29:7c:59:9d:f3:
                    a3:94:35:22:19:e1:a7:bf:06:98:98:4e:f3:f4:b6:
                    40:8c:e8:de:52:6a:bc:bc:47:ea:27:2d:84:6b:4e:
                    ac:87:d3:4e:03:22:1d:69:65:e7:65:0f:70:e7:c6:
                    cb:0a:8d:02:0e:40:6a:fa:5b:a1:11:f4:7a:79:fb:
                    8e:6a:76:33:f6:b7:83:0f:47:85:63:82:80:69:a6:
                    27:35:09:fa:af:fe:9a:20:99:37:c4:d9:72:0c:2b:
                    1f:51:51:09:4a:d8:4a:30:68:5d:0f:94:34:98:cc:
                    00:fd:76:c7:43:bd:59:3b:b6:f6:92:07:79:a7:92:
                    2b:f1:4a:19:4f:37:c8:d2:98:eb:2f:8b:77:88:48:
                    32:de:04:e9:8f:69:73:f0:52:f3:8f:ed:77:5d:a6:
                    6c:20:97:ed:d0:54:45:c2:3d:3f:16:dd:66:95:d4:
                    95:40:ba:18:b8:93:d1:93:53:92:4f:de:8d:0f:db:
                    0b:f5:a4:3b:c7:27:21:f7:e4:9c:83:aa:40:ba:37:
                    f3:18:d1:0f:fc:f5:80:83:a0:e8:b8:4a:a9:21:d8:
                    79:9d:ec:d3:ad:ac:82:44:51:14:c2:47:0a:76:11:
                    b9:80:f0:dc:00:14:e4:14:3d:5a:0f:b9:b8:7a:e4:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:EC:8B:34:8E:0D:64:A6:8B:01:38:0E:7B:E9:3A:FA:F4:FC:21
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:63:97:f0:e7:8f:77:11:03:ce:41:a0:a1:91:46:d6:f6:3e:
         c4:74:85:ee:8a:f6:96:52:9f:c0:eb:3c:aa:a5:fb:a0:94:53:
         c0:d1:16:8d:d2:ee:5e:f5:55:b7:81:24:ae:0a:93:57:d6:ac:
         19:cc:cc:8a:82:f7:2e:ac:3f:4b:55:11:9d:5c:08:2a:ee:41:
         5a:3b:eb:5b:b3:00:52:51:cb:1f:e7:20:de:5a:fa:7a:d0:2d:
         24:a5:05:fc:e4:f3:6a:f6:61:d6:1f:d1:c7:16:98:e4:90:0c:
         b7:77:ed:c3:c1:a4:f0:2f:98:31:4f:a0:71:4b:eb:12:26:6a:
         84:a2:1f:1f:e6:08:80:67:62:9b:b7:9c:53:b8:e0:05:7f:7b:
         5f:c2:db:d2:2d:fd:52:06:61:ff:d3:66:47:fe:3d:cb:44:04:
         3b:ed:61:85:1b:64:c0:93:f7:b5:01:0b:6c:78:2c:b6:07:9a:
         8a:3e:3b:4f:36:dd:d2:ed:d2:50:e3:48:28:ae:74:a8:83:49:
         6e:97:80:ac:06:12:e5:6b:b1:38:ad:81:a8:7f:59:39:3e:85:
         6e:ce:b8:85:28:62:35:e2:8c:01:5e:b9:fa:26:c8:ff:99:36:
         9f:16:4b:95:8e:11:1d:02:93:35:10:2a:41:b5:54:ad:61:30:
         00:8c:bb:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5
MDM4NTU4NkUwHhcNMjQwNTI0MjMwODE2WhcNMjQwNTMxMjMwODE2WjAYMRYwFAYD
VQQDEw02NjUxMWRlMC0xOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhWKodQhgForKXxZnfOjlDUiGeGnvwaYmE7z9LZAjOjeUmq8vEfqJy2Ea06s
h9NOAyIdaWXnZQ9w58bLCo0CDkBq+luhEfR6efuOanYz9reDD0eFY4KAaaYnNQn6
r/6aIJk3xNlyDCsfUVEJSthKMGhdD5Q0mMwA/XbHQ71ZO7b2kgd5p5Ir8UoZTzfI
0pjrL4t3iEgy3gTpj2lz8FLzj+13XaZsIJft0FRFwj0/Ft1mldSVQLoYuJPRk1OS
T96ND9sL9aQ7xych9+Scg6pAujfzGNEP/PWAg6DouEqpIdh5nezTrayCRFEUwkcK
dhG5gPDcABTkFD1aD7m4euQXdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTD7Is0
jg1kposBOA576Tr69PwhMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD
MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2
UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHY5fw5493EQPOQaChkUbW9j7EdIXuivaWUp/A6zyqpfuglFPA0RaN
0u5e9VW3gSSuCpNX1qwZzMyKgvcurD9LVRGdXAgq7kFaO+tbswBSUcsf5yDeWvp6
0C0kpQX85PNq9mHWH9HHFpjkkAy3d+3DwaTwL5gxT6BxS+sSJmqEoh8f5giAZ2Kb
t5xTuOAFf3tfwtvSLf1SBmH/02ZH/j3LRAQ77WGFG2TAk/e1AQtseCy2B5qKPjtP
Nt3S7dJQ40gornSog0lul4CsBhLla7E4rYGof1k5PoVuzriFKGI14owBXrn6Jsj/
mTafFkuVjhEdApM1ECpBtVStYTAAjLvE
-----END CERTIFICATE-----
Generated at Sat May 25 00:59:54 2024 by rpki-client on console-ams.rpki-client.org