Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          VHUDjFrPLBeTyBP8sB4RDKk/u/6+TZTm/Gb19jIU/as=
Subject key identifier:   E3:F9:16:2D:21:47:5A:7C:C8:36:6D:8C:2E:25:0E:BD:FE:97:4D:9D
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          0265
Signing time:             Fri 03 May 2024 04:03:53 +0000
Manifest this update:     Fri 03 May 2024 04:03:52 +0000
Manifest next update:     Fri 10 May 2024 04:03:52 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: 3Z1WbTul2pp0geJS/FsaUpMY290Cl7tlXSIoRJ2JSeA=)
                          2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: SgfmGbt/pVlUZQRnydWSm6SNx69E4NNPlawKjjfJINc=)
                          3: A79DC338E2ED11EC92DF2511C4F9AE02.roa (hash: jWnPlqM2E3SOIYzt5WQ5+wk3HRS9QrsRW7iiYnWEKXc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 04:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: May  3 04:03:52 2024 GMT
            Not After : May 10 04:03:52 2024 GMT
        Subject: CN=66346229-85c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:ec:0b:dc:fa:98:7e:26:67:b0:69:88:d5:
                    e9:63:68:ff:42:a6:b8:cb:9e:b5:79:28:dc:9f:63:
                    f1:10:57:d9:54:87:3e:e3:49:de:5a:c9:e4:78:e5:
                    fa:17:4d:40:83:8e:d2:78:7e:eb:a4:08:57:6e:a2:
                    60:54:28:ed:7e:5f:8e:a3:28:f0:0a:b3:5d:5a:f5:
                    5a:18:0a:dd:28:17:b1:a5:0d:6d:8c:13:46:2b:59:
                    c0:0e:2d:84:16:9e:55:e3:9b:04:dc:26:5f:cc:7a:
                    63:be:ad:62:e3:f5:69:fb:ad:ce:a6:8d:22:72:df:
                    b4:09:47:33:7c:3b:45:b1:d6:a1:ff:58:bc:f1:8c:
                    3e:59:a1:e7:95:fa:cf:35:42:65:69:da:81:4b:93:
                    37:e8:b7:85:4a:bf:80:82:9d:09:3e:ff:3f:ce:4f:
                    10:8b:89:06:cd:ab:0c:f9:9c:e9:4b:02:f9:96:df:
                    98:d3:22:7d:22:00:52:48:0c:e5:bb:be:3c:d7:89:
                    2b:bd:c7:1a:ae:77:90:cf:82:3a:fe:ce:67:43:1b:
                    b1:c4:51:6a:99:c5:33:52:00:5a:10:50:7d:5c:3f:
                    db:07:e1:63:36:d6:ba:41:e0:ce:53:a3:cc:71:d4:
                    ce:34:59:54:46:38:b3:e9:3f:d0:db:4f:fe:d5:9f:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:16:2D:21:47:5A:7C:C8:36:6D:8C:2E:25:0E:BD:FE:97:4D:9D
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:42:eb:39:8a:1d:b9:f3:f5:9f:80:36:e4:5c:50:fd:64:
         bf:5a:c2:91:0e:e3:50:66:e3:66:ea:cd:4f:e4:69:34:4b:17:
         77:ee:73:11:2e:27:fc:8e:d9:63:3d:0f:9b:3f:fd:8f:c5:ae:
         27:d2:a1:36:e4:f1:0e:2b:92:10:36:51:48:b2:ce:43:26:d4:
         79:b4:66:37:13:e0:a6:ec:6e:d4:9f:92:95:57:9f:ae:82:dd:
         86:9f:46:fc:59:2b:a4:c1:1d:d9:02:b5:3d:16:d6:cb:8b:cd:
         6b:2a:3f:b1:08:84:f5:b5:d8:ef:22:60:fc:0e:a4:ac:e9:0d:
         2a:f1:9b:39:e6:3b:25:22:4f:d0:3b:08:89:e0:04:c4:bf:93:
         dd:d5:b5:67:60:46:1b:8b:72:f2:9b:71:cb:e4:dc:b0:5d:28:
         3a:b9:81:22:a6:c0:25:1e:90:71:f0:e2:2c:bd:00:00:88:b2:
         93:c7:ed:e4:3c:8e:7a:12:8b:f4:45:04:1d:c0:49:34:22:04:
         cf:f5:31:81:0b:44:85:e7:9d:d6:41:55:94:c5:12:6e:4e:f6:
         88:51:ab:ba:c2:f6:50:0c:f4:bb:b7:56:ca:ca:34:12:1e:e8:
         53:a9:9f:06:b5:f4:82:75:97:d5:d9:65:37:e6:c9:4b:77:67:
         4c:0b:c7:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3
NEQ2MUNFOEIwHhcNMjQwNTAzMDQwMzUyWhcNMjQwNTEwMDQwMzUyWjAYMRYwFAYD
VQQDEw02NjM0NjIyOS04NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbDsC9z6mH4mZ7BpiNXpY2j/Qqa4y561eSjcn2PxEFfZVIc+40neWsnkeOX6
F01Ag47SeH7rpAhXbqJgVCjtfl+OoyjwCrNdWvVaGArdKBexpQ1tjBNGK1nADi2E
Fp5V45sE3CZfzHpjvq1i4/Vp+63Opo0ict+0CUczfDtFsdah/1i88Yw+WaHnlfrP
NUJladqBS5M36LeFSr+Agp0JPv8/zk8Qi4kGzasM+ZzpSwL5lt+Y0yJ9IgBSSAzl
u74814krvccarneQz4I6/s5nQxuxxFFqmcUzUgBaEFB9XD/bB+FjNta6QeDOU6PM
cdTONFlURjiz6T/Q20/+1Z/hGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP5Fi0h
R1p8yDZtjC4lDr3+l02dMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np
THA4UlNlYkxfdDkwMWh6b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9rELrOYodufP1n4A25FxQ/WS/WsKRDuNQZuNm6s1P5Gk0Sxd37nMR
Lif8jtljPQ+bP/2Pxa4n0qE25PEOK5IQNlFIss5DJtR5tGY3E+Cm7G7Un5KVV5+u
gt2Gn0b8WSukwR3ZArU9FtbLi81rKj+xCIT1tdjvImD8DqSs6Q0q8Zs55jslIk/Q
OwiJ4ATEv5Pd1bVnYEYbi3Lym3HL5NywXSg6uYEipsAlHpBx8OIsvQAAiLKTx+3k
PI56Eov0RQQdwEk0IgTP9TGBC0SF553WQVWUxRJuTvaIUau6wvZQDPS7t1bKyjQS
HuhTqZ8GtfSCdZfV2WU35slLd2dMC8dA
-----END CERTIFICATE-----
Generated at Fri May 3 05:32:36 2024 by rpki-client on console-ams.rpki-client.org