Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
File:                     J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json)
Hash identifier:          ouIHLejxn/5dOl0r54AvXz3LfRBCobxbethgkpFRscA=
Subject key identifier:   B0:1B:69:32:B9:22:91:5C:5E:E4:18:A4:61:75:9B:2C:AC:16:2C:D0
Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95
Certificate issuer:       /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
Manifest number:          0110
Signing time:             Sat 27 Apr 2024 05:10:34 +0000
Manifest this update:     Sat 27 Apr 2024 05:10:33 +0000
Manifest next update:     Sat 04 May 2024 05:10:33 +0000
Files and hashes:         1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: jojw6/fZU8kXaZwEYLqxdQRc3TRCeY5U8QO97ZI0rnA=)
                          2: 35C34054633911ED97F86846C4F9AE02.roa (hash: JAkxposU7zPkI2hlagULp50sjGgg4ZgrQh3LQ/yGr7g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl
                          rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195
        Validity
            Not Before: Apr 27 05:10:33 2024 GMT
            Not After : May  4 05:10:33 2024 GMT
        Subject: CN=662c88c9-f2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:f0:36:9b:ee:17:ba:e5:eb:b3:fa:77:c2:
                    60:6d:f7:2d:a1:09:73:ec:d5:7b:c4:b8:73:e3:9d:
                    89:c1:64:83:85:ab:3a:0a:6f:da:ac:4e:a2:2e:4d:
                    73:e1:a4:86:ec:ad:4d:73:28:1f:32:d1:00:0e:41:
                    b3:a3:05:18:70:8d:3d:1b:60:18:0c:81:35:41:a0:
                    4d:e5:b5:b1:25:df:0a:e1:29:da:c3:87:74:aa:0c:
                    b7:3b:54:ac:a7:11:9b:18:13:9a:44:4c:28:e4:4b:
                    84:80:aa:20:31:80:70:49:d7:f8:51:eb:3a:be:aa:
                    c0:e5:6e:a9:8f:03:e0:d9:28:e4:d1:4a:12:70:f5:
                    37:e8:c7:c9:ba:fa:16:09:36:fa:f1:8f:9b:86:06:
                    93:9a:5b:d6:2f:ce:93:87:f6:ab:77:d0:ea:32:f8:
                    8c:87:a4:34:dc:fd:96:7c:a2:4f:37:82:fd:d7:69:
                    79:da:cd:bf:be:e1:b9:25:9e:f9:c3:d5:c4:72:69:
                    6f:7d:4b:70:aa:34:04:8d:20:09:a5:6d:04:25:db:
                    ef:7b:9a:3e:fe:b2:8a:7f:da:c6:92:61:15:53:e8:
                    cf:64:83:f0:1d:64:4a:16:c5:32:5e:6d:4f:f7:b8:
                    6a:cc:e9:ff:fe:22:f1:be:bc:96:eb:03:57:a5:61:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:69:32:B9:22:91:5C:5E:E4:18:A4:61:75:9B:2C:AC:16:2C:D0
            X509v3 Authority Key Identifier:
                keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:76:57:4c:40:a1:6a:58:64:6e:95:17:65:7c:f9:85:8e:
         d7:bb:1a:c0:08:a6:2b:56:73:8a:0b:21:1e:38:8a:67:64:f2:
         b8:2e:e2:8e:d3:d0:e5:7f:4b:16:17:7e:68:42:e8:d6:bd:fc:
         34:11:00:0c:71:79:a2:13:79:d3:75:67:87:70:7c:4b:8c:18:
         ea:52:f7:6e:96:93:8d:6b:76:dd:2a:0a:39:1e:27:4c:8d:96:
         48:07:c3:4f:ac:54:8b:ba:18:eb:27:35:1c:44:aa:cd:11:f4:
         22:5e:c0:9e:39:13:49:f7:c9:f8:66:39:d9:a2:c3:cc:30:88:
         b9:9a:fa:59:6a:2e:38:52:36:ac:77:1d:89:10:59:65:03:39:
         95:8c:11:24:f1:39:1d:4c:e7:e3:33:0d:ca:e0:13:17:67:ae:
         d2:18:65:1f:eb:7f:28:58:a7:7b:97:90:8a:78:b3:b2:dc:71:
         db:8d:a5:c6:de:0e:8d:84:03:e5:d9:d2:2a:07:4b:9d:7b:d6:
         69:b8:12:f9:d5:b8:9f:63:ef:66:69:4e:10:a4:09:62:26:e4:
         38:73:b9:e4:91:ce:79:f9:ae:f4:b4:d7:a7:da:f1:ce:67:1f:
         4f:ea:80:7c:06:3d:b5:4f:87:c8:ed:a9:d8:3e:be:e2:56:0a:
         35:93:5e:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZDMjNEMzM1QjM3
Qjg5RTQxOTUwHhcNMjQwNDI3MDUxMDMzWhcNMjQwNTA0MDUxMDMzWjAYMRYwFAYD
VQQDEw02NjJjODhjOS1mMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjbwNpvuF7rl67P6d8JgbfctoQlz7NV7xLhz452JwWSDhas6Cm/arE6iLk1z
4aSG7K1NcygfMtEADkGzowUYcI09G2AYDIE1QaBN5bWxJd8K4Snaw4d0qgy3O1Ss
pxGbGBOaREwo5EuEgKogMYBwSdf4Ues6vqrA5W6pjwPg2Sjk0UoScPU36MfJuvoW
CTb68Y+bhgaTmlvWL86Th/ard9DqMviMh6Q03P2WfKJPN4L912l52s2/vuG5JZ75
w9XEcmlvfUtwqjQEjSAJpW0EJdvve5o+/rKKf9rGkmEVU+jPZIPwHWRKFsUyXm1P
97hqzOn//iLxvryW6wNXpWHq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAbaTK5
IpFcXuQYpGF1myysFizQMB8GA1UdIwQYMBaAFCfaAFTPurPj2wY/wj0zWze4nkGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU1Qy8zNDk4MDBCRTYz
MzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMtUGJCal9DUFROYk43aWVR
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o5b0FWTS02cy1QYkJqX0NQVE5iTjdpZVFaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMt
UGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAf6nZXTEChalhkbpUXZXz5hY7XuxrACKYrVnOKCyEeOIpnZPK4LuKO
09Dlf0sWF35oQujWvfw0EQAMcXmiE3nTdWeHcHxLjBjqUvdulpONa3bdKgo5HidM
jZZIB8NPrFSLuhjrJzUcRKrNEfQiXsCeORNJ98n4ZjnZosPMMIi5mvpZai44Ujas
dx2JEFllAzmVjBEk8TkdTOfjMw3K4BMXZ67SGGUf638oWKd7l5CKeLOy3HHbjaXG
3g6NhAPl2dIqB0ude9ZpuBL51bifY+9maU4QpAliJuQ4c7nkkc55+a70tNen2vHO
Zx9P6oB8Bj21T4fI7anYPr7iVgo1k14u
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:00 2024 by rpki-client on console-ams.rpki-client.org