Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          OtGhG1BFQRLfh8Ghhetz7k5kd4RKC7YNNengvUIUptA=
Subject key identifier:   64:41:11:22:A2:7F:1F:A5:FB:A9:0E:3A:61:5C:B3:C4:2B:3D:07:46
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          0374
Signing time:             Sun 15 Sep 2024 03:41:30 +0000
Manifest this update:     Sun 15 Sep 2024 03:41:30 +0000
Manifest next update:     Sun 22 Sep 2024 03:41:30 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: yJjV6EUSy1drFg9/DrHAONePrmS+ngA1+fgylJo0Y5I=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: qhnUnP+aTE7BCo7LsbE6IS6BisEmm/xxVH8T66DbyII=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Sep 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Sep 15 03:41:30 2024 GMT
            Not After : Sep 22 03:41:30 2024 GMT
        Subject: CN=66e6576a-49f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:8a:e2:6d:e0:89:a4:dd:34:0f:e6:b8:8e:
                    6f:c8:1b:04:5e:2d:4d:be:e0:a4:f1:65:85:e3:b3:
                    40:81:93:90:b0:78:26:fa:6b:d5:fb:59:76:da:b7:
                    b4:e7:3d:a1:76:62:66:5d:91:f9:51:68:cd:80:27:
                    e2:7b:7b:24:38:e1:24:e4:0d:5a:3e:1d:16:14:91:
                    fd:37:44:a9:db:b4:f6:39:fb:79:73:70:d3:8f:07:
                    8e:eb:30:3a:23:2d:14:a7:44:28:ec:f9:a4:25:c2:
                    df:c8:cc:a9:6a:96:48:a7:28:4b:d4:7b:88:cd:2f:
                    71:44:0f:9d:b6:90:10:fd:7e:6c:d2:da:b2:86:83:
                    c4:25:93:ad:56:ee:b5:dc:c3:24:cc:e7:b2:fe:53:
                    36:5a:1a:81:fb:5d:d1:5d:1b:85:7d:95:e8:e6:b4:
                    12:d2:03:50:d9:9f:d9:71:a6:5f:27:fd:d6:45:95:
                    15:f4:04:6d:3b:ae:90:7c:73:3c:c4:9e:ce:1b:3a:
                    7d:f7:a5:21:f3:46:3b:9b:6e:36:88:05:50:72:23:
                    ed:03:61:20:65:de:a2:a3:60:1e:8b:31:1d:d0:2d:
                    89:c3:fc:3b:ed:94:d2:49:74:bf:b2:e8:34:b1:86:
                    1a:c4:4c:01:9f:d6:19:b1:c0:6d:d7:00:a4:8e:2a:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:41:11:22:A2:7F:1F:A5:FB:A9:0E:3A:61:5C:B3:C4:2B:3D:07:46
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:99:4c:d4:69:16:7f:c9:6a:df:43:38:e7:23:c3:21:45:
         dc:c1:f2:89:2e:d1:98:ca:28:78:9c:1f:e0:e7:ff:e3:82:0e:
         ba:db:f0:92:26:42:4f:62:d6:2d:9f:0f:b7:e2:b9:19:a9:ba:
         37:b3:c0:fb:de:9c:2d:2d:a0:3b:8d:2c:cb:89:2f:94:86:69:
         f1:22:5c:81:2f:7d:63:76:85:9c:e4:b3:55:b5:27:63:5f:dc:
         fa:02:64:1c:19:d7:59:a3:12:97:14:e9:a0:c9:b9:db:60:d1:
         61:39:7b:ba:2a:cf:03:5f:6d:3a:f5:9b:a0:0b:d2:54:7f:69:
         18:df:81:3a:5b:b0:f8:14:4e:1b:6b:a2:c4:e3:25:56:b8:0f:
         1a:23:e8:1b:14:ea:7e:50:c1:7a:c3:37:cd:09:a0:b0:72:05:
         6b:1e:27:53:c0:de:3b:bd:c3:d4:4c:0c:30:e1:4e:1f:ec:ea:
         c2:a3:56:94:3c:86:fe:8b:4d:60:08:4c:73:d1:c9:ee:b4:c4:
         60:15:0e:6b:c3:be:ea:a0:e3:0d:32:0a:dc:88:0b:76:eb:56:
         ce:8d:32:98:b8:79:0e:88:17:f9:18:d9:f0:d3:05:2f:aa:cd:
         82:0e:86:9e:58:37:96:7f:5e:a1:32:ae:a2:2b:71:04:1a:60:
         3b:32:70:b7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
M0E4MDExMC8GA1UEBRMoMTM3NkIyRjNCRDVCNEQzNUFEOTUyQjE3OTBEODI3NDY5
OTJENDE2RjAeFw0yNDA5MTUwMzQxMzBaFw0yNDA5MjIwMzQxMzBaMBgxFjAUBgNV
BAMTDTY2ZTY1NzZhLTQ5ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYsIribeCJpN00D+a4jm/IGwReLU2+4KTxZYXjs0CBk5CweCb6a9X7WXbat7Tn
PaF2YmZdkflRaM2AJ+J7eyQ44STkDVo+HRYUkf03RKnbtPY5+3lzcNOPB47rMDoj
LRSnRCjs+aQlwt/IzKlqlkinKEvUe4jNL3FED522kBD9fmzS2rKGg8Qlk61W7rXc
wyTM57L+UzZaGoH7XdFdG4V9lejmtBLSA1DZn9lxpl8n/dZFlRX0BG07rpB8czzE
ns4bOn33pSHzRjubbjaIBVByI+0DYSBl3qKjYB6LMR3QLYnD/DvtlNJJdL+y6DSx
hhrETAGf1hmxwG3XAKSOKv+DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZEERIqJ/
H6X7qQ46YVyzxCs9B0YwHwYDVR0jBBgwFoAUE3ay871bTTWtlSsXkNgnRpktQW8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzQTgwLzY5MDExOUQyODgx
QTExRUNCQ0NGQTAwRkM0RjlBRTAyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFX
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRTNheTg3MWJUVFd0bFNzWGtOZ25ScGt0UVc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz
QTgwLzY5MDExOUQyODgxQTExRUNCQ0NGQTAwRkM0RjlBRTAyL0UzYXk4NzFiVFRX
dGxTc1hrTmduUnBrdFFXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJzKmUzUaRZ/yWrfQzjnI8MhRdzB8oku0ZjKKHicH+Dn/+OCDrrb8JIm
Qk9i1i2fD7fiuRmpujezwPvenC0toDuNLMuJL5SGafEiXIEvfWN2hZzks1W1J2Nf
3PoCZBwZ11mjEpcU6aDJudtg0WE5e7oqzwNfbTr1m6AL0lR/aRjfgTpbsPgUThtr
osTjJVa4Dxoj6BsU6n5QwXrDN80JoLByBWseJ1PA3ju9w9RMDDDhTh/s6sKjVpQ8
hv6LTWAITHPRye60xGAVDmvDvuqg4w0yCtyIC3brVs6NMpi4eQ6IF/kY2fDTBS+q
zYIOhp5YN5Z/XqEyrqIrcQQaYDsycLc=
-----END CERTIFICATE-----
Generated at Sun Sep 15 06:55:48 2024 by rpki-client on console-fra.rpki-client.org