Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          4mddPFu4SwEllyTGfsnRcE/mJXIZVTEVQVmFpT3froY=
Subject key identifier:   13:C4:93:C4:83:31:10:BC:EE:51:89:B1:90:74:51:3F:A4:B1:42:22
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       22A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          2280
Signing time:             Fri 26 Apr 2024 16:11:38 +0000
Manifest this update:     Fri 26 Apr 2024 16:11:38 +0000
Manifest next update:     Fri 03 May 2024 16:11:38 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: kE8ANN38oMAER9kuRCiAKbkCYiM8c1gDl9kR26y+Izk=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: 4f0d87mHdJ55WPEhB/LzJCM93K/2MRHd7H56GRmnhow=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8864 (0x22a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: Apr 26 16:11:38 2024 GMT
            Not After : May  3 16:11:38 2024 GMT
        Subject: CN=662bd23a-5708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:27:3c:88:af:3a:0d:e6:d7:d8:39:e4:02:
                    a6:a4:a2:27:74:d1:9f:14:6c:8c:46:e4:33:c5:52:
                    ae:16:3f:12:b0:34:a3:c2:20:3a:5d:f4:d6:6e:79:
                    91:72:a8:bd:92:43:9f:15:59:da:7d:64:1f:73:d4:
                    5e:65:3d:8c:51:10:15:25:2b:c4:f2:22:d1:f2:6a:
                    19:e6:35:33:96:64:6c:8c:23:41:7b:58:04:5b:fb:
                    e8:31:5d:a5:00:c5:8d:67:ee:e4:1b:ec:b0:6b:21:
                    b3:81:7a:47:f0:17:ef:9d:2b:79:76:1c:4c:27:8a:
                    bc:1a:c0:a0:b2:76:cb:f3:28:6b:7c:3f:c0:5a:f5:
                    4c:b3:36:f5:d1:d8:8d:53:95:be:e1:7a:07:43:ab:
                    b7:e9:97:38:31:2a:fa:fd:05:4a:16:8b:dc:39:c2:
                    d5:b0:ce:ae:2f:6a:81:32:87:ef:5c:62:e7:c5:b6:
                    3a:1e:80:38:55:65:e6:b9:8b:d0:68:9a:21:8c:6d:
                    39:34:81:41:62:53:cd:c3:30:da:1f:0e:2a:f9:ab:
                    81:6b:9d:ff:73:ba:53:05:d0:38:2d:d9:55:c3:ad:
                    a4:ee:bf:96:e5:78:fa:2a:74:87:98:77:19:6b:dd:
                    87:22:7a:24:d8:01:56:cb:4c:08:a2:c3:11:62:7b:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:93:C4:83:31:10:BC:EE:51:89:B1:90:74:51:3F:A4:B1:42:22
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:05:74:cc:cf:3f:32:f9:cd:dc:5c:72:6c:47:e4:a2:69:
         c8:a6:ba:11:0b:16:04:6c:bf:cf:1a:0c:99:70:4b:0e:e2:85:
         17:83:ad:5f:e3:cb:0f:86:91:60:d9:ce:3f:f1:3a:a3:7a:2c:
         db:a5:5a:bc:47:2f:1a:37:b2:fd:c6:b4:ad:3b:90:4b:6f:0f:
         80:63:34:91:c6:19:d5:36:f8:6c:83:0c:d0:d1:41:20:d1:e6:
         ad:83:fd:b0:aa:42:62:67:ee:7c:53:21:0c:ef:3b:b1:9b:56:
         df:0a:c8:dc:89:57:75:c7:9a:75:50:38:b8:5c:20:33:e3:5a:
         6e:d8:bd:c4:1f:4f:c8:41:0d:48:49:53:51:58:ec:a0:59:b9:
         d8:8a:b4:54:0b:63:78:1e:55:69:a3:be:ea:dd:ac:cb:45:b7:
         dd:44:83:67:8b:b0:d3:e8:3c:21:a6:03:25:a6:44:e0:c8:19:
         68:4e:f6:37:4d:f6:54:f2:80:ab:20:23:80:cf:8e:89:1b:bc:
         8b:b5:a8:48:76:ad:30:07:69:91:af:12:c4:b0:e6:5f:a0:0c:
         e5:af:76:db:40:52:8d:d7:8b:40:82:42:f5:f7:3f:cf:8d:23:
         51:8d:35:1c:a8:39:6e:05:54:d1:c9:4f:69:3e:f4:24:59:dd:
         3b:c6:e8:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3
NDNFNDFDODUwHhcNMjQwNDI2MTYxMTM4WhcNMjQwNTAzMTYxMTM4WjAYMRYwFAYD
VQQDEw02NjJiZDIzYS01NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIUnPIivOg3m19g55AKmpKIndNGfFGyMRuQzxVKuFj8SsDSjwiA6XfTWbnmR
cqi9kkOfFVnafWQfc9ReZT2MURAVJSvE8iLR8moZ5jUzlmRsjCNBe1gEW/voMV2l
AMWNZ+7kG+ywayGzgXpH8BfvnSt5dhxMJ4q8GsCgsnbL8yhrfD/AWvVMszb10diN
U5W+4XoHQ6u36Zc4MSr6/QVKFovcOcLVsM6uL2qBMofvXGLnxbY6HoA4VWXmuYvQ
aJohjG05NIFBYlPNwzDaHw4q+auBa53/c7pTBdA4LdlVw62k7r+W5Xj6KnSHmHcZ
a92HInok2AFWy0wIosMRYnvPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPEk8SD
MRC87lGJsZB0UT+ksUIiMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2
QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF
Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBB1QV0zM8/MvnN3FxybEfkomnIproRCxYEbL/PGgyZcEsO4oUXg61f
48sPhpFg2c4/8TqjeizbpVq8Ry8aN7L9xrStO5BLbw+AYzSRxhnVNvhsgwzQ0UEg
0eatg/2wqkJiZ+58UyEM7zuxm1bfCsjciVd1x5p1UDi4XCAz41pu2L3EH0/IQQ1I
SVNRWOygWbnYirRUC2N4HlVpo77q3azLRbfdRINni7DT6DwhpgMlpkTgyBloTvY3
TfZU8oCrICOAz46JG7yLtahIdq0wB2mRrxLEsOZfoAzlr3bbQFKN14tAgkL19z/P
jSNRjTUcqDluBVTRyU9pPvQkWd07xui/
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:49 2024 by rpki-client on console-fra.rpki-client.org