Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
File:                     MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json)
Hash identifier:          y40wXPoRXMG1ie2zpSK9PWITVbO73CGSlE9vz49eqFU=
Subject key identifier:   8F:89:D7:9B:AC:03:00:DA:72:39:16:CB:CB:CF:A4:B9:B1:2D:9A:CA
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       20BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
Manifest number:          2089
Signing time:             Tue 30 Apr 2024 16:22:43 +0000
Manifest this update:     Tue 30 Apr 2024 16:22:42 +0000
Manifest next update:     Tue 07 May 2024 16:22:42 +0000
Files and hashes:         1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: jla2DdrX77oPONznIjE2jZGrkUz+kLUzIMFojTtm1PM=)
                          2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: I2AlxmTEBuIHAg8bac6cSbrq6hoKAxDFlmKRzhA6xaQ=)
                          3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: EAxI4bIjo+n7PFiXYMqFRV1/PYnj3hlObSSzRKPltIQ=)
                          4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: e1GtORbGDyMi9GQOzcE3G6abQAHbSkazabGDuD7dblo=)
                          5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: QO0lBE10VkgS5pMTIyd7pon5/O4mOXcrEKsINPbSpms=)
                          6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: hxT4JDBpuunVFHdSGvo3YdsVEOqz40mBmruQafYHgWA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8380 (0x20bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Apr 30 16:22:42 2024 GMT
            Not After : May  7 16:22:42 2024 GMT
        Subject: CN=66311ad3-e3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:62:8f:67:e4:70:ce:48:97:57:3e:7d:16:
                    d0:8c:46:48:a3:5d:2d:f4:12:fb:2d:2d:8b:eb:02:
                    c3:d6:c2:b1:10:d1:a1:32:42:d7:0d:bc:f3:91:ac:
                    5d:b8:af:48:e1:3d:a1:39:11:20:aa:20:9f:50:8b:
                    1a:ef:ac:05:e5:af:46:1d:29:0f:a2:c1:86:ed:d1:
                    99:96:5b:bc:32:cb:b3:41:27:20:11:39:e5:83:b1:
                    ad:fc:5c:59:44:de:87:1c:99:f4:32:d5:07:aa:ef:
                    28:db:b8:74:2b:ea:66:23:b4:ab:1e:af:2d:a7:42:
                    16:4e:fa:2e:c0:38:82:72:fa:5c:55:e0:fa:e3:77:
                    be:ce:42:44:9d:17:e5:0b:bb:24:3c:ea:29:3f:ba:
                    77:ff:7e:c7:12:e3:7c:8f:bc:a8:27:36:3b:cc:88:
                    ff:31:1a:70:c3:e7:2e:44:cf:77:af:25:b7:af:68:
                    4c:cd:18:dc:d2:36:d8:5f:48:f5:aa:de:63:11:20:
                    d5:f8:ea:0b:54:e0:96:5e:d5:48:88:0f:f6:28:55:
                    dd:fc:f9:a1:e1:94:dc:70:64:e2:9e:d8:f7:be:70:
                    84:b9:81:96:d5:e3:02:1d:d9:fe:cc:e3:b6:8a:d5:
                    4b:84:84:84:16:20:cc:89:b7:e2:fb:2c:4e:9b:e4:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:D7:9B:AC:03:00:DA:72:39:16:CB:CB:CF:A4:B9:B1:2D:9A:CA
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:36:8f:1c:a6:47:c8:a8:61:ac:65:15:8f:5d:be:5f:3e:9d:
         6b:61:fa:ab:9c:bd:a6:c6:68:c7:7d:d5:ee:9b:4b:52:92:89:
         71:1c:ff:38:af:02:b8:5d:28:a5:a7:92:a7:f4:7d:bc:fe:68:
         b0:99:13:fe:ef:99:09:c3:6a:91:cb:5a:1a:9e:38:f4:6e:96:
         c2:2d:bb:01:8a:73:7a:e4:29:16:67:9e:93:49:72:36:72:56:
         b3:75:59:b7:af:1d:3d:00:b1:d0:77:ca:23:8a:75:60:0e:c1:
         4c:d9:89:e8:a6:88:85:70:3a:a0:31:12:63:16:3a:17:56:86:
         dd:e5:07:ad:24:b9:10:9e:a0:3a:82:77:d6:8a:f9:c5:9e:0c:
         c2:a4:21:15:e9:a7:64:dc:e9:35:9a:e4:bc:d8:ed:22:d5:2d:
         5c:4e:aa:33:a3:9e:7f:b2:25:61:45:af:47:5e:14:d5:b5:ec:
         30:a2:45:7d:2e:8d:68:c4:3c:5a:15:81:65:c4:f9:85:3c:46:
         c3:ae:c4:d3:b0:59:a2:75:83:36:45:6b:e8:3d:52:e2:ce:89:
         60:22:2e:41:66:58:a3:c9:f0:19:c8:88:02:a7:38:74:b8:15:
         cc:fe:cd:9f:92:ef:e4:34:ce:ab:98:52:48:e9:36:49:bc:cb:
         17:97:4d:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICILwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5
NzUzQkRCQ0UwHhcNMjQwNDMwMTYyMjQyWhcNMjQwNTA3MTYyMjQyWjAYMRYwFAYD
VQQDEw02NjMxMWFkMy1lM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2nVij2fkcM5Il1c+fRbQjEZIo10t9BL7LS2L6wLD1sKxENGhMkLXDbzzkaxd
uK9I4T2hOREgqiCfUIsa76wF5a9GHSkPosGG7dGZllu8MsuzQScgETnlg7Gt/FxZ
RN6HHJn0MtUHqu8o27h0K+pmI7SrHq8tp0IWTvouwDiCcvpcVeD643e+zkJEnRfl
C7skPOopP7p3/37HEuN8j7yoJzY7zIj/MRpww+cuRM93ryW3r2hMzRjc0jbYX0j1
qt5jESDV+OoLVOCWXtVIiA/2KFXd/Pmh4ZTccGTintj3vnCEuYGW1eMCHdn+zOO2
itVLhISEFiDMibfi+yxOm+SYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+J15us
AwDacjkWy8vPpLmxLZrKMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5
OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB
SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATNo8cpkfIqGGsZRWPXb5fPp1rYfqrnL2mxmjHfdXum0tSkolxHP84
rwK4XSilp5Kn9H28/miwmRP+75kJw2qRy1oanjj0bpbCLbsBinN65CkWZ56TSXI2
clazdVm3rx09ALHQd8ojinVgDsFM2YnopoiFcDqgMRJjFjoXVobd5QetJLkQnqA6
gnfWivnFngzCpCEV6adk3Ok1muS82O0i1S1cTqozo55/siVhRa9HXhTVtewwokV9
Lo1oxDxaFYFlxPmFPEbDrsTTsFmidYM2RWvoPVLizolgIi5BZlijyfAZyIgCpzh0
uBXM/s2fku/kNM6rmFJI6TZJvMsXl03v
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:22:46 2024 by rpki-client on console-ams.rpki-client.org