Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          Mj0xflHlZlqD59yqpYlwaemkvI4XV0+RRDL+ZAVvwZc=
Subject key identifier:   56:B7:D4:05:82:A6:33:72:D5:A6:21:44:46:D2:C1:67:69:B7:A0:A3
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          0812
Signing time:             Sat 18 May 2024 21:50:35 +0000
Manifest this update:     Sat 18 May 2024 21:50:35 +0000
Manifest next update:     Sat 25 May 2024 21:50:35 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: W/kdGec8HSHCnvgULkXEwLTqiVfln/f1E3HA5p5aK00=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: gEbDX3RzY8sVep521pF+eIUJFt6lx0Frnr9TN4RvYm4=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: +18yq2xZTw1zNdRNhQgJ06UGJFn1sQJ6NgJ5C0aSZ+I=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: ihnIybuutNiZ7dnnPxU+ehReMyWFFLtfKVrhAOXbBVE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: May 18 21:50:35 2024 GMT
            Not After : May 25 21:50:35 2024 GMT
        Subject: CN=664922ab-3e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:8c:e2:ab:82:c8:a3:27:95:ed:f9:bc:0c:
                    df:9c:8d:11:d6:0c:72:db:2e:4a:cf:14:70:bf:23:
                    67:b1:b2:a8:34:b4:42:15:5b:a6:ad:a1:6c:b6:d0:
                    d7:c6:d9:43:76:74:76:df:ee:55:91:36:c4:8e:c3:
                    f9:44:11:df:bd:5e:43:28:a5:55:b7:5f:3a:df:ea:
                    1e:c0:ab:e4:ae:79:a1:84:e3:39:41:13:45:1c:70:
                    87:5d:e5:0a:bf:a3:45:e5:d1:7f:fe:47:4c:fa:ac:
                    7b:11:26:f0:5f:3c:96:98:4e:c5:b1:c8:82:0e:98:
                    ce:28:2f:b0:53:f1:52:af:8e:0f:86:a3:f0:61:74:
                    eb:28:17:a4:69:ee:a4:40:07:62:1d:15:c2:ed:c8:
                    12:75:33:a6:1b:c4:73:0c:f6:a4:f3:7b:dd:6d:df:
                    d1:60:7d:5d:1c:b5:9f:34:cc:1f:8a:ed:0d:ea:d5:
                    ae:4a:8f:98:6a:a4:af:c6:ce:cd:a4:a0:cc:8d:c7:
                    b0:4d:41:fd:55:99:51:9c:64:8f:18:11:b8:f4:b8:
                    38:27:bc:f7:5c:20:c1:df:1f:29:e1:dd:cc:ba:4c:
                    d6:e4:9d:de:c2:5c:2e:7d:2e:91:c0:60:e0:c0:08:
                    dc:35:f5:33:3f:3d:df:19:03:0b:6e:38:a5:c1:69:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B7:D4:05:82:A6:33:72:D5:A6:21:44:46:D2:C1:67:69:B7:A0:A3
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:87:96:34:16:c6:ad:3d:d0:5c:af:b6:61:77:7c:7c:9a:
         c0:34:2c:55:90:fc:4c:29:12:07:b2:07:33:59:02:7f:f2:0f:
         2c:ca:00:54:76:50:b3:24:c0:d9:45:c5:1a:29:36:c6:2b:06:
         db:c6:83:5f:59:93:cf:31:0e:13:4c:7b:bf:38:f6:ab:1d:bb:
         78:d9:85:99:e1:92:81:8d:97:13:e8:48:d5:bc:a2:56:9b:60:
         5a:2c:48:6c:64:e5:c3:5a:55:b6:49:4a:8c:21:81:d0:93:02:
         35:60:28:92:0e:7e:e2:e9:ff:bd:55:0b:4f:e4:05:f5:e2:46:
         7e:ab:4c:95:78:c6:6b:c3:23:51:7d:43:b5:b4:d4:24:ce:02:
         fd:f7:0e:4f:5e:de:93:8f:a8:ca:b4:9c:a5:94:1a:54:5e:d3:
         95:ce:2f:6c:3f:5e:9a:f2:47:ea:71:0b:dc:ec:56:7a:22:4d:
         31:f6:11:0e:31:45:db:db:12:64:38:fc:01:7d:e8:9f:79:b0:
         13:9a:0c:bb:60:e1:57:f9:bc:14:58:fa:0b:02:17:68:89:00:
         18:91:0d:fb:cb:7a:5d:14:67:bf:23:8e:b1:3e:76:01:eb:ab:
         cb:da:fa:48:e8:14:e9:77:d3:56:31:0e:2c:31:2b:d2:75:44:
         61:71:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org