Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          M8di39to5BKEdEgOVMFfGUqwdH1c6nNPl4NsVJ39SzE=
Subject key identifier:   84:26:C3:76:CA:DA:6D:7E:89:9A:C2:96:85:AF:FE:D2:6E:B2:AC:BC
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       054A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          0545
Signing time:             Tue 07 May 2024 00:41:28 +0000
Manifest this update:     Tue 07 May 2024 00:41:28 +0000
Manifest next update:     Tue 14 May 2024 00:41:28 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: rzQ1dV3gQ5Tq6fBzF8v80+dntD1zjT7l5OVkgsn+9Rc=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: AG/I9mH1UyZkq9/E12LEwMXOooWRDNpPF8GK9+IXR2o=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: May  7 00:41:28 2024 GMT
            Not After : May 14 00:41:28 2024 GMT
        Subject: CN=663978b8-8234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:40:ec:a8:74:5c:ef:ed:80:cf:59:b8:ea:
                    14:aa:84:58:44:84:9b:95:47:3b:5d:f9:a7:a6:fa:
                    79:6e:98:30:a2:04:7c:be:02:49:52:ef:1b:9a:4a:
                    4a:0f:61:c0:44:40:f1:fb:3c:a5:7d:52:e5:69:dc:
                    77:ef:e9:2c:87:3c:13:a2:95:b2:84:26:8c:93:8b:
                    96:a4:8b:a2:30:4d:75:78:4a:c2:3e:81:64:11:eb:
                    c2:0c:6f:84:81:0d:a8:83:11:6c:82:8f:53:13:60:
                    83:95:1e:bb:68:35:4b:f1:78:a0:2b:1a:2c:60:39:
                    95:5b:7c:1e:c0:af:5f:1e:6a:03:d7:c6:01:76:0e:
                    e9:f8:fb:6a:8f:02:9e:74:4c:c2:77:16:ca:45:1e:
                    54:d8:8f:6f:70:bc:d7:b0:02:16:54:73:5a:54:88:
                    0e:c0:a6:bb:fe:55:b6:ce:4e:32:82:2c:d2:2d:64:
                    0c:3e:fb:31:00:0b:54:28:51:38:4e:50:5f:63:29:
                    a1:a5:76:b8:c0:f7:dd:88:fa:4c:03:b9:db:c7:73:
                    f2:fc:d4:69:68:68:2a:4f:b1:ad:9d:89:02:bd:41:
                    77:03:9c:65:38:ae:a8:7f:5c:2e:6a:10:e8:40:e6:
                    8a:f7:45:b4:ab:18:3d:78:62:33:89:17:8c:21:ca:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:26:C3:76:CA:DA:6D:7E:89:9A:C2:96:85:AF:FE:D2:6E:B2:AC:BC
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:17:16:89:67:78:bf:19:12:00:bf:77:83:44:ea:41:dc:
         cc:84:b9:00:4b:75:74:4a:62:d6:2b:2d:fb:46:a5:86:5e:4b:
         5a:04:c9:16:06:ca:66:3d:9d:08:a7:e4:08:ca:28:ab:81:19:
         51:30:d5:20:29:0c:19:c4:59:c8:75:27:4a:5b:2d:8e:99:4e:
         de:d3:a6:6f:75:8b:3c:50:a1:68:9b:99:0d:8c:94:ab:a1:96:
         ae:6f:24:f3:7c:00:06:48:83:84:1f:de:fd:e7:25:60:3e:b2:
         ad:80:01:d7:a2:8c:84:f2:c2:a3:92:63:8b:37:1f:0b:1f:05:
         b2:07:bd:05:59:cb:7a:1b:33:d5:0a:9b:4e:1b:93:22:12:11:
         22:bf:bb:61:fc:c1:71:29:ea:0b:53:0e:54:8b:e0:ae:a0:24:
         a1:4c:cd:e4:d1:fc:09:b0:11:3f:da:de:e5:8c:ce:f2:57:b0:
         2d:fc:d5:18:85:36:5e:eb:7e:c4:37:a2:1d:fb:a8:8c:90:63:
         e5:47:63:0b:3c:3d:6b:9b:33:72:aa:2b:96:e5:d7:b8:7a:3c:
         f7:d0:ee:c3:f1:f6:78:4a:4d:ae:06:44:fd:5c:91:d5:a3:e9:
         63:7c:d8:53:ea:9d:c8:ab:48:ab:fc:3f:87:21:e3:89:af:2f:
         61:02:fc:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz
OTJDRTQ3MUMwHhcNMjQwNTA3MDA0MTI4WhcNMjQwNTE0MDA0MTI4WjAYMRYwFAYD
VQQDEw02NjM5NzhiOC04MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VlA7Kh0XO/tgM9ZuOoUqoRYRISblUc7Xfmnpvp5bpgwogR8vgJJUu8bmkpK
D2HAREDx+zylfVLladx37+kshzwTopWyhCaMk4uWpIuiME11eErCPoFkEevCDG+E
gQ2ogxFsgo9TE2CDlR67aDVL8XigKxosYDmVW3wewK9fHmoD18YBdg7p+PtqjwKe
dEzCdxbKRR5U2I9vcLzXsAIWVHNaVIgOwKa7/lW2zk4ygizSLWQMPvsxAAtUKFE4
TlBfYymhpXa4wPfdiPpMA7nbx3Py/NRpaGgqT7GtnYkCvUF3A5xlOK6of1wuahDo
QOaK90W0qxg9eGIziReMIcqB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQmw3bK
2m1+iZrCloWv/tJusqy8MB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2
NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt
cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCT/RcWiWd4vxkSAL93g0TqQdzMhLkAS3V0SmLWKy37RqWGXktaBMkW
BspmPZ0Ip+QIyiirgRlRMNUgKQwZxFnIdSdKWy2OmU7e06ZvdYs8UKFom5kNjJSr
oZaubyTzfAAGSIOEH9795yVgPrKtgAHXooyE8sKjkmOLNx8LHwWyB70FWct6GzPV
CptOG5MiEhEiv7th/MFxKeoLUw5Ui+CuoCShTM3k0fwJsBE/2t7ljM7yV7At/NUY
hTZe637EN6Id+6iMkGPlR2MLPD1rmzNyqiuW5de4ejz30O7D8fZ4Sk2uBkT9XJHV
o+ljfNhT6p3Iq0ir/D+HIeOJry9hAvy/
-----END CERTIFICATE-----
Generated at Tue May 7 02:01:00 2024 by rpki-client on console-ams.rpki-client.org