Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File:                     p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier:          S6+YZckgfIGARvly+c2QGFNh4CNEZu1J0ofThWTCSGA=
Subject key identifier:   80:DA:F8:7B:80:50:BF:9C:9F:9C:34:29:8B:D9:75:BE:FB:F5:D1:00
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer:       /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial:       1D0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number:          1D06
Signing time:             Fri 31 May 2024 16:42:13 +0000
Manifest this update:     Fri 31 May 2024 16:42:13 +0000
Manifest next update:     Fri 07 Jun 2024 16:42:13 +0000
Files and hashes:         1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: HNGFY42OsBzd+9y6uE6lT6VP0Vb46yQbSQZrXW8ZlXo=)
                          2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: vXP4jKoUAOc2qrnaEmUGViJDNj4Qv7pqxjaT1Vkbt9k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
                          rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7438 (0x1d0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
        Validity
            Not Before: May 31 16:42:13 2024 GMT
            Not After : Jun  7 16:42:13 2024 GMT
        Subject: CN=6659fde5-3292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:8d:48:c7:f9:4c:07:79:b5:6a:74:c2:c6:
                    d7:15:36:2a:e9:24:a0:7c:0b:b6:0d:0d:ca:6b:cc:
                    89:aa:47:ef:9e:c6:10:74:f5:e9:0d:eb:94:41:c1:
                    34:fb:b5:df:00:54:46:6c:56:bf:b0:e9:c9:48:0c:
                    d1:23:a5:b5:ad:43:34:e9:d4:8a:69:cc:7a:a2:8d:
                    c7:0f:a6:bd:15:35:be:79:aa:fd:66:bc:9a:3a:e7:
                    e7:df:13:62:7f:bc:59:c0:53:ac:21:81:6a:19:21:
                    39:bb:2e:98:cd:a3:2b:76:b3:01:61:42:49:bc:39:
                    1c:ad:07:10:f6:90:7b:0d:d7:6f:c1:54:e6:90:bb:
                    b1:45:db:dc:78:25:0a:03:58:b1:ff:96:33:7c:59:
                    07:83:cd:98:dd:4c:0b:a9:5f:ca:a8:33:7b:21:b7:
                    8a:c6:c9:b6:dd:b0:f2:81:9d:f9:cd:af:bf:18:a7:
                    8a:97:52:f6:46:27:45:ec:f9:b4:1a:7d:75:8e:5f:
                    48:13:c0:a8:59:cb:25:a6:fb:59:09:5b:a3:79:10:
                    a9:fa:61:4a:33:22:e4:a4:f6:42:da:f8:c4:09:cf:
                    35:dc:ba:dd:ae:43:8b:a7:1b:b3:9a:35:7d:c2:86:
                    38:6f:1d:93:08:66:f2:35:57:54:c7:89:71:fc:9b:
                    91:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:F8:7B:80:50:BF:9C:9F:9C:34:29:8B:D9:75:BE:FB:F5:D1:00
            X509v3 Authority Key Identifier:
                keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:33:f0:72:62:c5:60:70:d1:75:96:6c:61:32:56:96:ab:52:
         3d:2e:46:a3:81:26:2c:46:b1:50:06:12:8d:16:59:27:95:b5:
         b9:eb:dc:f8:d7:67:f8:a7:07:f9:63:64:de:6c:43:5e:8a:93:
         f4:1f:e1:8d:d7:ee:93:73:3d:69:5d:82:7e:e7:49:e1:d5:ad:
         62:39:e9:17:78:89:88:54:ca:eb:3b:b7:32:b2:fb:0e:2a:12:
         e1:ab:8a:91:07:7e:80:e4:b8:3d:6e:fd:79:cb:52:a0:6d:02:
         5b:1b:98:f9:bb:11:6e:10:a0:08:82:0c:12:67:9f:24:2c:c2:
         63:c2:aa:2a:f8:68:96:62:d4:26:65:80:a5:f2:28:2b:5e:78:
         dd:89:78:6d:2d:c2:3f:a0:2e:04:8d:6c:6d:ce:5d:f7:39:17:
         a4:d0:ea:66:10:d5:e7:c6:b6:b0:b6:4d:1e:12:e2:af:2e:14:
         ab:e4:7b:c9:0f:51:ca:00:7f:f6:9e:76:ea:ad:a9:7b:fe:9e:
         7a:e8:d1:fc:0e:36:66:9c:6b:10:26:bc:32:2d:72:05:44:5a:
         78:f3:a5:5f:9e:3d:ff:a7:ff:ce:40:fa:00:3d:d4:b0:33:cf:
         31:c1:c4:58:bd:b9:95:fc:d7:ae:99:fa:de:fd:b2:ac:6b:01:
         fb:0b:61:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx
NzQ0RTBCRjEwHhcNMjQwNTMxMTY0MjEzWhcNMjQwNjA3MTY0MjEzWjAYMRYwFAYD
VQQDEw02NjU5ZmRlNS0zMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqn+NSMf5TAd5tWp0wsbXFTYq6SSgfAu2DQ3Ka8yJqkfvnsYQdPXpDeuUQcE0
+7XfAFRGbFa/sOnJSAzRI6W1rUM06dSKacx6oo3HD6a9FTW+ear9ZryaOufn3xNi
f7xZwFOsIYFqGSE5uy6YzaMrdrMBYUJJvDkcrQcQ9pB7DddvwVTmkLuxRdvceCUK
A1ix/5YzfFkHg82Y3UwLqV/KqDN7IbeKxsm23bDygZ35za+/GKeKl1L2RidF7Pm0
Gn11jl9IE8CoWcslpvtZCVujeRCp+mFKMyLkpPZC2vjECc813LrdrkOLpxuzmjV9
woY4bx2TCGbyNVdUx4lx/JuRSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDa+HuA
UL+cn5w0KYvZdb779dEAMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1
QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx
dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoM/ByYsVgcNF1lmxhMlaWq1I9LkajgSYsRrFQBhKNFlknlbW569z4
12f4pwf5Y2TebENeipP0H+GN1+6Tcz1pXYJ+50nh1a1iOekXeImIVMrrO7cysvsO
KhLhq4qRB36A5Lg9bv15y1KgbQJbG5j5uxFuEKAIggwSZ58kLMJjwqoq+GiWYtQm
ZYCl8igrXnjdiXhtLcI/oC4EjWxtzl33ORek0OpmENXnxrawtk0eEuKvLhSr5HvJ
D1HKAH/2nnbqral7/p566NH8DjZmnGsQJrwyLXIFRFp486Vfnj3/p//OQPoAPdSw
M88xwcRYvbmV/Neumfre/bKsawH7C2H9
-----END CERTIFICATE-----
Generated at Fri May 31 20:34:18 2024 by rpki-client on console-ams.rpki-client.org