Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          eICsbIfQNb5JrchONtHqfk2PqACQCYat2fL1Yc2GDxY=
Subject key identifier:   74:F5:D1:31:21:E7:68:10:F7:59:97:D8:F4:E6:20:97:6D:32:35:9D
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          055F
Signing time:             Sat 27 Apr 2024 00:53:07 +0000
Manifest this update:     Sat 27 Apr 2024 00:53:06 +0000
Manifest next update:     Sat 04 May 2024 00:53:06 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: 2oL0oda2jDGC+u0rhn+ZSfuDpbnBnInZRRPsxjwdzHU=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 4fwK/7GPLlnhmbhkjNyRaiOCTRCnPsD8/p+clG0tiBU=)
                          3: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: LieNCtRR/x1UtodGGxeoi/zTfGlL9IAhjTnk2NT6pkU=)
                          4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: n3PqijCXw7S8V9XBnPM8z5rgOmdqr/7O7RnU8SwpK2U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 00:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Apr 27 00:53:06 2024 GMT
            Not After : May  4 00:53:06 2024 GMT
        Subject: CN=662c4c73-7129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:e2:7e:61:f3:2c:1c:ae:95:92:cf:b2:dc:
                    cd:1b:01:d8:9f:d5:36:7e:7f:52:95:ac:30:9a:d8:
                    e0:1f:b1:47:a5:01:4a:fa:96:f9:3a:2f:34:da:5c:
                    cd:18:cb:b5:cf:bc:29:3c:fa:a1:a5:b2:b0:37:77:
                    ad:9f:c1:d7:a9:6a:7e:a4:2e:6e:0b:bb:9f:c6:4d:
                    51:72:23:b6:39:31:8f:68:32:78:10:bd:e2:3b:9b:
                    2d:a7:7a:ea:88:91:00:4b:f3:ec:c5:7c:cf:ad:e8:
                    c7:14:7a:96:25:08:f9:04:36:5e:e7:ea:8d:d7:91:
                    86:84:93:71:b6:5c:cf:66:09:1d:41:8f:6e:6a:b4:
                    9c:30:12:9a:93:47:c7:ec:a9:a4:72:0a:b4:d1:64:
                    88:5b:c7:a9:58:ed:f9:23:73:25:d6:12:cc:14:22:
                    56:4e:17:c2:f5:13:33:40:0a:91:7a:e8:9e:17:95:
                    62:41:b6:5b:80:70:74:e2:d6:c0:08:03:be:4b:46:
                    57:e4:f1:25:3a:5b:47:d9:d2:2a:7f:74:05:41:ac:
                    d9:63:8c:9c:34:8e:d5:60:c5:2f:a3:87:fc:8a:34:
                    1a:69:f9:96:66:88:53:9f:2c:52:b6:35:7b:7a:ac:
                    00:b0:42:4a:1b:25:9f:52:e9:21:1f:26:78:ec:45:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:D1:31:21:E7:68:10:F7:59:97:D8:F4:E6:20:97:6D:32:35:9D
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:73:94:df:f6:87:24:39:c0:cd:80:20:36:e4:c8:b4:8d:
         38:ea:9a:8b:7a:d8:44:b8:47:4d:10:2c:03:cb:20:9c:5e:6b:
         8a:02:96:87:3e:7b:ca:28:12:61:d3:ab:dc:80:60:e1:b9:b6:
         0b:f8:63:5f:a0:c3:4b:af:74:7e:c9:d0:da:71:2a:78:46:81:
         6b:03:88:cd:36:f0:67:02:7b:85:c9:e3:2c:8f:3a:2b:84:e8:
         39:0e:cc:48:b6:30:89:e9:78:78:2f:43:02:06:20:f9:0b:d3:
         b6:30:b5:64:a2:8e:23:5c:72:30:bd:ac:99:61:5b:f7:f0:b6:
         60:f4:3f:32:89:13:3f:b2:cf:18:75:b0:7f:ed:a8:eb:33:ab:
         f4:db:9b:4d:31:2a:07:e4:a6:0f:a2:7e:8f:90:b0:a2:98:5b:
         5e:6a:72:1b:a2:e2:0f:41:5d:90:12:01:75:e3:6f:e1:53:5b:
         8f:5f:11:8c:43:7d:8c:13:bf:de:0a:2f:eb:af:9b:8d:a6:67:
         42:f7:11:9f:91:e6:7b:d2:9d:8f:b9:61:48:f3:80:21:71:9e:
         ee:4d:53:19:ca:cf:e0:b5:f0:3f:9b:fd:e8:fd:6b:21:2d:82:
         31:f4:7b:4b:91:37:fd:7a:95:0e:84:e1:08:6d:9f:22:bc:93:
         4d:44:98:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjQwNDI3MDA1MzA2WhcNMjQwNTA0MDA1MzA2WjAYMRYwFAYD
VQQDEw02NjJjNGM3My03MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FLifmHzLByulZLPstzNGwHYn9U2fn9SlawwmtjgH7FHpQFK+pb5Oi802lzN
GMu1z7wpPPqhpbKwN3etn8HXqWp+pC5uC7ufxk1RciO2OTGPaDJ4EL3iO5stp3rq
iJEAS/PsxXzPrejHFHqWJQj5BDZe5+qN15GGhJNxtlzPZgkdQY9uarScMBKak0fH
7Kmkcgq00WSIW8epWO35I3Ml1hLMFCJWThfC9RMzQAqReuieF5ViQbZbgHB04tbA
CAO+S0ZX5PElOltH2dIqf3QFQazZY4ycNI7VYMUvo4f8ijQaafmWZohTnyxStjV7
eqwAsEJKGyWfUukhHyZ47EXntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT10TEh
52gQ91mX2PTmIJdtMjWdMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCianOU3/aHJDnAzYAgNuTItI046pqLethEuEdNECwDyyCcXmuKApaH
PnvKKBJh06vcgGDhubYL+GNfoMNLr3R+ydDacSp4RoFrA4jNNvBnAnuFyeMsjzor
hOg5DsxItjCJ6Xh4L0MCBiD5C9O2MLVkoo4jXHIwvayZYVv38LZg9D8yiRM/ss8Y
dbB/7ajrM6v025tNMSoH5KYPon6PkLCimFteanIbouIPQV2QEgF142/hU1uPXxGM
Q32ME7/eCi/rr5uNpmdC9xGfkeZ70p2PuWFI84AhcZ7uTVMZys/gtfA/m/3o/Wsh
LYIx9HtLkTf9epUOhOEIbZ8ivJNNRJgk
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org