Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          u9kAXZ76CbVUp/TaBtdmO0VV//2qyPltu7QWS3K+lB8=
Subject key identifier:   34:D3:5E:F8:D8:1B:BF:55:9A:68:99:61:7B:4C:27:6C:81:54:31:62
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          0662
Signing time:             Mon 06 May 2024 23:37:09 +0000
Manifest this update:     Mon 06 May 2024 23:37:09 +0000
Manifest next update:     Mon 13 May 2024 23:37:09 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: Pc7Hsbf+6ffeDlgKGxLMz/47IDNccrGwqCQfFlc8qzE=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: +ohKtoCBfIbgFHsK5YXm9GEY/uc//r9I6KtkOSJPqeg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: May  6 23:37:09 2024 GMT
            Not After : May 13 23:37:09 2024 GMT
        Subject: CN=663969a5-3cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:75:be:39:01:c8:1e:20:8b:2b:a5:4f:a4:
                    be:71:e7:54:a7:6c:35:53:dc:79:8e:fc:09:c0:b3:
                    c4:5e:36:28:24:e4:82:b3:83:04:87:b8:25:db:c6:
                    37:fb:93:9a:30:c4:29:9c:24:76:4b:8a:73:5b:bf:
                    af:cf:9a:35:2a:41:2d:88:10:9a:f4:ec:92:9d:85:
                    59:ab:d1:4c:66:57:dd:2c:b5:7b:b9:6e:2d:61:3b:
                    c7:d5:90:a9:52:9d:3e:26:f8:06:8c:2f:a5:08:8e:
                    2d:a0:fd:34:50:c8:28:b9:11:14:99:b9:27:7d:6d:
                    ef:29:66:0f:78:ba:63:1a:1f:ce:5c:4a:0c:26:44:
                    e1:eb:47:bb:e3:3c:12:ec:c2:21:2b:86:f6:af:da:
                    92:2b:f7:4c:6b:1b:c5:85:3c:7f:77:2e:19:15:52:
                    f1:47:d3:55:99:c9:c8:1b:6f:ca:be:4f:d9:39:e8:
                    2a:8d:4c:5e:be:e5:25:ce:da:01:96:4c:4f:c9:48:
                    b1:6e:c8:c6:87:a1:8b:5b:f1:0f:37:f0:ba:44:36:
                    ee:e6:f8:3a:c6:81:3e:82:c7:c4:2f:72:73:34:ab:
                    7b:54:db:0b:9e:78:10:bb:c9:4f:89:cf:84:2b:07:
                    a2:84:a8:e7:c7:9f:20:b8:a8:3e:be:2f:2f:2a:19:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D3:5E:F8:D8:1B:BF:55:9A:68:99:61:7B:4C:27:6C:81:54:31:62
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:6a:22:09:96:ca:8a:30:27:67:4c:cf:58:81:06:10:32:
         79:15:db:ec:e3:1e:f0:a1:3b:09:88:b0:a4:41:f2:80:e9:78:
         a7:37:b1:0e:06:b3:2f:9b:f6:27:6e:8e:e8:7f:76:bf:db:2c:
         81:c8:92:96:e9:a9:1c:b6:67:81:e5:ad:00:c8:b0:9a:c8:3c:
         c3:eb:6e:d5:a5:fe:70:a7:a9:8b:8e:d3:83:4c:ee:b7:ec:8a:
         6c:eb:e8:ef:85:56:23:b1:e0:39:48:63:a2:4f:15:a8:d8:11:
         78:02:50:b2:b0:89:57:ed:c2:9e:96:69:ee:72:05:9c:07:08:
         41:17:c5:d6:4f:47:e1:a9:b5:85:ae:e7:ca:c4:81:b0:75:34:
         04:f0:a2:fe:63:31:a9:a6:2a:93:32:4a:ec:eb:07:2d:51:1e:
         1e:cd:3f:6c:97:ff:05:16:e7:28:ac:e3:a9:8a:67:0a:08:df:
         31:25:df:00:87:37:72:9a:59:1d:c3:3b:71:81:fd:5b:dd:1f:
         82:ad:4e:9d:7c:ff:a3:b4:7b:d7:48:12:fe:e1:84:63:6f:38:
         28:79:6f:47:6d:52:02:2b:f8:b8:9a:43:2b:9f:3c:bd:e9:85:
         5b:88:f8:ae:fd:37:00:ed:52:26:ec:d7:9d:b7:d8:30:e6:53:
         1c:6e:14:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4
NkFDOUE5NjkwHhcNMjQwNTA2MjMzNzA5WhcNMjQwNTEzMjMzNzA5WjAYMRYwFAYD
VQQDEw02NjM5NjlhNS0zY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGd1vjkByB4giyulT6S+cedUp2w1U9x5jvwJwLPEXjYoJOSCs4MEh7gl28Y3
+5OaMMQpnCR2S4pzW7+vz5o1KkEtiBCa9OySnYVZq9FMZlfdLLV7uW4tYTvH1ZCp
Up0+JvgGjC+lCI4toP00UMgouREUmbknfW3vKWYPeLpjGh/OXEoMJkTh60e74zwS
7MIhK4b2r9qSK/dMaxvFhTx/dy4ZFVLxR9NVmcnIG2/Kvk/ZOegqjUxevuUlztoB
lkxPyUixbsjGh6GLW/EPN/C6RDbu5vg6xoE+gsfEL3JzNKt7VNsLnngQu8lPic+E
KweihKjnx58guKg+vi8vKhkWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTTXvjY
G79VmmiZYXtMJ2yBVDFiMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz
QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL
aUNPMThjb2dEbkNHckpxV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiqGoiCZbKijAnZ0zPWIEGEDJ5Fdvs4x7woTsJiLCkQfKA6XinN7EO
BrMvm/Ynbo7of3a/2yyByJKW6akctmeB5a0AyLCayDzD627Vpf5wp6mLjtODTO63
7Ips6+jvhVYjseA5SGOiTxWo2BF4AlCysIlX7cKelmnucgWcBwhBF8XWT0fhqbWF
rufKxIGwdTQE8KL+YzGppiqTMkrs6wctUR4ezT9sl/8FFucorOOpimcKCN8xJd8A
hzdymlkdwztxgf1b3R+CrU6dfP+jtHvXSBL+4YRjbzgoeW9HbVICK/i4mkMrnzy9
6YVbiPiu/TcA7VIm7Nedt9gw5lMcbhRT
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:26 2024 by rpki-client on console-fra.rpki-client.org