Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
File:                     Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json)
Hash identifier:          LyYpPaKKavbODy1MTz0FfZN8u1iCP04OnBH+lE6LHxE=
Subject key identifier:   AD:6C:C7:89:D9:04:37:71:CE:CF:86:88:63:1D:60:C4:BA:8C:5E:A7
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Certificate issuer:       /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial:       0BED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
Manifest number:          0BBB
Signing time:             Fri 31 May 2024 20:02:28 +0000
Manifest this update:     Fri 31 May 2024 20:02:28 +0000
Manifest next update:     Fri 07 Jun 2024 20:02:28 +0000
Files and hashes:         1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: CwP8q25vTKZilmJywjokG2tT332iOk9g32ldFkgGE64=)
                          2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: /GknOelDIGsOfVA5prSm5KZ1UJQ7GqbrCT0cnToz+2g=)
                          3: 10F4726C368711EE86778E65C4F9AE02.roa (hash: xFuZAslfvvvB6Kty6Y5FjYu5lz+E1X4gf6jyyfPXAQU=)
                          4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: 0OHkdOYwWuHEae6hLLfEVYlgXJ3hl5nkCEg2iieXkpI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
        Validity
            Not Before: May 31 20:02:28 2024 GMT
            Not After : Jun  7 20:02:28 2024 GMT
        Subject: CN=665a2cd4-d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:4e:c6:3d:33:72:1d:0e:bd:02:49:54:8a:
                    e4:a5:d5:f1:0d:00:c2:e2:df:8d:e8:bb:93:37:ef:
                    f9:12:81:dc:59:85:5d:47:e5:7f:bb:05:95:73:a9:
                    02:92:30:c0:ee:a3:21:49:cc:a9:95:75:14:28:c1:
                    b8:e7:c6:74:87:ff:25:f3:b4:f9:b3:e0:0b:f9:69:
                    12:c4:67:78:32:b6:4b:29:5d:1a:f3:62:35:ac:cd:
                    5b:0f:f9:64:bc:f5:21:3f:ff:b1:d0:d7:8d:76:f6:
                    36:60:e0:ed:72:da:cd:66:22:53:fa:8a:c2:cb:8b:
                    49:fb:73:95:74:a6:99:07:c4:d3:d2:09:17:06:cb:
                    47:f3:93:21:61:f2:58:9d:be:a6:1d:21:a0:41:d5:
                    60:72:c5:99:d9:85:0d:99:f4:77:6f:2d:98:a0:1d:
                    61:b8:ed:23:a0:e7:2e:9e:2c:7d:be:90:2d:3e:78:
                    a2:0d:46:e2:5e:01:fa:ae:db:09:99:d4:ad:ec:22:
                    bc:91:0b:09:a8:94:f7:f0:c6:f4:f2:46:3e:01:3f:
                    08:10:9f:ab:6d:93:7d:db:d6:c2:88:11:b6:62:7b:
                    2b:cd:c5:3b:4d:52:49:6f:dc:49:f4:d2:c5:2f:b8:
                    4c:7b:ce:b9:8e:9c:a5:4e:6f:83:bd:b8:83:8f:d3:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6C:C7:89:D9:04:37:71:CE:CF:86:88:63:1D:60:C4:BA:8C:5E:A7
            X509v3 Authority Key Identifier:
                keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:35:76:4a:1e:8e:c2:13:36:d2:fd:f9:d4:62:d4:9c:2c:
         20:28:60:7b:b9:e6:d2:05:6d:29:f2:78:22:75:b3:55:91:9f:
         96:d3:f9:ae:48:cf:da:2c:81:01:0a:69:4b:95:ec:14:7f:cd:
         d8:79:ac:50:73:66:f7:20:b3:5c:2e:d6:7f:6d:83:e9:ea:59:
         b5:87:46:64:10:6c:be:7b:be:29:02:4b:e4:3b:1c:41:32:50:
         2c:fa:03:10:76:d3:42:80:e3:66:2a:fc:10:f5:ff:08:74:6c:
         8a:42:a2:68:e0:02:72:74:3f:34:73:61:88:57:3f:f7:af:43:
         22:a8:70:fc:e4:1a:ff:66:53:13:2c:6b:f0:01:2a:ac:16:54:
         05:51:3f:0b:ab:1d:4c:60:d0:9f:29:fb:ef:9c:32:e6:64:20:
         f9:89:34:85:eb:10:57:19:11:97:26:b1:d2:47:64:e4:3d:53:
         d6:b0:b9:66:07:ce:be:57:c4:7a:33:11:97:76:89:78:97:0f:
         20:6f:59:4c:43:4d:4a:54:07:77:fc:b5:09:15:a6:26:8a:e2:
         b2:60:b3:81:9f:73:da:1b:02:ee:d8:f8:82:21:b3:45:cb:9d:
         96:3a:c7:11:30:e3:cd:05:2e:91:52:36:cd:d4:82:18:1f:bc:
         79:12:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:27 2024 by rpki-client on console-ams.rpki-client.org