Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
File:                     130F57124A8921F00083A228FEBE2B78373015E3.mft (raw, json)
Hash identifier:          KB+wg4Y6d5DC0aH2pTTVCEcpjTuD3gNjf17zL63tgFo=
Subject key identifier:   28:3E:D2:AF:A7:21:32:60:B8:DD:2B:4B:7B:BA:9A:1A:40:41:0B:7B
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       2E23800C5035EFC8F8594F5A8AF761E7098CB7EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
Manifest number:          CB
Signing time:             Tue 14 May 2024 23:22:51 +0000
Manifest this update:     Tue 14 May 2024 23:17:51 +0000
Manifest next update:     Thu 16 May 2024 02:30:51 +0000
Files and hashes:         1: 3130332e34392e34312e302f32342d3234203d3e20323036313530.roa (hash: xaNH/rPLz8DN/CCQywOGQqW+JYkn0mMbcUzrLsXjocY=)
                          2: 3130332e34392e34322e302f32342d3234203d3e203230343733.roa (hash: HGKDj3rQnp5EOXE26UHhh9HgiC921vZpFKzbpn1KsmU=)
                          3: 3130332e34392e34302e302f32342d3234203d3e203630373831.roa (hash: 5x0PESxgsU2fyNXBtLbl3ofnoMKnashULR0dafxPv+Y=)
                          4: 3130332e34392e34332e302f32342d3234203d3e20383334.roa (hash: wLKOf6b+Tq8kG6f6p6KIV/MBe2YDc6UiXHLukzm4qFY=)
                          5: 130F57124A8921F00083A228FEBE2B78373015E3.crl (hash: EZXViFg6JO9PPNHcB3iarOtCR0/22clEF5O+a+k0yPQ=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 May 2024 02:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:23:80:0c:50:35:ef:c8:f8:59:4f:5a:8a:f7:61:e7:09:8c:b7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: May 14 23:17:51 2024 GMT
            Not After : May 16 02:30:51 2024 GMT
        Subject: CN=283ED2AFA7213260B8DD2B4B7BBA9A1A40410B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:e0:d3:f4:36:a5:50:ae:54:d4:76:b2:aa:
                    46:43:5d:20:ea:b4:d0:1f:eb:c5:5e:13:6f:0c:25:
                    b9:c5:6e:e4:6a:34:24:d7:75:be:1d:7c:3f:4b:02:
                    81:8f:b3:18:de:f8:ca:e3:c9:c8:f1:67:de:61:d2:
                    52:08:ca:56:74:44:5c:77:a4:d0:1d:6b:db:37:c3:
                    d2:d5:bd:75:4f:ae:64:fc:f0:ab:b3:f5:f8:7c:f0:
                    27:be:3e:a5:4b:24:96:d7:c0:eb:93:51:22:59:3e:
                    ae:27:87:74:ff:b2:b0:a1:20:a1:ef:25:bc:42:fd:
                    e6:b2:60:98:1f:e8:a6:ad:0d:ef:07:f7:e9:91:b4:
                    83:23:34:29:0e:c0:df:8f:1e:e6:99:55:0e:8e:7e:
                    f9:e0:74:c3:dc:bd:f2:62:54:68:53:f2:a9:f5:26:
                    e1:d3:06:81:e0:69:77:c2:e0:5e:d4:5f:30:70:8b:
                    83:26:77:c7:b0:8c:69:70:87:8e:37:50:00:50:b2:
                    f1:65:87:b2:b4:cd:2a:81:93:33:da:50:1e:a0:28:
                    d5:82:42:c0:0b:67:e0:4d:a4:ac:89:d0:ec:bf:6a:
                    c2:3e:77:05:28:c1:5f:cd:30:c7:e3:15:85:12:6c:
