Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
File:                     keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft (raw, json)
Hash identifier:          WJIs8APq/DX4zXfAQLk0YdzqaOqg/gPQm+wGUkzsWcY=
Subject key identifier:   03:F1:8E:63:3A:D5:CA:32:5F:64:BF:70:D4:3F:4D:85:D5:9B:96:A0
Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF
Certificate issuer:       /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
Certificate serial:       0452
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
Manifest number:          044D
Signing time:             Wed 01 May 2024 02:13:19 +0000
Manifest this update:     Wed 01 May 2024 02:13:19 +0000
Manifest next update:     Wed 08 May 2024 02:13:19 +0000
Files and hashes:         1: keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl (hash: wl3+nNpqNbI1YPQoZdC7pnLrJ/exSXV6S4+Ur6f82NI=)
                          2: CDFDBE10061C11ECA4633B32C4F9AE02.roa (hash: CS6F8Mjrr/igLIk1h8UByZf+5cetq2hYhKfKiknacaU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl
                          rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 01:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF
        Validity
            Not Before: May  1 02:13:19 2024 GMT
            Not After : May  8 02:13:19 2024 GMT
        Subject: CN=6631a53f-2115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:0e:25:93:67:23:6c:d7:cb:cb:54:f2:6b:
                    48:da:a9:39:c1:fd:0c:d6:30:ef:b2:32:60:3e:5e:
                    b4:4b:9f:7b:c2:7a:14:6b:d5:00:0a:7d:7f:38:ec:
                    53:42:33:6e:e3:43:7c:ec:1f:1a:8c:53:4f:07:c4:
                    17:6c:f4:6a:88:a2:11:f3:19:b4:49:99:c8:2c:5b:
                    b2:82:f4:08:f0:dd:a6:7d:28:c1:0a:04:fe:39:f1:
                    e6:16:3a:e1:45:60:55:a7:30:6d:48:24:6c:1b:6e:
                    73:2c:38:03:03:1e:de:cd:bc:cf:74:0e:d1:d9:44:
                    6f:fa:5b:8a:fe:ab:97:c5:59:af:36:df:65:9b:dc:
                    5e:96:18:41:47:41:c6:00:d3:3b:f5:da:5c:50:28:
                    6c:6d:6f:cc:a0:32:ea:42:6a:de:fb:bb:a0:7a:6d:
                    2c:8b:3f:f2:3d:e3:bd:8b:bc:8c:4b:a4:89:79:aa:
                    58:09:a9:b8:10:1c:94:7d:d4:ac:c7:00:ec:d8:37:
                    7b:83:b5:7e:bf:bc:98:77:ef:ca:83:7c:be:49:03:
                    a3:62:a6:a7:21:4c:21:bf:c7:14:55:25:f5:ed:5c:
                    e2:36:fa:ae:5c:98:1b:b6:ca:3d:12:56:5e:8c:a6:
                    40:0c:50:81:ed:55:84:fc:7c:ba:85:2d:e4:e9:ea:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:8E:63:3A:D5:CA:32:5F:64:BF:70:D4:3F:4D:85:D5:9B:96:A0
            X509v3 Authority Key Identifier:
                keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:22:24:31:2e:09:ef:ea:0a:d5:2e:a1:f8:4b:36:05:65:94:
         17:35:31:e5:dd:df:68:79:36:85:28:dc:65:ee:bd:9d:6e:6d:
         90:ae:4b:a6:fc:d4:7a:ea:6f:12:56:8b:00:10:15:36:39:e8:
         09:58:7c:04:f6:5d:e6:71:e1:25:54:62:c1:60:9c:a4:d3:65:
         2c:58:87:e0:69:67:1b:ed:75:a6:2b:58:46:e2:c0:ad:e7:35:
         e2:cc:a0:5e:d8:30:14:03:6f:4c:8d:f1:82:83:e0:71:02:48:
         4b:19:e6:4d:0b:6f:98:59:c7:b2:87:41:84:36:e7:2f:12:c7:
         4c:43:bb:b7:7a:1e:6f:af:01:72:a7:f0:13:f5:d7:1a:0d:3e:
         5c:d3:e0:46:ac:c4:a6:69:3f:41:f3:a6:1b:a2:68:32:bf:6b:
         20:96:3b:63:ae:92:2c:6a:a9:b5:47:53:5d:c9:81:fb:36:df:
         ea:c5:74:9c:c4:d3:90:be:b4:ae:4f:59:22:9b:5d:a9:81:f5:
         59:e8:0c:de:e5:96:0e:f4:fc:5a:e3:67:36:45:bc:2f:24:7a:
         f2:11:f2:1f:6d:b2:ef:ba:79:6c:15:a5:2c:f6:55:cf:20:9c:
         29:35:6b:7f:9a:cc:94:52:66:94:c9:dc:78:42:a7:f4:1d:fc:
         f4:ed:f4:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE
OUQwMjQ4RkYwHhcNMjQwNTAxMDIxMzE5WhcNMjQwNTA4MDIxMzE5WjAYMRYwFAYD
VQQDEw02NjMxYTUzZi0yMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNEOJZNnI2zXy8tU8mtI2qk5wf0M1jDvsjJgPl60S597wnoUa9UACn1/OOxT
QjNu40N87B8ajFNPB8QXbPRqiKIR8xm0SZnILFuygvQI8N2mfSjBCgT+OfHmFjrh
RWBVpzBtSCRsG25zLDgDAx7ezbzPdA7R2URv+luK/quXxVmvNt9lm9xelhhBR0HG
ANM79dpcUChsbW/MoDLqQmre+7ugem0siz/yPeO9i7yMS6SJeapYCam4EByUfdSs
xwDs2Dd7g7V+v7yYd+/Kg3y+SQOjYqanIUwhv8cUVSX17VziNvquXJgbtso9ElZe
jKZADFCB7VWE/Hy6hS3k6epAhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPxjmM6
1coyX2S/cNQ/TYXVm5agMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2
MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNY
dlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6IiQxLgnv6grVLqH4SzYFZZQXNTHl3d9oeTaFKNxl7r2dbm2Qrkum
/NR66m8SVosAEBU2OegJWHwE9l3mceElVGLBYJyk02UsWIfgaWcb7XWmK1hG4sCt
5zXizKBe2DAUA29MjfGCg+BxAkhLGeZNC2+YWceyh0GENucvEsdMQ7u3eh5vrwFy
p/AT9dcaDT5c0+BGrMSmaT9B86Ybomgyv2sgljtjrpIsaqm1R1NdyYH7Nt/qxXSc
xNOQvrSuT1kim12pgfVZ6Aze5ZYO9Pxa42c2RbwvJHryEfIfbbLvunlsFaUs9lXP
IJwpNWt/msyUUmaUydx4Qqf0Hfz07fQD
-----END CERTIFICATE-----
Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org