Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          etM+b8aMtYHv3V7WACCcIStLL2IJXmBy5OS/h63cwT0=
Subject key identifier:   E0:8D:78:7A:44:9C:D4:0E:DA:0B:CD:AB:98:E6:45:C7:58:42:89:65
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0A62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0A5B
Signing time:             Sat 04 May 2024 20:33:17 +0000
Manifest this update:     Sat 04 May 2024 20:33:16 +0000
Manifest next update:     Sat 11 May 2024 20:33:16 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: tiTNuO63eXomy8+OAyzAffHofehFTU8k0wVLm0Jf6Ko=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: 429hNCs7Rx5qOjdDJ8DPnMtdvOAqa/GbqBN8WiZFMg8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 19:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: May  4 20:33:16 2024 GMT
            Not After : May 11 20:33:16 2024 GMT
        Subject: CN=66369b8d-91c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:0f:d7:ba:60:c9:89:2f:e5:dc:53:83:6a:
                    52:d1:06:80:97:fb:17:ff:8d:21:4c:28:f7:17:82:
                    28:f2:a3:de:67:07:ba:2e:39:f6:26:d1:c1:49:95:
                    3f:aa:36:ae:51:9f:95:42:48:c9:bf:f8:f0:d3:93:
                    4e:45:ab:72:92:28:c1:ea:20:bf:16:79:7e:22:fc:
                    6b:19:8c:e9:07:c7:4b:de:c8:a2:79:2a:ea:aa:12:
                    b1:93:8a:ca:9d:31:eb:cb:f6:ec:50:f6:12:74:94:
                    98:60:09:83:fe:5e:1c:5a:ae:d4:85:5a:10:f5:56:
                    cc:f9:cf:88:50:75:40:e1:8d:35:f2:d2:5d:28:c6:
                    f2:4d:44:ed:28:ca:a0:37:40:7e:7c:97:46:2b:1e:
                    0e:3b:87:cc:21:93:d9:91:fc:e7:92:af:75:3c:3d:
                    71:fd:d8:f6:98:cc:de:17:4b:d1:9b:c9:e8:7c:ae:
                    2d:6c:ed:6c:ad:dd:31:44:72:b4:f3:7a:a8:e4:77:
                    79:aa:b0:1a:ea:69:aa:0c:bf:3e:d7:c0:10:a7:01:
                    68:3c:f8:eb:03:af:de:55:80:b6:ee:f5:fe:89:2a:
                    21:fe:4a:52:65:b0:ac:d2:03:83:c5:e5:74:09:8f:
                    2b:8b:d7:3f:ad:b5:9a:47:71:4d:ff:b7:ef:91:95:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:78:7A:44:9C:D4:0E:DA:0B:CD:AB:98:E6:45:C7:58:42:89:65
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:71:a4:d9:3f:8f:79:39:60:36:59:f9:f7:11:ea:30:10:b6:
         69:53:b7:d4:c4:8e:0a:27:dc:37:05:ae:3b:29:bb:2f:d6:07:
         fe:dd:15:c8:36:64:7e:2b:9b:f7:19:3a:e5:63:a5:3c:bf:3e:
         da:99:0d:18:74:f0:64:ba:fe:04:d5:1b:e4:5c:e5:57:53:1e:
         db:cc:1c:82:f0:64:3d:ca:25:7d:38:b9:be:58:97:1d:aa:ee:
         04:04:15:91:eb:28:44:a2:5a:09:ae:05:8f:ba:61:b6:48:ea:
         88:f2:1b:79:09:a6:d0:22:ac:61:2e:5b:88:c4:07:a1:85:87:
         4f:4e:6e:43:f6:58:86:44:75:12:5b:98:98:d2:7e:33:79:b7:
         9d:9d:12:61:dd:ae:f8:65:16:c7:74:a6:b0:65:33:50:df:2f:
         9d:2a:87:f9:87:ae:a9:99:0d:32:36:95:24:ff:f5:5d:6c:6a:
         25:52:2c:b2:ba:04:e3:cf:b1:47:9e:4d:e2:df:5e:d1:ba:61:
         13:de:49:c5:b2:60:9f:71:72:ab:4c:44:62:39:e3:a3:50:50:
         36:f6:eb:37:57:ab:32:50:e9:04:85:5d:ac:b4:93:37:e4:55:
         e2:b5:cc:14:45:48:44:6b:f3:3f:5c:42:8d:3a:c3:b4:7d:74:
         8c:46:25:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM0MTUxMTAvBgNVBAUTKEYwQ0IzNUYxNDVFNjFCMUMyMDQzQUZEMUJBNEUzNTQx
NDdDNEI1NUUwHhcNMjQwNTA0MjAzMzE2WhcNMjQwNTExMjAzMzE2WjAYMRYwFAYD
VQQDEw02NjM2OWI4ZC05MWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvv0P17pgyYkv5dxTg2pS0QaAl/sX/40hTCj3F4Io8qPeZwe6Ljn2JtHBSZU/
qjauUZ+VQkjJv/jw05NORatykijB6iC/Fnl+IvxrGYzpB8dL3siieSrqqhKxk4rK
nTHry/bsUPYSdJSYYAmD/l4cWq7UhVoQ9VbM+c+IUHVA4Y018tJdKMbyTUTtKMqg
N0B+fJdGKx4OO4fMIZPZkfznkq91PD1x/dj2mMzeF0vRm8nofK4tbO1srd0xRHK0
83qo5Hd5qrAa6mmqDL8+18AQpwFoPPjrA6/eVYC27vX+iSoh/kpSZbCs0gODxeV0
CY8ri9c/rbWaR3FN/7fvkZXjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCNeHpE
nNQO2gvNq5jmRcdYQollMB8GA1UdIwQYMBaAFPDLNfFF5hscIEOv0bpONUFHxLVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzQxNS8xMDcyMDk0ODNE
RkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4d2dRNl9SdWs0MVFVZkV0
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhNczE4VVhtR3h3Z1E2X1J1azQxUVVmRXRWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzQxNS8xMDcyMDk0ODNERkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4
d2dRNl9SdWs0MVFVZkV0VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2caTZP495OWA2Wfn3EeowELZpU7fUxI4KJ9w3Ba47Kbsv1gf+3RXI
NmR+K5v3GTrlY6U8vz7amQ0YdPBkuv4E1RvkXOVXUx7bzByC8GQ9yiV9OLm+WJcd
qu4EBBWR6yhEoloJrgWPumG2SOqI8ht5CabQIqxhLluIxAehhYdPTm5D9liGRHUS
W5iY0n4zebednRJh3a74ZRbHdKawZTNQ3y+dKof5h66pmQ0yNpUk//VdbGolUiyy
ugTjz7FHnk3i317RumET3knFsmCfcXKrTERiOeOjUFA29us3V6syUOkEhV2stJM3
5FXitcwURUhEa/M/XEKNOsO0fXSMRiVD
-----END CERTIFICATE-----
Generated at Sat May 4 21:32:58 2024 by rpki-client on console-fra.rpki-client.org