Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.mft
File:                     LZGtMWvF7v9-3CUlODTr461WQb0.mft (raw, json)
Hash identifier:          sI71u8/IByqWRS8Dko/zEjdvWNy32HmD49in7zuWhlA=
Subject key identifier:   52:89:F6:F2:29:69:EF:39:6C:92:C5:F6:BE:78:E6:BA:D5:59:82:6A
Authority key identifier: 2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD
Certificate issuer:       /CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.mft
Manifest number:          05B5
Signing time:             Sun 05 May 2024 00:24:48 +0000
Manifest this update:     Sun 05 May 2024 00:24:47 +0000
Manifest next update:     Sun 12 May 2024 00:24:47 +0000
Files and hashes:         1: LZGtMWvF7v9-3CUlODTr461WQb0.crl (hash: yvufYsVV6N8VgJs+BemDLDkhGSAHBNvNHeA1YuqJ0NM=)
                          2: 571A04A8FBF311EBB9894464C4F9AE02.roa (hash: KTFFOQ79tJjTfr3XZqgJPSgGijTQgygDj1qAQ/h45uE=)
                          3: EBC0474487B211EB9F723D11C4F9AE02.roa (hash: Ppn+ZxuAg2iFcMjNvyJCatFKns9vNSJ9ajAAllkTdbU=)
                          4: 561A617EFBF311EBB9894464C4F9AE02.roa (hash: OEeQuNObCdg9hdKEjDnPlEHKsgEiBfVkIWpUAjX4Rdk=)
                          5: B205FB4E98D211EB86B24441C4F9AE02.roa (hash: s4yYKdbzD4Qz/eCvBbl+89u0HjoJcUQCLbSASXxUJaE=)
                          6: F3BEAB86E7A211EE806F3C46C4F9AE02.roa (hash: cfbhrp3Xk5vZDkezt5BMpWmoId97XSSk3vgUQ8mf+AY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl
                          rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162578/serialNumber=2D91AD316BC5EEFF7EDC25253834EBE3AD5641BD
        Validity
            Not Before: May  5 00:24:47 2024 GMT
            Not After : May 12 00:24:47 2024 GMT
        Subject: CN=6636d1cf-a236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:12:49:b8:4a:38:ea:0f:12:9c:39:d8:ce:
                    52:f5:53:cb:af:dd:95:52:13:91:d0:6f:07:6d:db:
                    4e:53:f0:af:3b:58:74:2d:a8:c9:15:04:3e:58:59:
                    90:c4:5d:60:e3:6f:d3:f2:95:ee:c2:ce:d6:1e:1d:
                    a0:e2:cf:85:67:36:4e:b4:16:d0:2e:51:a6:fa:70:
                    4c:f0:02:92:17:f9:26:37:81:c0:71:2f:61:99:55:
                    6e:a0:a8:82:44:09:76:f1:51:f4:21:e6:44:ff:ae:
                    d4:bf:d1:0e:f6:6e:e5:98:a1:d6:3d:84:11:da:a6:
                    24:a4:57:34:c3:63:46:1c:1e:e1:11:6d:73:7b:6d:
                    74:92:a2:fc:ac:25:27:01:91:07:53:90:78:ff:61:
                    df:8f:8d:7e:4d:ca:72:50:00:81:a3:46:fb:96:03:
                    cf:35:a5:b0:03:f7:64:2b:af:57:b2:8d:93:6d:2b:
                    9c:79:0e:41:c0:43:23:46:14:67:fd:03:c9:dc:36:
                    a8:92:40:82:90:43:f2:d2:d3:70:9e:87:25:bf:6f:
                    7a:ba:ca:99:72:2c:d4:4e:fd:a1:05:3b:43:00:9b:
                    88:31:c5:b4:2a:60:13:61:4c:c0:1b:db:31:a4:69:
                    e8:21:3a:00:40:10:e3:ab:84:49:96:c5:ee:a4:48:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:89:F6:F2:29:69:EF:39:6C:92:C5:F6:BE:78:E6:BA:D5:59:82:6A
