Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File:                     kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier:          8CbqZcYGaruatLsIyacL70LcWseAwJaKCwQK0kUOhck=
Subject key identifier:   00:04:08:36:83:69:CC:11:E5:CE:90:7A:38:92:A4:AB:D2:D1:2E:4A
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       15EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number:          15D6
Signing time:             Sat 18 May 2024 17:13:42 +0000
Manifest this update:     Sat 18 May 2024 17:13:42 +0000
Manifest next update:     Sat 25 May 2024 17:13:42 +0000
Files and hashes:         1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: Ow2XHa5+P6AJpNAMmX3b3IxVbg3qaysd0mjYfi9Y538=)
                          2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5611 (0x15eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: May 18 17:13:42 2024 GMT
            Not After : May 25 17:13:42 2024 GMT
        Subject: CN=6648e1c6-c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:29:c5:7e:1f:2b:90:ff:2d:a2:bf:fd:ef:
                    dd:58:70:c8:58:67:d9:9d:5c:8d:b9:ee:28:c5:fb:
                    8e:5a:78:ca:9e:3b:d6:bc:c8:db:2d:89:2c:d2:ba:
                    91:19:02:7c:be:9d:98:61:09:e6:4e:4f:86:14:6d:
                    86:31:47:6c:aa:e6:c6:d9:2d:70:18:71:26:2f:fb:
                    41:cc:23:49:1f:5e:1c:9f:64:e3:2e:f1:89:dc:10:
                    6c:0c:cd:48:d3:7c:2d:8b:4c:0f:cd:aa:57:49:d3:
                    ae:8f:2f:02:61:92:21:a3:30:ff:a7:88:26:cb:85:
                    07:d0:a3:88:9f:43:49:ae:76:d4:01:17:55:c9:7e:
                    da:82:5c:a2:94:62:5b:d4:84:da:4e:78:55:09:30:
                    20:45:12:34:dd:0c:fc:23:3e:74:f3:17:20:01:5d:
                    18:82:33:d3:6e:fa:14:cd:77:ca:d1:17:16:a2:9f:
                    f3:04:18:e4:9b:59:59:bd:8f:0e:c2:17:09:bd:8c:
                    fa:4a:e4:37:f5:51:ac:c5:53:38:aa:f6:38:2e:20:
                    df:14:dd:8c:d6:d9:80:6d:98:30:1c:55:e5:b1:da:
                    c4:d8:21:46:56:de:c1:40:87:c5:88:5c:55:5e:e0:
                    fa:6f:05:82:b8:c9:26:0b:1e:78:95:62:9e:d9:f9:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:04:08:36:83:69:CC:11:E5:CE:90:7A:38:92:A4:AB:D2:D1:2E:4A
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:67:79:3e:da:15:64:e8:db:56:80:38:98:72:94:fa:2d:
         16:77:aa:67:68:a4:97:b9:3d:a1:01:b0:e3:84:c0:cc:c8:44:
         d6:e8:77:0f:3f:45:fd:57:af:09:b7:99:02:15:fc:9e:11:c0:
         79:76:8d:97:98:20:9a:22:0f:33:45:00:66:fb:6b:8f:9b:26:
         ae:79:1d:86:d2:9c:e8:46:de:91:94:6b:02:56:cb:31:82:45:
         e4:7b:a8:76:64:3a:06:5e:74:2f:bd:fd:44:01:28:a8:3b:5a:
         2c:5f:06:e0:5f:ae:44:05:cb:97:2e:7d:f8:27:6b:13:c0:67:
         69:e7:36:62:df:c6:cd:ab:33:77:ad:95:00:2d:22:75:71:a4:
         f0:d7:ed:1b:71:4e:cb:7d:71:b0:68:4f:95:11:d8:74:ff:c3:
         5f:99:91:03:0a:3a:9b:93:39:3f:91:19:f9:14:25:0d:ee:af:
         be:17:6f:33:0d:35:ac:c7:fd:4b:b7:8c:ef:9a:7f:f3:f7:d4:
         b1:c8:73:74:49:01:05:8c:6d:d6:e6:6b:04:e5:fe:0e:0c:bd:
         46:9e:f9:39:db:9b:b6:80:b1:41:0b:7c:72:a9:84:7e:81:d4:
         66:d9:1d:f6:31:3b:94:ac:1a:42:37:06:b9:31:19:0b:27:87:
         7d:29:22:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0
RjU1NTU4REYwHhcNMjQwNTE4MTcxMzQyWhcNMjQwNTI1MTcxMzQyWjAYMRYwFAYD
VQQDEw02NjQ4ZTFjNi1jODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojgpxX4fK5D/LaK//e/dWHDIWGfZnVyNue4oxfuOWnjKnjvWvMjbLYks0rqR
GQJ8vp2YYQnmTk+GFG2GMUdsqubG2S1wGHEmL/tBzCNJH14cn2TjLvGJ3BBsDM1I
03wti0wPzapXSdOujy8CYZIhozD/p4gmy4UH0KOIn0NJrnbUARdVyX7aglyilGJb
1ITaTnhVCTAgRRI03Qz8Iz508xcgAV0YgjPTbvoUzXfK0RcWop/zBBjkm1lZvY8O
whcJvYz6SuQ39VGsxVM4qvY4LiDfFN2M1tmAbZgwHFXlsdrE2CFGVt7BQIfFiFxV
XuD6bwWCuMkmCx54lWKe2fm3lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAECDaD
acwR5c6QejiSpKvS0S5KMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw
NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf
c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARnmd5PtoVZOjbVoA4mHKU+i0Wd6pnaKSXuT2hAbDjhMDMyETW6HcP
P0X9V68Jt5kCFfyeEcB5do2XmCCaIg8zRQBm+2uPmyaueR2G0pzoRt6RlGsCVssx
gkXke6h2ZDoGXnQvvf1EASioO1osXwbgX65EBcuXLn34J2sTwGdp5zZi38bNqzN3
rZUALSJ1caTw1+0bcU7LfXGwaE+VEdh0/8NfmZEDCjqbkzk/kRn5FCUN7q++F28z
DTWsx/1Lt4zvmn/z99SxyHN0SQEFjG3W5msE5f4ODL1Gnvk525u2gLFBC3xyqYR+
gdRm2R32MTuUrBpCNwa5MRkLJ4d9KSLR
-----END CERTIFICATE-----
Generated at Sat May 18 18:21:40 2024 by rpki-client on console-ams.rpki-client.org