Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          Hegucuqo3L7QNdXpLganW9tZ05b1jJoA0r6kwkt89WA=
Subject key identifier:   79:00:AA:8F:FE:06:3C:1F:88:83:93:B9:79:D6:5D:91:E4:D7:35:49
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          D3
Signing time:             Wed 01 May 2024 06:26:54 +0000
Manifest this update:     Wed 01 May 2024 06:26:53 +0000
Manifest next update:     Wed 08 May 2024 06:26:53 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: J7Zo+L8ANQJ7iCXh4cndNWz4AaOl4skgiKfPb+PTZL8=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: 40grfM9Blc8mWrQHxfsLKS/1IkrQAzi1kEJy1AiE/G4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: May  1 06:26:53 2024 GMT
            Not After : May  8 06:26:53 2024 GMT
        Subject: CN=6631e0ae-6063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:d8:2f:fb:db:ae:cc:bd:34:ec:ab:29:06:
                    ab:b3:f4:81:09:6c:10:2e:f3:dd:bd:b4:f7:36:3b:
                    0f:7c:dc:d2:c7:c5:4d:1d:31:88:06:0b:5e:22:58:
                    64:c2:23:1b:80:f3:34:77:1f:ca:c8:b8:a2:b8:41:
                    86:aa:aa:0f:f3:1b:15:02:df:9a:92:fb:c0:f7:2f:
                    14:96:3a:80:09:b9:d1:33:24:43:a5:8b:31:f6:99:
                    5c:60:2c:37:de:67:e6:ad:f1:00:dc:ab:1d:8d:8f:
                    0d:44:98:a9:5f:69:de:f0:73:83:f7:9b:b2:f7:65:
                    ce:66:15:4c:2f:0d:d5:6e:15:79:fd:19:a2:d6:45:
                    08:a4:c6:a6:b9:af:7b:56:02:1b:c1:54:f1:5b:96:
                    0e:f5:e4:45:3c:e3:7a:c7:c4:68:8f:2c:d6:23:52:
                    33:be:f8:7f:e1:15:c5:c9:80:92:8d:b9:01:1e:a6:
                    98:d3:0a:6e:28:6a:5f:ef:9c:90:98:5b:28:66:fb:
                    b4:f4:5a:67:4c:09:30:11:14:f5:8b:cd:d9:00:85:
                    2f:a4:dc:33:e6:7f:dd:86:c0:bf:fd:5b:04:e6:fa:
                    fb:a4:5a:22:c7:db:06:8d:64:eb:c4:52:f1:0d:43:
                    86:a3:39:d0:7d:d3:b4:e1:85:4e:4e:fe:5c:22:09:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:AA:8F:FE:06:3C:1F:88:83:93:B9:79:D6:5D:91:E4:D7:35:49
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:45:67:68:fe:ba:9a:f2:f4:24:bb:2f:4b:ff:0d:8a:c9:
         8c:7b:c7:ea:9b:37:89:c8:0d:71:64:9a:ba:43:af:cd:2b:55:
         8e:58:5c:8b:72:be:d5:d6:ef:bd:dc:fe:61:e0:4b:8e:9a:1c:
         2d:f9:f8:93:97:a3:5a:7c:d0:2a:87:70:da:75:32:21:f6:fc:
         9c:9e:08:db:c2:4c:d6:5f:58:83:71:59:d0:ca:97:43:e6:d4:
         fb:c7:d1:14:6b:bd:63:68:df:75:e4:ed:89:79:b8:62:34:85:
         05:eb:ca:df:f3:d8:90:c3:a9:0e:2d:90:e0:c0:9c:ed:69:17:
         95:44:60:62:7c:95:f5:4e:03:b6:b7:c0:b0:6a:77:8b:76:00:
         ab:f6:07:67:32:25:fd:73:4f:67:d6:ad:41:30:cb:46:26:b1:
         38:7b:7c:01:86:a3:ee:5c:e0:1c:6d:b2:91:0e:46:de:b6:e2:
         72:17:f7:3a:83:92:b2:cc:bb:78:d4:e4:26:55:4f:04:0c:9b:
         e2:1c:ce:06:cf:02:ed:40:55:ac:08:12:c6:18:25:9b:58:f8:
         f4:5f:ca:7d:b2:1b:8a:5c:a6:03:78:bf:56:97:ee:22:94:9f:
         ad:e5:e2:60:a4:3c:82:8d:89:94:19:b7:2a:9b:dc:00:51:f1:
         6c:19:5c:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB
RkIyREY3RTIwHhcNMjQwNTAxMDYyNjUzWhcNMjQwNTA4MDYyNjUzWjAYMRYwFAYD
VQQDEw02NjMxZTBhZS02MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9iHYL/vbrsy9NOyrKQars/SBCWwQLvPdvbT3NjsPfNzSx8VNHTGIBgteIlhk
wiMbgPM0dx/KyLiiuEGGqqoP8xsVAt+akvvA9y8UljqACbnRMyRDpYsx9plcYCw3
3mfmrfEA3KsdjY8NRJipX2ne8HOD95uy92XOZhVMLw3VbhV5/Rmi1kUIpMamua97
VgIbwVTxW5YO9eRFPON6x8RojyzWI1Izvvh/4RXFyYCSjbkBHqaY0wpuKGpf75yQ
mFsoZvu09FpnTAkwERT1i83ZAIUvpNwz5n/dhsC//VsE5vr7pFoix9sGjWTrxFLx
DUOGoznQfdO04YVOTv5cIgnb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkAqo/+
BjwfiIOTuXnWXZHk1zVJMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5
RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1
X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYm0VnaP66mvL0JLsvS/8NismMe8fqmzeJyA1xZJq6Q6/NK1WOWFyL
cr7V1u+93P5h4EuOmhwt+fiTl6NafNAqh3DadTIh9vycngjbwkzWX1iDcVnQypdD
5tT7x9EUa71jaN915O2JebhiNIUF68rf89iQw6kOLZDgwJztaReVRGBifJX1TgO2
t8CwaneLdgCr9gdnMiX9c09n1q1BMMtGJrE4e3wBhqPuXOAcbbKRDkbetuJyF/c6
g5KyzLt41OQmVU8EDJviHM4GzwLtQFWsCBLGGCWbWPj0X8p9shuKXKYDeL9Wl+4i
lJ+t5eJgpDyCjYmUGbcqm9wAUfFsGVwq
-----END CERTIFICATE-----
Generated at Wed May 1 07:23:57 2024 by rpki-client on console-ams.rpki-client.org