Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
File:                     InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json)
Hash identifier:          mFH3/4b/jo4f46w1wqYZplP/snlaTEqOYfQ4svkXrD0=
Subject key identifier:   81:25:75:0D:C0:19:62:B7:04:7C:EF:86:19:C8:B9:6B:02:63:CB:D4
Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
Certificate issuer:       /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Certificate serial:       0EEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
Manifest number:          0EE3
Signing time:             Sat 04 May 2024 18:26:39 +0000
Manifest this update:     Sat 04 May 2024 18:26:38 +0000
Manifest next update:     Sat 11 May 2024 18:26:38 +0000
Files and hashes:         1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: Fmki0SDQV/0f5qqpjDMjd6P7+tQIR9qimGdgb9MQhpo=)
                          2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: ad8PcZtJmJ5GZCdh7kUo1sT5x0A8F5SEGBdl18QkFxI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
                          rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
        Validity
            Not Before: May  4 18:26:38 2024 GMT
            Not After : May 11 18:26:38 2024 GMT
        Subject: CN=66367ddf-aa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:b5:d9:37:8a:15:9d:8d:70:31:7d:d8:00:
                    19:a1:35:75:7d:1b:d8:d4:59:49:f9:e4:63:a4:5e:
                    fd:de:6c:2a:d1:b7:fd:18:46:41:66:ae:e8:16:48:
                    1c:6d:25:7a:b2:b7:61:95:e2:6e:ac:04:83:42:a3:
                    c3:97:89:a4:79:3b:b4:e8:bb:6d:9d:eb:ee:73:87:
                    2b:38:a7:4a:5e:71:37:6d:0c:37:08:e1:24:ac:0e:
                    4d:07:47:f1:c4:1a:2d:07:15:73:fa:17:5d:87:eb:
                    31:c4:65:97:56:00:67:4c:27:5a:ea:34:12:4d:93:
                    66:d6:50:1a:78:91:04:b3:b1:b7:af:8f:65:8a:26:
                    5f:97:ff:69:6b:cf:66:6e:5d:91:48:28:ad:5b:78:
                    fd:5a:33:30:bc:4f:a9:45:27:cf:5c:41:59:1c:ff:
                    58:bf:fd:ac:1e:66:a1:8f:00:67:55:55:a3:69:bc:
                    bb:d6:9f:e4:6c:e5:f4:b0:09:7f:83:b1:7a:99:88:
                    2a:f3:24:08:87:6b:94:af:de:e6:e0:de:6a:71:3d:
                    a0:23:55:73:6c:06:bf:4a:7f:bd:4f:3f:3d:b7:f7:
                    4f:3c:2b:a0:c5:ec:e0:4d:d4:b8:66:bd:72:82:f3:
                    0e:d6:a5:fb:f8:ee:7d:1a:4a:a6:0a:38:df:91:45:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:75:0D:C0:19:62:B7:04:7C:EF:86:19:C8:B9:6B:02:63:CB:D4
            X509v3 Authority Key Identifier:
                keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:f2:1c:f4:96:90:19:42:a6:75:02:bd:84:67:7c:49:eb:
         5b:79:5e:6a:99:90:75:d1:32:a0:a6:10:d8:40:8d:17:35:96:
         39:26:f0:65:ec:46:29:c5:cb:5f:5c:67:4a:7f:35:b3:38:1b:
         1b:84:7d:6e:30:97:c7:34:ad:64:e8:e6:8e:1a:35:77:b4:df:
         df:b2:c4:5a:c6:7e:5d:f2:91:12:66:24:99:57:23:37:bd:e0:
         21:8b:42:e6:e3:f3:ec:2d:b3:cc:30:24:2c:b9:ca:f1:b5:15:
         52:f0:7a:c1:47:65:77:aa:11:59:db:96:32:9f:d9:2b:34:65:
         95:0a:55:ee:e8:4a:df:bb:ef:47:db:a7:3f:61:f1:37:19:fc:
         84:bc:a3:c7:ea:18:67:bc:4a:a5:37:2d:4f:1a:c2:d4:62:16:
         7a:95:e7:d9:e4:d3:6e:ea:3c:2d:45:66:02:16:cb:3d:95:73:
         de:45:11:c5:0a:d2:51:eb:68:a5:43:00:67:3e:fc:fd:37:51:
         25:5e:6d:27:1c:6c:00:69:ec:6f:5e:a3:1c:83:7a:03:06:b7:
         eb:ea:1c:b9:32:8b:0a:3e:90:35:c8:26:a5:52:31:c7:a9:b0:
         57:59:a8:12:a1:b3:27:67:36:0b:00:02:18:03:ee:a1:4e:4a:
         da:99:d4:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF
Nzk1OUQyNzgwHhcNMjQwNTA0MTgyNjM4WhcNMjQwNTExMTgyNjM4WjAYMRYwFAYD
VQQDEw02NjM2N2RkZi1hYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmlS12TeKFZ2NcDF92AAZoTV1fRvY1FlJ+eRjpF793mwq0bf9GEZBZq7oFkgc
bSV6srdhleJurASDQqPDl4mkeTu06Lttnevuc4crOKdKXnE3bQw3COEkrA5NB0fx
xBotBxVz+hddh+sxxGWXVgBnTCda6jQSTZNm1lAaeJEEs7G3r49liiZfl/9pa89m
bl2RSCitW3j9WjMwvE+pRSfPXEFZHP9Yv/2sHmahjwBnVVWjaby71p/kbOX0sAl/
g7F6mYgq8yQIh2uUr97m4N5qcT2gI1VzbAa/Sn+9Tz89t/dPPCugxezgTdS4Zr1y
gvMO1qX7+O59GkqmCjjfkUXi/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEldQ3A
GWK3BHzvhhnIuWsCY8vUMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5
MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow
bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjcwOC9GQTUyNkI1MDU5MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3
Nks5UFNqNTFXdTNubFowbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvLvIc9JaQGUKmdQK9hGd8SetbeV5qmZB10TKgphDYQI0XNZY5JvBl
7EYpxctfXGdKfzWzOBsbhH1uMJfHNK1k6OaOGjV3tN/fssRaxn5d8pESZiSZVyM3
veAhi0Lm4/PsLbPMMCQsucrxtRVS8HrBR2V3qhFZ25Yyn9krNGWVClXu6Erfu+9H
26c/YfE3GfyEvKPH6hhnvEqlNy1PGsLUYhZ6lefZ5NNu6jwtRWYCFss9lXPeRRHF
CtJR62ilQwBnPvz9N1ElXm0nHGwAaexvXqMcg3oDBrfr6hy5MosKPpA1yCalUjHH
qbBXWagSobMnZzYLAAIYA+6hTkramdSP
-----END CERTIFICATE-----
Generated at Sat May 4 19:58:39 2024 by rpki-client on console-ams.rpki-client.org