Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
File:                     8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json)
Hash identifier:          cmxxMl72who7r4cfZt6rAXzC7qpnge2PTMakmhtEqPI=
Subject key identifier:   82:14:DD:07:EB:0E:F2:AA:AB:68:6E:DC:E1:59:CD:30:17:F1:5B:59
Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07
Certificate issuer:       /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
Manifest number:          0114
Signing time:             Sun 05 May 2024 05:20:41 +0000
Manifest this update:     Sun 05 May 2024 05:20:41 +0000
Manifest next update:     Sun 12 May 2024 05:20:41 +0000
Files and hashes:         1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: by21H4RzHaamoU7ffSy9BZmFG7+F0PxvUIthEmcK7JI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
        Validity
            Not Before: May  5 05:20:41 2024 GMT
            Not After : May 12 05:20:41 2024 GMT
        Subject: CN=66371729-8212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:e3:0e:38:ac:68:d4:97:68:ab:73:5b:a8:
                    7e:ac:20:e2:38:6b:24:a8:a1:86:ea:b2:12:c3:47:
                    1b:17:00:c9:46:26:40:60:5f:41:4c:99:d7:98:2c:
                    a4:9c:e1:9b:c7:98:b5:04:11:39:ef:3c:37:19:f4:
                    06:6c:8b:cf:9e:8f:9b:67:e0:c1:a3:59:e2:87:24:
                    0f:3d:88:76:df:3f:91:2d:2a:be:39:02:b1:52:73:
                    5e:89:00:c0:1e:9c:e7:dc:a6:3b:f8:c5:bb:88:cb:
                    2b:fc:58:4b:72:d6:86:b8:28:2b:ed:ad:52:08:2e:
                    74:46:1c:bc:5d:33:45:32:6e:b7:21:c2:bf:09:39:
                    79:38:6f:06:32:f0:55:27:9b:b3:57:8b:91:99:b0:
                    5f:5e:d0:9b:d2:d0:b1:23:86:9e:4e:98:6e:5b:57:
                    c1:4d:08:54:01:b6:ab:77:bb:9a:b8:42:f4:4c:24:
                    9e:07:6e:b6:8f:ab:78:3c:44:55:42:92:ec:eb:c4:
                    7d:ad:48:95:33:bf:b3:bc:d0:6b:3c:0d:b9:96:03:
                    75:97:8e:f6:aa:6f:f4:54:e6:28:a3:a0:24:a6:87:
                    ad:61:e1:92:3e:84:05:07:40:1a:26:a6:5c:2d:be:
                    b1:c8:f1:88:64:d0:78:b8:03:74:a6:b9:13:d6:40:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:DD:07:EB:0E:F2:AA:AB:68:6E:DC:E1:59:CD:30:17:F1:5B:59
            X509v3 Authority Key Identifier:
                keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:84:23:7a:50:de:ec:65:0d:22:98:27:ea:12:6e:c7:2c:
         de:4d:e5:68:be:bc:74:d3:21:ce:1c:3c:b3:99:19:6c:22:78:
         f3:7d:0d:c4:38:c6:4d:33:83:9c:75:da:1a:7e:56:7d:a3:dd:
         c1:77:aa:69:26:91:6c:3c:15:ee:9a:e5:2a:e4:13:e9:54:65:
         59:94:1e:b6:6a:40:d4:f9:90:e8:95:ce:ef:c0:9d:08:a3:34:
         c2:db:0c:50:5b:ef:db:6a:c8:ae:56:c6:52:dd:35:8d:53:1a:
         06:2d:81:5f:25:f4:93:00:85:b7:85:90:e7:24:68:2d:41:e1:
         fe:ac:19:ee:7b:1b:f7:8a:1c:fb:fe:1c:8f:33:ad:b4:f2:b9:
         b9:e5:51:c9:ed:a9:36:e0:bb:80:3b:aa:8f:8f:3a:5f:34:c0:
         19:b7:68:8d:0a:9b:d8:5c:0c:1c:a6:31:bc:cd:55:7a:a9:ab:
         af:5c:8a:e4:dd:83:ce:12:3d:8e:f1:34:57:b5:2b:00:d1:e3:
         1e:03:81:ff:b9:ca:e0:39:7a:5b:62:d2:c4:43:aa:87:67:dc:
         7a:f6:0f:bc:59:a3:57:d9:6c:42:16:be:5e:36:87:05:e2:23:
         03:66:17:58:c7:f2:e0:ff:c6:8c:d1:77:98:bf:e3:53:ce:7d:
         8c:d3:b7:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2
RkRBNTRCMDcwHhcNMjQwNTA1MDUyMDQxWhcNMjQwNTEyMDUyMDQxWjAYMRYwFAYD
VQQDEw02NjM3MTcyOS04MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhTjDjisaNSXaKtzW6h+rCDiOGskqKGG6rISw0cbFwDJRiZAYF9BTJnXmCyk
nOGbx5i1BBE57zw3GfQGbIvPno+bZ+DBo1nihyQPPYh23z+RLSq+OQKxUnNeiQDA
Hpzn3KY7+MW7iMsr/FhLctaGuCgr7a1SCC50Rhy8XTNFMm63IcK/CTl5OG8GMvBV
J5uzV4uRmbBfXtCb0tCxI4aeTphuW1fBTQhUAbard7uauEL0TCSeB262j6t4PERV
QpLs68R9rUiVM7+zvNBrPA25lgN1l472qm/0VOYoo6AkpoetYeGSPoQFB0AaJqZc
Lb6xyPGIZNB4uAN0prkT1kCxpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIU3Qfr
DvKqq2hu3OFZzTAX8VtZMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx
OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV
Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBC/YQjelDe7GUNIpgn6hJuxyzeTeVovrx00yHOHDyzmRlsInjzfQ3E
OMZNM4OcddoaflZ9o93Bd6ppJpFsPBXumuUq5BPpVGVZlB62akDU+ZDolc7vwJ0I
ozTC2wxQW+/basiuVsZS3TWNUxoGLYFfJfSTAIW3hZDnJGgtQeH+rBnuexv3ihz7
/hyPM6208rm55VHJ7ak24LuAO6qPjzpfNMAZt2iNCpvYXAwcpjG8zVV6qauvXIrk
3YPOEj2O8TRXtSsA0eMeA4H/ucrgOXpbYtLEQ6qHZ9x69g+8WaNX2WxCFr5eNocF
4iMDZhdYx/Lg/8aM0XeYv+NTzn2M07ea
-----END CERTIFICATE-----
Generated at Sun May 5 06:13:37 2024 by rpki-client on console-ams.rpki-client.org