Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
File:                     n095sMMg0u--SKvL-paoRdZHlu8.mft (raw, json)
Hash identifier:          4q855RkIj1TKkzriJXmSr8WAGzBpQXf0rMaCkZ57TGQ=
Subject key identifier:   21:5A:87:7A:68:D1:7B:DA:DF:D6:39:71:6B:EC:5F:35:14:5A:27:E1
Authority key identifier: 9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF
Certificate issuer:       /CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
Manifest number:          010B
Signing time:             Sun 05 May 2024 04:38:51 +0000
Manifest this update:     Sun 05 May 2024 04:38:50 +0000
Manifest next update:     Sun 12 May 2024 04:38:50 +0000
Files and hashes:         1: n095sMMg0u--SKvL-paoRdZHlu8.crl (hash: UD2Cwk3sB9BYE0CYGecr0o/SzAEJtEcPjW/3UACZQzg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7/serialNumber=9F4F79B0C320D2EFBE48ABCBFA96A845D64796EF
        Validity
            Not Before: May  5 04:38:50 2024 GMT
            Not After : May 12 04:38:50 2024 GMT
        Subject: CN=66370d5b-271e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:90:87:c9:13:a4:07:30:6b:0e:0d:23:34:
                    63:11:8e:d0:6f:18:2b:4a:1b:8b:14:63:eb:35:81:
                    39:35:c0:d4:bd:3f:45:6d:ad:b1:7f:fa:35:2a:29:
                    fd:1b:6c:b6:ea:bd:51:d4:32:1f:19:57:4a:47:5c:
                    cf:3c:84:72:58:f7:dd:04:8e:a4:b7:3f:bc:82:bb:
                    bb:7f:cc:3f:6a:b0:6e:1c:de:26:1a:45:3b:44:69:
                    74:27:0f:96:b2:19:a7:69:03:c1:07:cb:f9:0e:89:
                    5f:ff:5a:17:74:c5:9f:bf:46:5e:9a:1c:95:9b:a1:
                    f4:fe:50:a3:5d:8c:ac:2b:4c:fb:90:d0:47:2e:73:
                    ba:89:fc:42:89:51:50:6a:93:e4:a1:e6:a4:ac:ce:
                    0e:cd:c2:ce:63:98:c1:95:c7:f9:bc:14:12:22:a9:
                    1c:ee:bb:1d:1a:de:cc:78:be:66:2d:7b:37:9f:ac:
                    3f:4d:db:3c:1e:25:43:c8:d7:0c:e3:d2:8e:ec:dc:
                    0a:67:0b:05:83:8a:09:38:3b:66:86:cb:c8:28:bc:
                    24:90:1f:53:0a:a2:e5:58:d1:9b:07:5e:11:d8:2f:
                    70:f2:69:6a:ac:df:b2:23:5b:22:be:ad:49:ee:bb:
                    f3:8c:35:0e:12:9c:3a:a9:fb:79:d8:d4:54:73:92:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5A:87:7A:68:D1:7B:DA:DF:D6:39:71:6B:EC:5F:35:14:5A:27:E1
            X509v3 Authority Key Identifier:
                keyid:9F:4F:79:B0:C3:20:D2:EF:BE:48:AB:CB:FA:96:A8:45:D6:47:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n095sMMg0u--SKvL-paoRdZHlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/50D61BB6713D11ED9FDF3D12C4F9AE02/n095sMMg0u--SKvL-paoRdZHlu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:eb:d5:e9:44:4c:cd:59:b7:be:b6:32:ed:f1:1d:d0:93:
