Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
File:                     RLu-zETJHgkDBfMc5g-37DrJU-c.mft (raw, json)
Hash identifier:          gJ2r+eyl+gl7Dx/J68KkZ0o9ji4Vu/dHH0CGvKUZO+I=
Subject key identifier:   BF:18:A7:3F:44:14:6D:50:5C:C3:66:6D:F3:6A:72:03:4C:F9:5C:18
Authority key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7
Certificate issuer:       /CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
Manifest number:          6F
Signing time:             Sun 19 May 2024 07:32:55 +0000
Manifest this update:     Sun 19 May 2024 07:32:54 +0000
Manifest next update:     Sun 26 May 2024 07:32:54 +0000
Files and hashes:         1: RLu-zETJHgkDBfMc5g-37DrJU-c.crl (hash: CZrlTKiGriOg7iTKsUxDtMQVKqWE6bKnHTqghfvI29s=)
                          2: 5E69790087C911EEBD25E611C4F9AE02.roa (hash: XPndWRM0IelfTrLI9n1JOvmkBoj2QC2GPvktNvP1YPE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl
                          rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177D93/serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7
        Validity
            Not Before: May 19 07:32:54 2024 GMT
            Not After : May 26 07:32:54 2024 GMT
        Subject: CN=6649ab26-408a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:85:9e:2c:9a:f4:96:ce:16:e0:2c:86:4b:
                    70:3d:0a:90:e6:27:ce:61:ce:7f:60:a9:23:b6:98:
                    e8:9c:8f:af:32:30:b8:a4:57:a6:ff:4c:e8:8d:07:
                    f2:85:b0:cc:25:b4:fb:54:ff:34:ef:98:d0:4d:8d:
                    3b:eb:84:2a:e4:91:af:5f:f7:c3:cf:9e:15:59:ff:
                    ae:2d:ce:a6:fa:05:9e:e8:ca:6d:f9:1c:36:44:14:
                    ba:20:8e:37:ea:e2:7a:75:49:43:7f:18:62:cf:2f:
                    eb:60:e7:02:95:25:09:ba:96:f8:71:06:41:59:12:
                    74:ad:46:a2:f3:51:f4:a0:9c:01:5d:91:78:4e:a4:
                    96:90:70:0c:d4:cf:78:5a:74:7c:70:20:d5:c1:ce:
                    e3:b0:7d:19:94:8c:82:50:f6:9b:18:52:22:79:47:
                    c2:54:88:a0:20:d4:cc:0f:28:30:2f:96:5a:9f:22:
                    c1:4e:c9:b8:47:af:35:5a:b1:e8:f4:f5:95:49:6c:
                    6a:8b:34:9f:73:fc:60:3a:65:0f:3e:7f:23:d9:1c:
                    84:39:22:c6:f1:6a:ef:a9:21:d5:03:26:5f:e2:e0:
                    85:20:c4:d2:fd:c6:23:74:50:d8:9f:fd:7e:19:b1:
                    c1:35:d8:93:3d:a9:00:03:a1:f2:d4:df:24:6f:cb:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:18:A7:3F:44:14:6D:50:5C:C3:66:6D:F3:6A:72:03:4C:F9:5C:18
            X509v3 Authority Key Identifier:
                keyid:44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:11:90:70:28:46:97:ad:4a:28:7c:54:43:22:43:89:44:d5:
         f3:6d:ab:a0:f8:24:70:38:e3:bd:be:dc:df:8a:02:83:2b:9d:
         c2:01:25:a3:73:0b:90:6d:15:94:2b:b9:4a:dd:23:2a:d2:83:
         c5:de:37:be:f9:a9:72:e9:e3:51:f8:7f:0e:14:d9:82:91:66:
         02:36:63:9d:41:d1:19:8d:ea:44:f2:26:a6:42:19:85:c4:1d:
         24:b1:68:53:9c:ac:08:91:75:8c:0e:9a:31:72:04:d3:2a:49:
         13:cc:f5:41:30:6c:ee:55:50:29:d3:b3:29:53:61:fe:af:a3:
         bd:17:1e:37:d5:0b:02:ef:ca:a8:96:88:57:aa:62:e8:4b:e6:
         6f:ad:ad:d5:6f:c2:44:a2:44:d9:9f:3c:7c:f9:e8:6d:2b:b9:
         bc:6d:72:65:7b:d3:09:56:e2:e7:3b:8e:cb:d9:38:ff:72:75:
         94:0a:2e:f6:f8:f1:f3:57:19:22:f4:c6:48:3d:bc:68:33:0c:
         44:90:7c:30:d2:37:0d:b1:44:b8:94:08:08:38:aa:2b:e1:5b:
         11:1c:f5:82:be:d5:ba:60:f6:d6:e4:d9:98:71:30:45:9d:22:
         58:e9:0b:96:89:94:02:75:85:ca:cc:a0:5a:59:6a:ee:28:f5:
         9e:69:4b:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0Q5MzExMC8GA1UEBRMoNDRCQkJFQ0M0NEM5MUUwOTAzMDVGMzFDRTYwRkI3RUMz
QUM5NTNFNzAeFw0yNDA1MTkwNzMyNTRaFw0yNDA1MjYwNzMyNTRaMBgxFjAUBgNV
BAMTDTY2NDlhYjI2LTQwOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO74WeLJr0ls4W4CyGS3A9CpDmJ85hzn9gqSO2mOicj68yMLikV6b/TOiNB/KF
sMwltPtU/zTvmNBNjTvrhCrkka9f98PPnhVZ/64tzqb6BZ7oym35HDZEFLogjjfq
4np1SUN/GGLPL+tg5wKVJQm6lvhxBkFZEnStRqLzUfSgnAFdkXhOpJaQcAzUz3ha
dHxwINXBzuOwfRmUjIJQ9psYUiJ5R8JUiKAg1MwPKDAvllqfIsFOybhHrzVasej0
9ZVJbGqLNJ9z/GA6ZQ8+fyPZHIQ5Isbxau+pIdUDJl/i4IUgxNL9xiN0UNif/X4Z
scE12JM9qQADofLU3yRvy4W3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvxinP0QU
bVBcw2Zt82pyA0z5XBgwHwYDVR0jBBgwFoAURLu+zETJHgkDBfMc5g+37DrJU+cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3RDkzLzc2OTMyM0E0NzMw
QzExRUVBNThDRTM3MkM0RjlBRTAyL1JMdS16RVRKSGdrREJmTWM1Zy0zN0RySlUt
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUkx1LXpFVEpIZ2tEQmZNYzVnLTM3RHJKVS1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
RDkzLzc2OTMyM0E0NzMwQzExRUVBNThDRTM3MkM0RjlBRTAyL1JMdS16RVRKSGdr
REJmTWM1Zy0zN0RySlUtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACIRkHAoRpetSih8VEMiQ4lE1fNtq6D4JHA4472+3N+KAoMrncIBJaNz
C5BtFZQruUrdIyrSg8XeN775qXLp41H4fw4U2YKRZgI2Y51B0RmN6kTyJqZCGYXE
HSSxaFOcrAiRdYwOmjFyBNMqSRPM9UEwbO5VUCnTsylTYf6vo70XHjfVCwLvyqiW
iFeqYuhL5m+trdVvwkSiRNmfPHz56G0rubxtcmV70wlW4uc7jsvZOP9ydZQKLvb4
8fNXGSL0xkg9vGgzDESQfDDSNw2xRLiUCAg4qivhWxEc9YK+1bpg9tbk2ZhxMEWd
IljpC5aJlAJ1hcrMoFpZau4o9Z5pSy0=
-----END CERTIFICATE-----
Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org