Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File:                     j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier:          bj0V6mg9vjaKIZR4QAMGDix9eGDEPbHvPpr1bewK6Mo=
Subject key identifier:   A0:1F:40:05:7C:EE:EB:3E:AB:7A:0B:CD:48:12:BE:27:7A:5C:A3:C8
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number:          01D3
Signing time:             Sun 05 May 2024 04:30:09 +0000
Manifest this update:     Sun 05 May 2024 04:30:08 +0000
Manifest next update:     Sun 12 May 2024 04:30:08 +0000
Files and hashes:         1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: 5ihu371fi4Due/G7IZWFdXHTY2UUgPnu66tAwQe6sH0=)
                          2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: mCjohZMZty3ZWm2QC39dDgc6OGK12FrtsmGaALxmnlI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: May  5 04:30:08 2024 GMT
            Not After : May 12 04:30:08 2024 GMT
        Subject: CN=66370b51-cdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:37:da:c5:92:60:8a:c1:8a:c9:41:37:91:
                    15:a5:e0:44:aa:58:d8:07:5c:81:3a:50:4f:64:2f:
                    54:50:1a:c4:28:d7:c4:b4:2b:59:eb:3a:e8:cf:a5:
                    0a:69:bc:f5:23:38:91:a7:e4:57:43:aa:e0:b3:1b:
                    e6:e9:42:5c:86:0b:31:b9:57:d1:e6:fd:80:2c:14:
                    0f:04:df:3f:c7:3a:0f:70:28:73:1e:29:41:5f:a9:
                    5a:29:ab:03:33:41:b6:81:26:a3:74:80:04:ec:08:
                    7f:57:56:c8:f5:7a:7e:7d:8b:5c:67:22:0a:0e:de:
                    6f:f3:a5:fd:01:7d:08:59:7d:2c:2b:5d:27:6f:b7:
                    1f:d2:79:b2:1a:67:6e:38:89:fb:6d:78:ef:4e:31:
                    c0:0e:b6:6b:51:f5:67:00:c3:6c:d7:70:0a:4c:ed:
                    b7:99:fa:11:2d:13:70:8d:67:f2:6f:58:ef:40:5c:
                    b6:75:c4:7a:da:d1:c5:4d:ed:66:51:87:50:b8:a7:
                    c2:5a:5a:47:b6:98:b7:5f:10:2d:45:2a:27:a2:4c:
                    ca:44:87:b9:af:ef:b5:01:ce:88:f4:64:fa:0b:d4:
                    6e:e0:e2:17:52:69:3b:86:93:b8:75:52:85:17:43:
                    77:11:6f:09:f9:a5:18:54:e1:05:d7:0b:49:dd:3c:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:40:05:7C:EE:EB:3E:AB:7A:0B:CD:48:12:BE:27:7A:5C:A3:C8
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:b5:a4:d3:84:e6:88:46:16:22:1e:e0:9a:02:1a:1b:8b:
         53:4a:20:03:29:16:0e:2e:7b:d3:f4:08:26:be:96:33:81:ea:
         83:b6:1d:5b:4b:2c:b2:74:2f:e3:ad:a2:7b:9e:01:7b:02:35:
         71:7d:f4:5f:59:79:bc:a4:f1:83:58:18:bb:6f:3d:38:62:30:
         8c:6d:8a:89:38:1e:ac:db:19:41:d5:33:8a:31:77:19:d3:75:
         84:b0:94:80:f8:03:41:1a:c6:30:f6:3e:91:65:ad:3d:5e:73:
         ec:68:13:f9:42:0b:7f:0e:98:24:3d:e0:0d:f3:d3:7a:70:56:
         a4:a9:13:95:87:43:f4:cb:fd:88:26:67:85:1b:ef:b5:3d:3b:
         c6:51:be:1d:bd:0d:f9:67:cf:2d:13:cb:36:48:0e:bf:81:d0:
         40:93:82:01:94:c5:65:c3:91:e0:7f:26:77:fe:4a:b2:b3:4d:
         54:e9:c1:1b:cc:7a:70:6c:f1:43:15:5c:a0:bc:87:f0:ce:33:
         91:d6:24:9e:0a:85:54:9b:3e:22:4e:97:85:d1:af:cd:e5:c8:
         51:e9:8a:d0:00:d3:60:4f:73:02:1d:df:33:a0:8f:46:12:a0:
         80:e0:8e:20:96:95:26:7a:00:a6:0b:76:75:25:bc:4b:ba:86:
         93:3b:6f:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3
RjlBNzAwQTkwHhcNMjQwNTA1MDQzMDA4WhcNMjQwNTEyMDQzMDA4WjAYMRYwFAYD
VQQDEw02NjM3MGI1MS1jZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Ho32sWSYIrBislBN5EVpeBEqljYB1yBOlBPZC9UUBrEKNfEtCtZ6zroz6UK
abz1IziRp+RXQ6rgsxvm6UJchgsxuVfR5v2ALBQPBN8/xzoPcChzHilBX6laKasD
M0G2gSajdIAE7Ah/V1bI9Xp+fYtcZyIKDt5v86X9AX0IWX0sK10nb7cf0nmyGmdu
OIn7bXjvTjHADrZrUfVnAMNs13AKTO23mfoRLRNwjWfyb1jvQFy2dcR62tHFTe1m
UYdQuKfCWlpHtpi3XxAtRSonokzKRIe5r++1Ac6I9GT6C9Ru4OIXUmk7hpO4dVKF
F0N3EW8J+aUYVOEF1wtJ3TyA8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAfQAV8
7us+q3oLzUgSvid6XKPIMB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy
MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDRBNC8yRDIzQTRDQzAyMDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJv
Wkx5SGtBZEUyak5fbW5BS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCW3bWk04TmiEYWIh7gmgIaG4tTSiADKRYOLnvT9AgmvpYzgeqDth1b
SyyydC/jraJ7ngF7AjVxffRfWXm8pPGDWBi7bz04YjCMbYqJOB6s2xlB1TOKMXcZ
03WEsJSA+ANBGsYw9j6RZa09XnPsaBP5Qgt/DpgkPeAN89N6cFakqROVh0P0y/2I
JmeFG++1PTvGUb4dvQ35Z88tE8s2SA6/gdBAk4IBlMVlw5HgfyZ3/kqys01U6cEb
zHpwbPFDFVygvIfwzjOR1iSeCoVUmz4iTpeF0a/N5chR6YrQANNgT3MCHd8zoI9G
EqCA4I4glpUmegCmC3Z1JbxLuoaTO29A
-----END CERTIFICATE-----
Generated at Sun May 5 05:30:49 2024 by rpki-client on console-ams.rpki-client.org