         99:c0:60:40:b0:e5:2c:c3:5f:04:73:ba:16:45:2c:35:f3:96:
         31:5a:ca:3c:91:92:f4:23:0e:2a:92:86:28:8e:da:53:ed:92:
         23:2a:2c:27:52:53:43:54:36:18:b5:08:69:e4:c4:dc:af:c5:
         3d:cd:80:68:bc:47:4b:b6:4e:a0:f0:b6:8b:a7:4a:e0:1b:d4:
         b1:08:8c:bd:97:da:8a:cc:26:95:e8:26:8d:9a:d2:42:95:78:
         25:8b:ad:15:f2:75:ca:5f:ac:65:31:0b:6a:4e:75:24:7d:c3:
         02:eb:2f:92:62:5e:b1:7e:4e:e6:2d:db:5c:1c:26:14:ec:55:
         0b:46:f2:bf:6e:00:07:c6:d6:ce:ff:bb:ce:50:75:7e:3d:92:
         78:15:c7:51:97:42:6c:5e:dd:c3:49:9d:d0:61:2f:12:41:42:
         41:f4:1e:64:b9:cb:bb:64:21:28:44:97:ee:bd:d7:54:02:39:
         40:2d:c4:6c:36:1a:df:72:06:13:bd:f8:1d:cb:0a:cd:8e:5f:
         a3:15:19:8d:80:bb:51:c8:1c:b8:25:63:8b:69:d6:d5:19:07:
         19:07:00:6b:1a:fc:b6:51:ef:47:79:e7:21:e9:7a:2b:db:c2:
         4c:bf:2f:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4QTcxMTAvBgNVBAUTKDlGNEY3OUIwQzMyMEQyRUZCRTQ4QUJDQkZBOTZBODQ1
RDY0Nzk2RUYwHhcNMjQwNTA1MDQzODUwWhcNMjQwNTEyMDQzODUwWjAYMRYwFAYD
VQQDEw02NjM3MGQ1Yi0yNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXaQh8kTpAcwaw4NIzRjEY7QbxgrShuLFGPrNYE5NcDUvT9Fba2xf/o1Kin9
G2y26r1R1DIfGVdKR1zPPIRyWPfdBI6ktz+8gru7f8w/arBuHN4mGkU7RGl0Jw+W
shmnaQPBB8v5Dolf/1oXdMWfv0ZemhyVm6H0/lCjXYysK0z7kNBHLnO6ifxCiVFQ
apPkoeakrM4OzcLOY5jBlcf5vBQSIqkc7rsdGt7MeL5mLXs3n6w/Tds8HiVDyNcM
49KO7NwKZwsFg4oJODtmhsvIKLwkkB9TCqLlWNGbB14R2C9w8mlqrN+yI1sivq1J
7rvzjDUOEpw6qft52NRUc5JkWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFah3po
0Xva39Y5cWvsXzUUWifhMB8GA1UdIwQYMBaAFJ9PebDDINLvvkiry/qWqEXWR5bv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy81MEQ2MUJCNjcx
M0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1LS1TS3ZMLXBhb1JkWkhs
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL24wOTVzTU1nMHUtLVNLdkwtcGFvUmRaSGx1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzhBNy81MEQ2MUJCNjcxM0QxMUVEOUZERjNEMTJDNEY5QUUwMi9uMDk1c01NZzB1
LS1TS3ZMLXBhb1JkWkhsdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzxOvV6URMzVm3vrYy7fEd0JOZwGBAsOUsw18Ec7oWRSw185YxWso8
kZL0Iw4qkoYojtpT7ZIjKiwnUlNDVDYYtQhp5MTcr8U9zYBovEdLtk6g8LaLp0rg
G9SxCIy9l9qKzCaV6CaNmtJClXgli60V8nXKX6xlMQtqTnUkfcMC6y+SYl6xfk7m
LdtcHCYU7FULRvK/bgAHxtbO/7vOUHV+PZJ4FcdRl0JsXt3DSZ3QYS8SQUJB9B5k
ucu7ZCEoRJfuvddUAjlALcRsNhrfcgYTvfgdywrNjl+jFRmNgLtRyBy4JWOLadbV
GQcZBwBrGvy2Ue9Heech6Xor28JMvy/o
-----END CERTIFICATE-----
Generated at Sun May 5 05:30:51 2024 by rpki-client on console-ams.rpki-client.org