            X509v3 Authority Key Identifier:
                keyid:2D:91:AD:31:6B:C5:EE:FF:7E:DC:25:25:38:34:EB:E3:AD:56:41:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZGtMWvF7v9-3CUlODTr461WQb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162578/25C39ECC7BE811EBB0B1F63CC4F9AE02/LZGtMWvF7v9-3CUlODTr461WQb0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:a0:75:d0:29:33:4c:04:97:a1:12:53:29:06:b7:1e:1e:
         61:cd:21:fe:77:04:8e:f1:29:4f:2f:77:ca:5f:0a:c6:b2:99:
         bf:6a:d1:3b:b3:31:5c:f4:10:9d:00:c6:98:c3:5d:36:16:b4:
         c1:a0:4b:44:db:9b:c1:ee:78:87:36:ed:74:14:3f:83:35:24:
         fe:0a:28:85:31:bb:88:d0:0e:6c:9c:2a:3b:3b:c8:f7:fb:dc:
         af:de:90:9d:d8:78:f1:f1:d1:d4:ae:5c:94:4a:07:ca:e9:cb:
         82:96:ef:a6:36:fb:69:49:26:38:cc:13:70:c0:ca:ae:cc:6e:
         08:fe:58:cf:3d:a1:a9:40:e4:71:57:d1:fb:20:96:c0:26:ba:
         6d:a2:8c:c7:e1:a6:62:9c:d8:db:03:7f:8c:1b:c0:85:94:b6:
         ab:c6:2b:5f:c2:ab:e8:51:29:75:fa:ee:e3:ca:cb:1a:47:f4:
         38:23:1d:7d:8d:9f:5d:49:ec:eb:97:53:09:9c:08:f8:b8:04:
         87:cf:88:43:15:83:49:93:99:46:ce:96:ec:2a:9c:5c:13:69:
         c8:c9:06:91:4b:d1:51:9e:64:02:2c:05:57:c2:59:1a:8e:83:
         8b:b3:c7:95:51:5e:00:dc:99:ad:4f:11:fa:1c:32:3d:20:3d:
         37:fa:d9:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI1NzgxMTAvBgNVBAUTKDJEOTFBRDMxNkJDNUVFRkY3RURDMjUyNTM4MzRFQkUz
QUQ1NjQxQkQwHhcNMjQwNTA1MDAyNDQ3WhcNMjQwNTEyMDAyNDQ3WjAYMRYwFAYD
VQQDEw02NjM2ZDFjZi1hMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKwSSbhKOOoPEpw52M5S9VPLr92VUhOR0G8HbdtOU/CvO1h0LajJFQQ+WFmQ
xF1g42/T8pXuws7WHh2g4s+FZzZOtBbQLlGm+nBM8AKSF/kmN4HAcS9hmVVuoKiC
RAl28VH0IeZE/67Uv9EO9m7lmKHWPYQR2qYkpFc0w2NGHB7hEW1ze210kqL8rCUn
AZEHU5B4/2Hfj41+TcpyUACBo0b7lgPPNaWwA/dkK69Xso2TbSuceQ5BwEMjRhRn
/QPJ3DaokkCCkEPy0tNwnoclv296usqZcizUTv2hBTtDAJuIMcW0KmATYUzAG9sx
pGnoIToAQBDjq4RJlsXupEjFPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKJ9vIp
ae85bJLF9r545rrVWYJqMB8GA1UdIwQYMBaAFC2RrTFrxe7/ftwlJTg06+OtVkG9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU3OC8yNUMzOUVDQzdC
RTgxMUVCQjBCMUY2M0NDNEY5QUUwMi9MWkd0TVd2Rjd2OS0zQ1VsT0RUcjQ2MVdR
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaR3RNV3ZGN3Y5LTNDVWxPRFRyNDYxV1FiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjU3OC8yNUMzOUVDQzdCRTgxMUVCQjBCMUY2M0NDNEY5QUUwMi9MWkd0TVd2Rjd2
OS0zQ1VsT0RUcjQ2MVdRYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCy7qB10CkzTASXoRJTKQa3Hh5hzSH+dwSO8SlPL3fKXwrGspm/atE7
szFc9BCdAMaYw102FrTBoEtE25vB7niHNu10FD+DNST+CiiFMbuI0A5snCo7O8j3
+9yv3pCd2Hjx8dHUrlyUSgfK6cuClu+mNvtpSSY4zBNwwMquzG4I/ljPPaGpQORx
V9H7IJbAJrptoozH4aZinNjbA3+MG8CFlLarxitfwqvoUSl1+u7jyssaR/Q4Ix19
jZ9dSezrl1MJnAj4uASHz4hDFYNJk5lGzpbsKpxcE2nIyQaRS9FRnmQCLAVXwlka
joOLs8eVUV4A3JmtTxH6HDI9ID03+tkx
-----END CERTIFICATE-----
Generated at Sun May 5 01:22:21 2024 by rpki-client on console-fra.rpki-client.org