Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          1ocr5VbJDxRNfsssOWL6UDxAV0tRZneyTKwpPxZZZjw=
Subject key identifier:   0B:2A:92:52:F2:43:16:BE:C5:81:16:C0:F0:4F:65:67:E9:2E:CC:A4
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          06C1
Signing time:             Sat 18 May 2024 23:08:34 +0000
Manifest this update:     Sat 18 May 2024 23:08:33 +0000
Manifest next update:     Sat 25 May 2024 23:08:33 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: ZFni5ThwxI4EncVPFQ8Ag0PUD02JBvCDKcCH6eHPN8o=)
                          2: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: wly0OY68balPh51i2R2GQUE7saurtGWpYNvp4HO031M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: May 18 23:08:33 2024 GMT
            Not After : May 25 23:08:33 2024 GMT
        Subject: CN=664934f1-0e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:1a:d0:6f:ff:e7:78:be:9b:9f:a8:bc:ac:
                    16:bb:4c:04:d8:07:e1:35:20:d4:2b:da:4b:1a:cc:
                    ad:30:68:c2:84:5c:bc:6f:00:dd:d9:70:5e:9c:0f:
                    d9:63:05:53:43:a9:73:03:58:35:c8:fe:16:e8:33:
                    9a:22:3a:b2:49:ad:6f:eb:6f:84:32:2c:75:83:75:
                    25:bc:c4:b5:26:6a:cc:ff:e1:4c:f3:1d:81:7d:1f:
                    37:29:38:82:c8:c2:a7:9c:93:36:45:4c:75:71:e9:
                    3d:c7:9c:52:4d:67:09:66:d1:5b:e0:c6:aa:aa:29:
                    1b:a0:bb:8e:05:6d:80:9b:1f:3f:b4:f9:d0:4d:eb:
                    ec:ae:9d:7d:4f:40:fb:91:21:d7:23:b6:36:d4:c8:
                    0b:06:1c:f0:57:5d:f1:fa:04:c2:72:b1:0d:58:d8:
                    2d:53:23:29:db:2f:e9:29:25:e5:2f:88:39:f2:be:
                    61:dd:7f:53:61:33:5b:91:67:81:5e:a9:00:3e:e3:
                    ca:3a:95:6d:5e:ea:57:46:73:d3:53:4c:ad:65:65:
                    d1:40:44:8b:b6:6e:e8:d2:22:e4:69:59:4c:83:a7:
                    b3:2b:6d:bb:fb:4a:b0:75:da:4c:dc:73:68:db:6c:
                    4b:e0:75:d6:39:f0:a8:65:c2:5c:77:ec:1b:37:89:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2A:92:52:F2:43:16:BE:C5:81:16:C0:F0:4F:65:67:E9:2E:CC:A4
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:92:79:a1:df:61:1e:13:34:cb:03:21:d5:1d:50:7a:91:
         d2:ec:2c:87:12:f4:5b:62:8c:a5:60:46:58:06:44:86:7f:b7:
         3e:46:0a:6a:ec:b8:22:8b:d2:84:d4:fb:b3:ff:a1:e0:5a:22:
         e9:d8:47:b5:f2:b9:9d:9c:67:d9:92:dc:fc:b9:b2:df:22:66:
         bc:86:f5:55:7e:6c:71:19:30:76:3c:fa:91:71:75:42:ce:aa:
         a4:2d:05:6f:6b:34:f7:9e:f8:ae:06:ad:8c:23:0e:76:23:5a:
         66:ba:1f:12:43:ae:78:2f:d3:7e:3d:ae:68:2c:8b:58:9c:5d:
         4f:21:07:67:b8:47:1c:30:a3:56:3d:5a:93:97:30:97:5c:5a:
         94:88:7f:aa:90:40:32:e6:16:af:b6:69:5b:63:7e:41:08:c0:
         b9:f5:4e:12:c6:b2:a3:59:cb:09:f8:ba:94:bb:32:ff:7e:02:
         ef:f2:95:69:3b:d3:33:68:64:eb:3d:3b:63:7e:ab:aa:06:62:
         ae:a2:a2:40:35:00:fb:88:5f:44:ea:6a:1e:6b:23:5f:33:c8:
         1b:07:3a:89:e6:1d:f3:2e:2c:57:c2:98:32:6c:20:48:69:d1:
         cb:42:fc:34:0a:3b:cb:32:0f:e1:00:9a:df:c5:8f:3f:0b:5a:
         18:a7:e1:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND
NUE3Mzk0OEUwHhcNMjQwNTE4MjMwODMzWhcNMjQwNTI1MjMwODMzWjAYMRYwFAYD
VQQDEw02NjQ5MzRmMS0wZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHQa0G//53i+m5+ovKwWu0wE2AfhNSDUK9pLGsytMGjChFy8bwDd2XBenA/Z
YwVTQ6lzA1g1yP4W6DOaIjqySa1v62+EMix1g3UlvMS1JmrM/+FM8x2BfR83KTiC
yMKnnJM2RUx1cek9x5xSTWcJZtFb4MaqqikboLuOBW2Amx8/tPnQTevsrp19T0D7
kSHXI7Y21MgLBhzwV13x+gTCcrENWNgtUyMp2y/pKSXlL4g58r5h3X9TYTNbkWeB
XqkAPuPKOpVtXupXRnPTU0ytZWXRQESLtm7o0iLkaVlMg6ezK227+0qwddpM3HNo
22xL4HXWOfCoZcJcd+wbN4k70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsqklLy
Qxa+xYEWwPBPZWfpLsykMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1
MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w
Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqyJJ5od9hHhM0ywMh1R1QepHS7CyHEvRbYoylYEZYBkSGf7c+Rgpq
7Lgii9KE1Puz/6HgWiLp2Ee18rmdnGfZktz8ubLfIma8hvVVfmxxGTB2PPqRcXVC
zqqkLQVvazT3nviuBq2MIw52I1pmuh8SQ654L9N+Pa5oLItYnF1PIQdnuEccMKNW
PVqTlzCXXFqUiH+qkEAy5havtmlbY35BCMC59U4SxrKjWcsJ+LqUuzL/fgLv8pVp
O9MzaGTrPTtjfquqBmKuoqJANQD7iF9E6moeayNfM8gbBzqJ5h3zLixXwpgybCBI
adHLQvw0CjvLMg/hAJrfxY8/C1oYp+Fs
-----END CERTIFICATE-----
Generated at Sun May 19 00:16:21 2024 by rpki-client on console-fra.rpki-client.org