Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
File:                     RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json)
Hash identifier:          ad8luB/mMrzAzqVF3/2rUVCLw7BctbVQvR7Kg20rdec=
Subject key identifier:   D0:3F:9F:AC:51:85:22:84:81:31:EB:38:68:99:B1:C9:C8:DC:FF:43
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Certificate issuer:       /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial:       0AAB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
Manifest number:          0A91
Signing time:             Sat 18 May 2024 20:16:36 +0000
Manifest this update:     Sat 18 May 2024 20:16:35 +0000
Manifest next update:     Sat 25 May 2024 20:16:35 +0000
Files and hashes:         1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 7CnkAQ7OL/EA+pujYq83SqYVX+gP16MyBXVuQylArUo=)
                          2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: HsUFhnyNSyJhti2UoaZI6KVexsqtQUo3nTuJz6oOW4Q=)
                          3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: 6biR6MQ0JUDTuMdhFEHjNfr8X+saMuO1Yl6P4/jh0zs=)
                          4: 3C726724C06211EC93514712C4F9AE02.roa (hash: KMcvzUrwYvv7qojBnwefCUmBg96+35aVlS8PqzGenGg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2731 (0xaab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
        Validity
            Not Before: May 18 20:16:35 2024 GMT
            Not After : May 25 20:16:35 2024 GMT
        Subject: CN=66490ca4-eb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:05:a3:ea:c0:6c:01:25:94:0f:b3:25:98:
                    b2:b0:f3:db:80:e5:d1:ff:68:88:21:ec:35:b4:dc:
                    f9:f0:90:89:77:e3:2e:14:3d:9d:50:f9:57:62:da:
                    eb:c9:b6:f7:d1:7b:b1:4e:2a:42:4f:0a:8a:5c:64:
                    35:5b:f8:e7:72:d0:5d:ea:7f:93:1d:29:54:7b:fe:
                    00:1d:db:01:6f:80:c0:a2:cc:0b:87:2c:af:2b:62:
                    d5:c3:41:eb:ec:d1:63:67:7e:78:93:d5:ae:c6:1e:
                    42:08:4c:aa:b6:5f:c1:52:1a:f7:df:bd:70:59:af:
                    91:03:71:9f:38:3d:d6:79:6f:0e:a2:88:5e:dd:39:
                    14:e3:c6:46:05:f4:fb:10:10:a4:d6:a4:42:87:7a:
                    61:b6:c4:e0:52:2b:f8:9c:9b:65:74:30:d6:d3:ff:
                    1b:73:1c:40:c6:10:94:3a:b0:b8:14:15:25:93:e7:
                    3c:19:34:24:a3:1e:e0:c3:36:01:fb:f0:2a:96:05:
                    b3:c5:07:38:ae:6e:cf:2f:28:71:fd:56:47:bf:55:
                    b1:a5:7f:54:70:85:14:e9:52:67:8b:d4:44:59:21:
                    8c:c9:32:09:55:4a:93:79:f8:76:bd:51:b5:8c:cf:
                    5c:c7:9c:b8:56:73:c1:6c:61:ad:50:12:7b:e7:6b:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:9F:AC:51:85:22:84:81:31:EB:38:68:99:B1:C9:C8:DC:FF:43
            X509v3 Authority Key Identifier:
                keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:91:6c:3d:14:86:eb:5f:17:54:0f:c0:f0:fb:ec:65:1a:
         86:32:c5:a1:ae:52:4e:28:ca:5b:57:20:24:5e:90:b9:ad:0f:
         43:2c:67:4c:21:7b:d9:28:7e:c0:64:b2:57:84:7d:53:c3:0e:
         fa:43:d6:82:d2:2a:6f:cd:24:84:d1:3a:b9:11:7b:54:95:a7:
         4b:86:94:6c:cc:f0:e3:7d:0e:8b:71:0f:bd:9e:33:ae:61:72:
         f0:2a:3e:a1:28:74:8c:c8:94:34:60:5c:fc:27:ca:f9:3d:1a:
         72:70:1f:b6:03:de:55:b9:9e:a5:b9:bb:88:90:da:26:e8:ff:
         66:b7:7a:99:03:44:b1:25:3a:d3:f7:4c:40:42:aa:b3:34:f2:
         45:2e:5f:4d:ae:bb:cc:3e:fd:22:5e:63:a3:03:99:29:01:2f:
         ad:b9:49:23:76:71:e2:76:24:8e:74:37:ee:0d:ad:07:49:47:
         02:6f:62:f9:b4:fc:19:53:c4:e2:e4:f8:5c:7f:be:ae:f9:19:
         5b:08:c7:d6:78:09:57:c0:58:5b:63:33:0b:d5:3e:85:2b:f7:
         11:00:1d:66:e5:ac:07:61:ab:fb:54:a7:be:87:d9:fb:5e:ec:
         ea:0f:7e:d8:7a:31:cb:ea:d8:90:38:8d:4e:04:39:56:b7:bc:
         39:50:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org