                    4f:38:38:5f:f5:28:37:3c:2a:59:57:6c:72:0e:fa:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3E:D2:AF:A7:21:32:60:B8:DD:2B:4B:7B:BA:9A:1A:40:41:0B:7B
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2f:77:e7:15:f0:59:bf:fd:a8:fe:c5:6b:be:1a:a7:c6:c8:
         c4:b7:43:4b:24:bd:58:22:78:f1:42:f3:d2:54:f2:a1:be:b8:
         04:35:de:92:e5:eb:2a:05:e9:4d:57:4a:61:2d:ed:8d:3e:ed:
         30:d4:2d:7c:75:75:21:94:a1:a1:44:07:b8:39:e1:af:56:59:
         f3:e6:ac:7f:00:4e:45:ac:d1:9d:02:64:08:93:b1:ee:89:12:
         6a:4f:03:be:0e:24:aa:72:4a:e9:ee:ba:29:5f:67:27:3e:f3:
         15:19:e8:7d:5a:b3:6d:97:df:ad:ae:dd:b0:7b:e1:7f:7d:50:
         69:2e:28:ef:0a:8f:bf:e6:49:a8:8c:e1:4f:b0:c8:e6:88:df:
         f1:5e:d5:1f:02:62:0b:18:f0:b6:a1:1d:f0:c4:c5:2e:f4:57:
         70:66:2f:95:78:ac:46:5b:06:36:ae:24:cc:b6:ae:94:53:03:
         0b:b9:63:e2:6c:32:db:f6:59:00:41:07:ac:5a:5a:84:45:6a:
         cf:9d:75:a2:37:5e:99:e1:50:17:a5:33:1b:b8:36:1d:25:20:
         28:95:b2:c5:a8:e9:23:33:4e:15:d5:c5:ba:d7:b7:a4:29:d0:
         a6:d4:12:6f:ad:55:25:b5:7a:83:53:27:7f:9a:a2:b3:fc:e1:
         f9:6b:ae:06
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULiOADFA178j4WU9aivdh5wmMt+swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjdFRUIwMDAwMTEwLwYDVQQFEygxMzBGNTcxMjRB
ODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzMB4XDTI0MDUxNDIzMTc1MVoX
DTI0MDUxNjAyMzA1MVowMzExMC8GA1UEAxMoMjgzRUQyQUZBNzIxMzI2MEI4REQy
QjRCN0JCQTlBMUE0MDQxMEI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANrk4NP0NqVQrlTUdrKqRkNdIOq00B/rxV4TbwwlucVu5Go0JNd1vh18P0sC
gY+zGN74yuPJyPFn3mHSUgjKVnREXHek0B1r2zfD0tW9dU+uZPzwq7P1+HzwJ74+
pUskltfA65NRIlk+rieHdP+ysKEgoe8lvEL95rJgmB/opq0N7wf36ZG0gyM0KQ7A
348e5plVDo5++eB0w9y98mJUaFPyqfUm4dMGgeBpd8LgXtRfMHCLgyZ3x7CMaXCH
jjdQAFCy8WWHsrTNKoGTM9pQHqAo1YJCwAtn4E2krInQ7L9qwj53BSjBX80wx+MV
hRJsTzg4X/UoNzwqWVdscg760uMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQoPtKv
pyEyYLjdK0t7upoaQEELezAfBgNVHSMEGDAWgBQTD1cSSokh8ACDoij+vit4NzAV
4zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VFQjAwMDAvMC8xMzBGNTcx
MjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUzLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FdzlYRWtxSklm
QUFnNklvX3I0cmVEY3dGZU0uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEyN0VF
QjAwMDAvMC8xMzBGNTcxMjRBODkyMUYwMDA4M0EyMjhGRUJFMkI3ODM3MzAxNUUz
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAry935xXwWb/9qP7Fa74ap8bIxLdDSyS9WCJ48ULz0lTyob64
BDXekuXrKgXpTVdKYS3tjT7tMNQtfHV1IZShoUQHuDnhr1ZZ8+asfwBORazRnQJk
CJOx7okSak8Dvg4kqnJK6e66KV9nJz7zFRnofVqzbZffra7dsHvhf31QaS4o7wqP
v+ZJqIzhT7DI5ojf8V7VHwJiCxjwtqEd8MTFLvRXcGYvlXisRlsGNq4kzLaulFMD
C7lj4mwy2/ZZAEEHrFpahEVqz511ojdemeFQF6UzG7g2HSUgKJWyxajpIzNOFdXF
ute3pCnQptQSb61VJbV6g1Mnf5qis/zh+WuuBg==
-----END CERTIFICATE-----
Generated at Wed May 15 01:43:30 2024 by rpki-client on console-fra.rpki-client.org