Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          7o3UwaSfSIZpWrEmMMZ8H84uYm753VhlIbuWITHYGUM=
Subject key identifier:   99:98:60:05:70:CD:8A:BE:35:4F:9E:E3:9A:BC:57:06:3C:01:D1:C0
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       071C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          5E77
Signing time:             Sat 18 May 2024 14:15:24 +0000
Manifest this update:     Sat 18 May 2024 14:15:24 +0000
Manifest next update:     Sat 25 May 2024 14:15:24 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: 03xxyoDP7Lo8R8aIn7dKZCuRAvcAbkmO2BoimcTSH+M=)
                          2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: P6wRPuTbM4XQTVUEhxeqbPBR4ZVHv/+RVLcmAoyjIEs=)
                          3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: rwIaCHs751bp3CHJshIBZ72YBuLElDd7VYksH4R4uKc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: May 18 14:15:24 2024 GMT
            Not After : May 25 14:15:24 2024 GMT
        Subject: CN=6648b7fc-ddbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:77:63:87:d9:6d:e9:a1:8d:59:bf:3b:6d:
                    26:c9:56:2a:67:c3:de:ae:dc:99:11:30:de:64:85:
                    13:98:34:43:8b:5c:73:25:b0:11:ad:97:15:c6:00:
                    9b:5f:f4:9d:86:54:e8:48:4b:7b:9b:1d:bc:7e:b2:
                    7e:25:e4:d6:a7:11:48:0b:8b:68:6e:41:14:06:f7:
                    d0:4a:c7:23:79:0e:7a:26:ed:b4:74:de:db:3d:48:
                    24:81:f0:12:9e:92:94:2d:09:5b:9c:05:e8:7b:7c:
                    8f:c9:c6:29:4c:26:ce:df:12:73:c4:38:08:b6:76:
                    80:27:f0:18:06:56:e3:c8:0b:a7:62:10:34:db:ba:
                    81:ed:b9:12:70:a6:1b:ff:2d:32:fc:36:e2:d4:a0:
                    c9:e9:35:0f:86:3c:24:2b:23:01:b8:4b:b1:14:8d:
                    1a:bc:f6:c3:3c:f0:08:11:20:87:64:12:9e:cf:f8:
                    0b:e5:c5:54:1d:1f:45:08:ba:1d:99:a7:cb:6e:aa:
                    c6:1f:53:f1:1f:bf:fa:20:e5:c9:d8:0a:17:24:7a:
                    54:48:2b:04:8f:f3:17:98:c7:ba:fa:16:b1:ab:ff:
                    92:4c:d8:89:15:e6:73:29:df:ec:81:2a:18:b0:b5:
                    b5:f7:83:91:a3:e0:59:1c:57:15:ac:ae:2e:e1:de:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:98:60:05:70:CD:8A:BE:35:4F:9E:E3:9A:BC:57:06:3C:01:D1:C0
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:f3:21:74:21:48:56:c9:9d:2c:b2:0c:af:45:6c:13:b8:
         21:39:26:d5:58:96:cd:ed:a1:8f:72:d8:5d:a5:f2:ad:76:76:
         c5:5b:cd:15:0f:e7:37:9f:eb:0c:be:ce:54:d4:1d:3f:0e:fa:
         1a:2a:a6:57:cf:ab:1e:b4:cf:62:29:f5:8d:81:d2:15:07:5e:
         42:c5:e3:bb:7b:a8:19:f7:34:1f:9a:f6:b6:fe:0a:33:ed:8a:
         0a:19:e5:1b:8c:6e:8b:8e:66:20:a1:06:52:e0:40:8f:43:71:
         20:97:90:7e:c5:6d:b1:20:48:84:73:42:76:81:68:4e:21:25:
         1c:0e:fe:e6:47:3e:56:e7:dd:e7:10:c5:6b:e9:24:b2:cc:f8:
         f6:6b:06:19:7b:b7:af:41:0e:72:69:58:cd:d1:6f:db:a0:71:
         f7:be:a7:34:a5:e9:08:28:1d:f5:f5:d2:87:1f:af:e2:22:00:
         3f:1b:10:2a:b6:d9:67:c2:12:cb:68:c2:48:54:90:92:34:b3:
         2e:e1:59:1e:ee:2d:ce:42:cb:01:a6:42:87:29:0c:74:21:86:
         a2:a6:2c:45:b3:3a:cf:8b:e0:6f:75:17:4a:85:95:a9:55:f5:
         b6:97:9d:48:08:a4:45:4f:86:ff:fa:a3:be:21:ab:e2:8c:a6:
         47:8d:59:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE
OEFFOEFDODcwHhcNMjQwNTE4MTQxNTI0WhcNMjQwNTI1MTQxNTI0WjAYMRYwFAYD
VQQDEw02NjQ4YjdmYy1kZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0493Y4fZbemhjVm/O20myVYqZ8PertyZETDeZIUTmDRDi1xzJbARrZcVxgCb
X/SdhlToSEt7mx28frJ+JeTWpxFIC4tobkEUBvfQSscjeQ56Ju20dN7bPUgkgfAS
npKULQlbnAXoe3yPycYpTCbO3xJzxDgItnaAJ/AYBlbjyAunYhA027qB7bkScKYb
/y0y/Dbi1KDJ6TUPhjwkKyMBuEuxFI0avPbDPPAIESCHZBKez/gL5cVUHR9FCLod
mafLbqrGH1PxH7/6IOXJ2AoXJHpUSCsEj/MXmMe6+haxq/+STNiJFeZzKd/sgSoY
sLW194ORo+BZHFcVrK4u4d53RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmYYAVw
zYq+NU+e45q8VwY8AdHAMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE
NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz
UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz7vMhdCFIVsmdLLIMr0VsE7ghOSbVWJbN7aGPcthdpfKtdnbFW80V
D+c3n+sMvs5U1B0/DvoaKqZXz6setM9iKfWNgdIVB15CxeO7e6gZ9zQfmva2/goz
7YoKGeUbjG6LjmYgoQZS4ECPQ3Egl5B+xW2xIEiEc0J2gWhOISUcDv7mRz5W593n
EMVr6SSyzPj2awYZe7evQQ5yaVjN0W/boHH3vqc0pekIKB319dKHH6/iIgA/GxAq
ttlnwhLLaMJIVJCSNLMu4Vke7i3OQssBpkKHKQx0IYaipixFszrPi+BvdRdKhZWp
VfW2l51ICKRFT4b/+qO+IavijKZHjVna
-----END CERTIFICATE-----
Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org