Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
File:                     nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json)
Hash identifier:          ljpGpsY4KAeF+2ib1yF3P5w44BQqicrOGXsNOtscyjQ=
Subject key identifier:   3D:42:0C:F9:24:FC:77:19:1C:38:A2:91:88:32:54:CC:82:26:81:FC
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Certificate issuer:       /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial:       0829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
Manifest number:          07A6
Signing time:             Thu 02 May 2024 22:46:32 +0000
Manifest this update:     Thu 02 May 2024 22:46:31 +0000
Manifest next update:     Thu 09 May 2024 22:46:31 +0000
Files and hashes:         1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: CyjyXz1fQz0uDT6R9VHiVYLkkgneiprXP6s625p8u/k=)
                          2: 5F003454895D11EE9A09AA30C4F9AE02.roa (hash: NC4A46t37iiSnTXwlZxDtnyo2DE6x35bPsML1Ta8wlM=)
                          3: 07398E3A8DBF11EE8BCAEC6AC4F9AE02.roa (hash: q4nj3T/IJ0R9dlS5X3s3s+4HgUWtl2p4I8ylViE1QH0=)
                          4: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: m+G0jDkNOUBOm1yFs+EXlK3+th5aVmzVYpAZcrJOAPg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
                          rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
        Validity
            Not Before: May  2 22:46:31 2024 GMT
            Not After : May  9 22:46:31 2024 GMT
        Subject: CN=663417c7-9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:46:d7:87:52:b0:5b:b0:a7:d9:3c:d1:dc:
                    de:36:41:3f:bd:03:e6:a1:9a:0e:b7:b3:8e:db:fa:
                    05:f1:7e:3a:6a:10:46:ea:14:69:b4:37:0c:e7:e7:
                    b1:89:58:47:6c:44:4c:62:4e:07:d9:ee:c1:eb:47:
                    fa:0b:11:67:f6:db:e7:fe:d1:80:df:50:f1:0c:4e:
                    8f:f7:e5:05:2d:29:e4:fa:f1:09:d1:88:6e:88:34:
                    d1:f5:e5:9e:1d:cb:8e:a3:97:7d:3a:66:c4:76:9f:
                    cf:3c:4d:3f:39:e5:a3:50:e4:fa:d8:f6:01:09:5f:
                    e5:90:2a:fc:13:96:a0:6c:d5:09:fe:08:a8:61:66:
                    3d:0b:bc:47:9a:85:1b:15:64:d4:f4:d1:a8:bd:f1:
                    51:fd:e7:60:af:75:69:35:8d:80:28:c9:f4:76:27:
                    7c:6e:98:d5:24:5a:f2:6a:aa:b9:60:e2:2d:51:54:
                    c0:1a:54:b0:f8:83:73:98:e2:b3:8e:d3:7a:ea:19:
                    ca:51:09:3e:e3:86:d7:69:de:54:31:8c:6c:fe:d4:
                    f3:ea:17:73:e4:d5:2d:84:95:4d:b0:ef:c6:28:26:
                    3e:a3:ad:03:7c:e0:23:4b:bd:73:3d:e0:c6:b9:66:
                    9a:7a:4a:cf:a0:23:c5:6e:cc:ee:c3:64:40:f6:c0:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:42:0C:F9:24:FC:77:19:1C:38:A2:91:88:32:54:CC:82:26:81:FC
            X509v3 Authority Key Identifier:
                keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:b3:6a:3a:20:78:64:94:12:8e:bf:73:67:4b:41:28:4d:
         e0:46:19:3b:f4:9a:a6:e5:8a:bb:6b:2d:17:7c:04:25:e9:d7:
         25:cb:e1:d6:fe:73:df:65:52:30:04:de:8c:11:ad:d2:70:fb:
         f8:e3:6e:da:4b:b2:58:e7:71:8b:13:31:36:74:fe:3d:08:fa:
         b1:61:c9:a7:16:9f:af:8f:34:e1:08:04:8f:5f:3f:20:32:f8:
         0d:33:02:35:f2:0e:22:58:7c:f3:81:a0:6c:f3:48:ee:fa:52:
         e2:47:b6:51:07:9f:16:fb:63:bb:4f:1b:a0:41:3d:60:6f:58:
         e0:8d:33:50:fa:32:d3:44:fc:63:ff:5e:e7:c7:c4:36:e0:06:
         3b:fb:56:16:79:92:bc:db:9d:1d:5a:2c:b0:51:1c:91:ca:f4:
         59:98:31:77:d8:9d:55:14:6a:67:a6:2c:1e:e7:8a:38:b4:6e:
         24:15:dd:46:2a:0a:36:01:b2:ba:27:26:46:19:8e:74:9b:ca:
         57:8e:5c:4f:19:5d:87:35:a9:89:18:33:f2:3b:0a:64:71:d2:
         87:e9:7f:78:ec:00:71:4c:a8:e1:85:5d:96:c8:88:b6:8a:3f:
         41:e0:d6:92:f6:9d:c9:cb:d8:9e:da:ce:a5:a4:22:1b:84:23:
         13:87:bd:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjQwNTAyMjI0NjMxWhcNMjQwNTA5MjI0NjMxWjAYMRYwFAYD
VQQDEw02NjM0MTdjNy05YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylFG14dSsFuwp9k80dzeNkE/vQPmoZoOt7OO2/oF8X46ahBG6hRptDcM5+ex
iVhHbERMYk4H2e7B60f6CxFn9tvn/tGA31DxDE6P9+UFLSnk+vEJ0YhuiDTR9eWe
HcuOo5d9OmbEdp/PPE0/OeWjUOT62PYBCV/lkCr8E5agbNUJ/gioYWY9C7xHmoUb
FWTU9NGovfFR/edgr3VpNY2AKMn0did8bpjVJFryaqq5YOItUVTAGlSw+INzmOKz
jtN66hnKUQk+44bXad5UMYxs/tTz6hdz5NUthJVNsO/GKCY+o60DfOAjS71zPeDG
uWaaekrPoCPFbszuw2RA9sCfqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1CDPkk
/HcZHDiikYgyVMyCJoH8MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE
S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkIbNqOiB4ZJQSjr9zZ0tBKE3gRhk79Jqm5Yq7ay0XfAQl6dcly+HW
/nPfZVIwBN6MEa3ScPv4427aS7JY53GLEzE2dP49CPqxYcmnFp+vjzThCASPXz8g
MvgNMwI18g4iWHzzgaBs80ju+lLiR7ZRB58W+2O7TxugQT1gb1jgjTNQ+jLTRPxj
/17nx8Q24AY7+1YWeZK8250dWiywURyRyvRZmDF32J1VFGpnpiwe54o4tG4kFd1G
Kgo2AbK6JyZGGY50m8pXjlxPGV2HNamJGDPyOwpkcdKH6X947ABxTKjhhV2WyIi2
ij9B4NaS9p3Jy9ie2s6lpCIbhCMTh72o
-----END CERTIFICATE-----
Generated at Thu May 2 23:48:43 2024 by rpki-client on console-fra.rpki-client.org