Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          aHJS8o23/HgCYnE7YrdCuf7WSs7Y3b2TnQzpzfk9BlU=
Subject key identifier:   AF:7D:05:DC:10:00:FD:2D:9E:65:E0:53:EB:19:97:19:A3:2D:23:4F
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          D9
Signing time:             Fri 31 May 2024 06:49:59 +0000
Manifest this update:     Fri 31 May 2024 06:49:58 +0000
Manifest next update:     Fri 07 Jun 2024 06:49:58 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: 2JoOCKozycBsvJcUKAdCwGm+n0TnX1VSx2I3GAAhuoU=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: G2cUE4XCDbRjo3hZZ2YVvtK0RuJ9Lk3l6kRgEwAu52s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 06:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: May 31 06:49:58 2024 GMT
            Not After : Jun  7 06:49:58 2024 GMT
        Subject: CN=66597317-6610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c5:03:40:a1:d4:e5:f3:ad:f6:d0:82:ad:66:
                    62:fe:8e:18:76:49:5c:c5:b4:66:4c:79:50:77:6b:
                    ed:13:97:95:ce:5f:e2:d3:34:82:84:6c:9d:6a:f8:
                    37:dc:e4:1d:e7:24:fe:9d:18:72:ad:c0:ef:bc:e1:
                    d8:65:4b:66:44:7b:fd:32:8a:8b:19:34:76:a6:b7:
                    48:51:11:9c:e9:4d:dc:2a:39:43:bb:ca:02:b2:4b:
                    f7:3b:9e:2f:a3:9f:d8:de:78:97:3b:f1:68:47:a9:
                    ad:f6:a3:62:7a:ec:ab:50:c2:e2:09:c3:c0:ec:5e:
                    ca:b7:57:b4:ae:9c:37:14:3f:fc:44:f1:d9:e0:29:
                    13:ed:2b:d7:c8:5c:30:f1:3b:ef:df:0b:3c:ff:8a:
                    3d:ab:91:04:d3:66:ad:45:52:f6:c6:a0:13:db:8f:
                    2c:be:a0:1f:92:03:5b:af:3f:c9:14:93:58:2f:28:
                    7a:da:63:37:a1:a4:f3:54:d8:05:fe:85:ae:f9:f1:
                    91:90:e9:55:d2:f6:2d:32:2b:3f:87:71:d2:6f:3e:
                    a8:db:77:bf:31:0e:9b:14:ff:e4:26:55:4f:a5:fd:
                    eb:40:ea:12:32:85:aa:90:a2:80:f6:a4:0e:c7:e9:
                    2e:d0:d4:99:3f:ab:39:c3:28:1d:9b:d8:c8:f0:5d:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:05:DC:10:00:FD:2D:9E:65:E0:53:EB:19:97:19:A3:2D:23:4F
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:68:42:80:bc:0f:15:3f:f1:50:f7:13:68:eb:71:69:dc:
         aa:63:ed:93:04:f7:22:3a:d4:f8:41:55:7b:c7:f2:cb:1d:32:
         a5:a5:52:5e:17:43:c8:91:7b:bf:b2:af:7b:28:54:74:bb:8a:
         14:76:ce:01:dc:c4:fc:65:96:a1:c2:a5:b8:35:56:4a:6b:98:
         89:3b:f4:eb:c9:55:6e:72:62:e5:20:45:5a:68:7f:b3:6a:c2:
         2d:e8:64:2a:56:3c:61:81:76:01:e9:98:7a:d9:c4:be:65:06:
         c7:b2:52:1c:a3:18:4b:f9:33:00:a5:66:f1:b4:40:ec:fd:37:
         02:5e:56:39:da:50:e7:06:85:1b:2a:75:59:d3:16:02:1c:f4:
         46:2f:2e:10:0f:61:ce:b0:4e:75:ec:86:f6:2b:b1:ca:45:da:
         c7:d0:e5:92:5c:e7:c2:d5:54:a6:a3:2d:7f:cc:25:55:60:f2:
         50:5b:0e:ed:9f:87:02:f8:aa:57:10:45:d8:15:09:04:20:19:
         a0:1d:bb:f0:7a:3c:a6:4d:78:8b:2f:29:e7:a5:68:2f:e9:c0:
         6c:92:78:bb:18:60:3c:77:9f:8b:e0:81:f3:67:b0:8d:42:e5:
         56:2f:4b:f5:78:cd:90:35:e7:81:5e:7f:97:53:13:ae:d3:90:
         77:7c:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 08:39:02 2024 by rpki-client on console-fra.rpki-client.org