Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File:                     4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier:          asoMjscUKR8qrV2b05zPmBW5UlSBsH2SYbDSVNln8QU=
Subject key identifier:   90:51:02:C9:CF:61:15:32:5A:F3:A3:4B:1B:55:EC:BF:73:F6:AA:79
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number:          0575
Signing time:             Wed 01 May 2024 01:23:16 +0000
Manifest this update:     Wed 01 May 2024 01:23:16 +0000
Manifest next update:     Wed 08 May 2024 01:23:16 +0000
Files and hashes:         1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: Hr+boaVqNBvjFuJNpLEQM4ehSMWPTSBhk3675UzR4Cs=)
                          2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: WQzxaQ3kywDSJ6U4w76PI5Nxq8SCREWk2pYuqNkI1BA=)
                          3: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: xcuVebpWpA51ZQ01z53xNiI20ooJwMoa0DiWxYItBos=)
                          4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: 3Z5IT3rC9rL27wLRJC3RRhK9Cn9t3ZeX+3ETxJ5au8E=)
                          5: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: cb3MG9T6qBySHyGPva2zRqAX3pWCKhLGh9SY/sdCk1I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 01:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: May  1 01:23:16 2024 GMT
            Not After : May  8 01:23:16 2024 GMT
        Subject: CN=66319984-1248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:6b:a2:4e:47:37:23:c3:dc:66:92:8e:1d:
                    5f:10:1a:d6:0a:ed:6c:73:de:d0:df:be:d0:8e:55:
                    9f:1b:58:f3:91:e5:c5:a3:1e:de:4f:00:9d:4e:a7:
                    b9:d4:f6:5d:76:fa:12:b4:cf:61:f0:51:fd:21:52:
                    7b:79:de:ff:74:8f:4c:43:12:61:09:9f:b8:e7:79:
                    d9:03:91:e4:ae:f8:86:ad:4f:19:61:36:a4:72:44:
                    5b:b3:0f:fb:19:af:a7:59:b6:82:44:b2:c7:24:e3:
                    2c:24:96:b6:bb:9f:ad:04:f9:f0:30:ac:dc:75:31:
                    34:d1:8a:9e:09:3a:90:0f:0f:de:66:6f:29:46:a1:
                    84:57:d2:0d:f6:13:60:ea:9a:6a:83:b3:6b:c9:89:
                    b5:bb:9d:9a:39:a6:40:e4:b6:70:fe:8d:73:b2:9f:
                    40:9d:6c:dc:b8:1e:81:36:9b:c0:4b:c4:28:d6:66:
                    13:71:f7:e3:4a:a9:b6:ec:47:45:b4:33:36:ae:88:
                    42:a0:f7:dd:64:41:a7:6f:1a:8a:8a:8b:2c:4a:02:
                    7e:55:cd:45:b0:9a:3f:4e:8a:00:b0:a2:92:b1:16:
                    8e:23:24:4a:a4:71:94:42:e7:cb:30:5f:37:cc:cd:
                    3f:ed:4f:a4:b8:99:26:50:af:ec:ba:6a:ff:87:0d:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:02:C9:CF:61:15:32:5A:F3:A3:4B:1B:55:EC:BF:73:F6:AA:79
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:67:39:4e:ad:21:99:ea:be:74:7a:d5:40:6f:29:67:eb:d9:
         50:51:d2:bf:e1:48:97:7c:46:d1:94:db:bd:4c:a2:d8:d9:fc:
         d7:05:3c:d3:39:f0:c9:f3:de:bb:50:9d:24:3d:51:c7:d4:8d:
         b5:2f:cc:35:41:ab:ad:d2:f6:56:b4:0e:a7:e8:1a:8d:6d:e9:
         a5:d7:8a:f4:2a:56:84:7a:c9:c2:7d:53:72:0d:a6:ef:33:24:
         40:84:3d:38:07:71:9f:53:e2:7a:94:67:70:2f:c7:df:3b:31:
         f8:c6:13:95:45:dd:4d:d2:d3:e3:b6:2e:4a:69:b1:4a:93:dc:
         7e:61:89:c6:9f:80:bd:3f:a8:5d:8f:b7:40:4c:a9:f2:95:26:
         ab:49:0a:52:40:28:ca:dd:80:54:bf:3e:51:9d:21:08:86:af:
         fc:db:ce:ae:ab:db:2b:6c:1e:0b:df:1e:81:de:4f:d5:ae:24:
         25:39:07:d7:b8:06:e0:c6:36:07:5b:22:e1:47:e5:02:7d:1f:
         95:74:7d:fc:5c:d5:b0:55:5c:d3:a9:34:9d:89:3a:f3:fd:eb:
         84:5f:a7:13:b6:ad:82:f2:33:9a:5d:18:7a:0f:8d:4b:13:b1:
         b5:ab:e2:36:f6:6e:d5:d1:35:92:dc:f0:2d:41:f3:2d:13:54:
         57:8c:c4:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2
OThDOTM5NzcwHhcNMjQwNTAxMDEyMzE2WhcNMjQwNTA4MDEyMzE2WjAYMRYwFAYD
VQQDEw02NjMxOTk4NC0xMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzf5rok5HNyPD3GaSjh1fEBrWCu1sc97Q377QjlWfG1jzkeXFox7eTwCdTqe5
1PZddvoStM9h8FH9IVJ7ed7/dI9MQxJhCZ+453nZA5HkrviGrU8ZYTakckRbsw/7
Ga+nWbaCRLLHJOMsJJa2u5+tBPnwMKzcdTE00YqeCTqQDw/eZm8pRqGEV9IN9hNg
6ppqg7NryYm1u52aOaZA5LZw/o1zsp9AnWzcuB6BNpvAS8Qo1mYTcffjSqm27EdF
tDM2rohCoPfdZEGnbxqKiossSgJ+Vc1FsJo/TooAsKKSsRaOIyRKpHGUQufLMF83
zM0/7U+kuJkmUK/sumr/hw274wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBRAsnP
YRUyWvOjSxtV7L9z9qp5MB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0
NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2
Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2ZzlOrSGZ6r50etVAbyln69lQUdK/4UiXfEbRlNu9TKLY2fzXBTzT
OfDJ8967UJ0kPVHH1I21L8w1Qaut0vZWtA6n6BqNbeml14r0KlaEesnCfVNyDabv
MyRAhD04B3GfU+J6lGdwL8ffOzH4xhOVRd1N0tPjti5KabFKk9x+YYnGn4C9P6hd
j7dATKnylSarSQpSQCjK3YBUvz5RnSEIhq/8286uq9srbB4L3x6B3k/VriQlOQfX
uAbgxjYHWyLhR+UCfR+VdH38XNWwVVzTqTSdiTrz/euEX6cTtq2C8jOaXRh6D41L
E7G1q+I29m7V0TWS3PAtQfMtE1RXjMQ0
-----END CERTIFICATE-----
Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org