Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
File:                     fvtg2-isjcfDKzQJTcvj-mYiH6E.mft (raw, json)
Hash identifier:          iLQ33S47/8WxcpqxExpsajjcUI1CW/DJm8YngHM5+h8=
Subject key identifier:   0A:8B:19:DA:B2:01:7C:E3:7B:6E:92:14:12:86:28:AB:A8:B3:5B:05
Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
Certificate issuer:       /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
Manifest number:          02CA
Signing time:             Fri 03 May 2024 03:32:58 +0000
Manifest this update:     Fri 03 May 2024 03:32:58 +0000
Manifest next update:     Fri 10 May 2024 03:32:58 +0000
Files and hashes:         1: fvtg2-isjcfDKzQJTcvj-mYiH6E.crl (hash: 9N1i4XpVRUaGTP/FYYht/wetC7tWdW2ntu0+b/SbrdQ=)
                          2: 49B77AF49F8911EC8270CE39C4F9AE02.roa (hash: yVGxwV35fakARCQKj3EUBtdYga8Tt8+YYHTHxMlHSJw=)
                          3: 52EBB7524AE611EEB1E51972C4F9AE02.roa (hash: oDB0Jv7dY6tuUo3/DPFvhKMfnW5G12gPavtderxoLXo=)
                          4: 465066A44AD811EEB55E2071C4F9AE02.roa (hash: RoKrlJPTBnPiILbVjybIb5q2w/SimftIgFNAJ4mWpY4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl
                          rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 03:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
        Validity
            Not Before: May  3 03:32:58 2024 GMT
            Not After : May 10 03:32:58 2024 GMT
        Subject: CN=66345aea-29bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:d2:4a:e2:d0:f0:e6:56:16:d5:04:20:ea:
                    ae:6b:01:53:18:4e:f5:2f:b8:35:66:1f:4c:d3:79:
                    76:f2:8f:5f:89:72:69:1f:d1:79:0c:8a:79:0c:19:
                    49:af:15:6f:c9:87:67:c9:2e:40:24:9a:72:e6:00:
                    e6:51:6e:0f:56:7e:00:07:1c:67:55:19:1d:8a:b9:
                    cc:40:a3:05:92:ca:16:96:40:34:52:46:14:4b:eb:
                    d1:42:50:fa:a1:45:8a:8b:06:2f:cf:b1:b2:15:65:
                    b9:fe:2e:bc:dc:e7:26:ab:e5:9a:95:9c:44:ac:60:
                    89:d8:11:11:72:cc:74:da:74:4f:cb:df:91:95:da:
                    06:18:02:94:20:33:9b:02:9a:d4:8e:14:8a:e3:fd:
                    e4:14:e1:ce:44:a6:02:95:60:b1:92:57:90:7f:e5:
                    b5:63:b9:c2:20:a7:e9:c0:68:90:4c:27:51:22:90:
                    d9:2e:60:51:2b:51:79:f5:47:c1:a5:ff:e8:e1:de:
                    b3:1a:f6:98:7a:49:f6:a2:ee:a7:5f:a7:03:ba:43:
                    dd:a8:fd:78:6d:0d:ae:cb:6c:f0:e9:0c:e8:ce:07:
                    78:a1:28:e1:3e:14:87:86:59:29:2b:77:06:94:b1:
                    f2:72:5b:dd:0f:a6:8f:b2:8b:00:73:e3:7c:45:bd:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:19:DA:B2:01:7C:E3:7B:6E:92:14:12:86:28:AB:A8:B3:5B:05
            X509v3 Authority Key Identifier:
                keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:04:91:96:b5:eb:bd:26:60:95:90:c1:be:7b:a1:9b:4a:88:
         f1:f5:32:d5:d7:76:18:55:c8:91:fc:c0:c0:db:5b:83:46:34:
         c5:f6:ff:ad:fc:d6:2f:b4:d3:c8:34:77:01:f9:fc:c4:ef:37:
         2a:f9:91:06:36:90:f1:54:e3:9b:84:ba:5b:fc:86:28:a4:3f:
         51:f7:b1:59:25:4b:2f:15:8d:25:a1:4d:84:06:7f:1c:3d:c5:
         97:61:7e:06:cc:91:ce:e5:e0:87:d1:d0:33:e0:21:e1:1a:1f:
         12:9f:be:8f:ee:d5:cd:e5:ff:c0:58:cd:30:a8:1e:bd:26:37:
         ad:70:a8:c3:35:4a:8a:31:62:c5:27:b9:c6:ef:03:36:b2:ef:
         1c:f0:4c:19:db:f7:65:0d:2c:c4:ae:a9:f2:c2:1f:79:ab:f7:
         e0:07:49:c6:5e:68:ed:c3:6a:c2:cf:d0:1c:c8:c2:85:ad:41:
         71:b2:a6:5a:0b:81:9b:44:0a:45:54:2a:90:45:f3:89:7f:b0:
         d6:2e:66:9e:78:66:a8:c8:6d:28:f5:5c:5a:e8:16:90:af:91:
         0c:e1:af:ba:55:d1:d6:71:23:03:80:5e:69:f5:73:ea:5d:fe:
         52:e7:7e:54:95:ca:35:91:28:81:00:a3:b7:f7:1a:a5:16:06:
         d7:7b:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:47 2024 by rpki-client on console-ams.rpki-client.org