Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
File:                     6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft (raw, json)
Hash identifier:          iI+qQnGBAoDYTC2Az/QJYY6vfhm6Vowy5nf/eaPoLCQ=
Subject key identifier:   4C:B0:75:5D:88:E5:81:A4:40:4A:47:18:75:3D:48:21:39:3A:C2:DF
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       066D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
Manifest number:          0660
Signing time:             Fri 26 Apr 2024 23:34:06 +0000
Manifest this update:     Fri 26 Apr 2024 23:34:06 +0000
Manifest next update:     Fri 03 May 2024 23:34:06 +0000
Files and hashes:         1: 6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl (hash: bA8xDlqSEtyDbD+XZoILm+qPgUYPMKQNVUAjVFiGAwk=)
                          2: E018A9F237A011EBBF397436C4F9AE02.roa (hash: gdLo9tIMVuOO1O4xewblrDB9aSBij7KOy3EC1bMLsdw=)
                          3: 44B0DD4AFDE611ED880C3C6AC4F9AE02.roa (hash: MlB+8Y5gpTEFfLT5gAnamXFHfJxfOf+HuDdDRrTV56E=)
                          4: 5EF136B6F30E11ECBDF7B918C4F9AE02.roa (hash: oEE+S3sZ5y8PcsICEHhdZ4mRyR9Cw85Y8wDjNdp4NPs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 23:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645 (0x66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Apr 26 23:34:06 2024 GMT
            Not After : May  3 23:34:06 2024 GMT
        Subject: CN=662c39ee-1aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:a3:40:44:35:df:90:87:45:33:eb:9e:c7:
                    37:cd:d7:5b:1e:4e:03:b3:65:66:b0:8b:27:ca:37:
                    09:52:ce:5c:0e:db:f3:bd:4b:81:c6:5f:b2:15:72:
                    bf:15:39:42:83:2f:0c:f4:b9:5f:5e:3b:53:b4:5a:
                    79:38:b2:b9:2e:49:76:0c:75:6e:ac:f3:ca:ce:07:
                    44:22:6d:15:78:73:01:94:2c:f3:51:a8:0d:df:82:
                    8f:5a:85:ef:38:a3:7d:1a:1f:ed:68:fb:93:58:28:
                    5d:48:d0:a8:11:b1:ec:d8:6b:61:13:d8:2c:bb:28:
                    22:65:9b:1e:7f:c4:e2:fb:1a:1b:aa:a8:d3:5f:f9:
                    44:74:33:08:a1:1d:e4:ad:b6:49:78:6d:d2:bc:5c:
                    a3:96:50:75:87:28:b5:34:dd:eb:27:47:06:12:78:
                    4a:47:de:4d:6f:61:55:46:83:06:96:dd:8a:fa:2e:
                    14:3a:e4:84:f3:25:1c:d8:32:fa:95:1a:fe:bb:4d:
                    c1:9d:5c:2f:84:c2:17:d7:c4:e8:81:94:87:d1:63:
                    5b:f9:c8:f7:6b:d1:22:ab:7d:dc:ac:79:44:d6:de:
                    04:55:b2:fe:49:9a:a5:f9:66:16:9e:73:9e:13:51:
                    be:25:8e:41:48:f2:41:52:bf:4c:8b:ed:93:57:29:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:75:5D:88:E5:81:A4:40:4A:47:18:75:3D:48:21:39:3A:C2:DF
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:04:0b:ed:f5:b1:3f:e5:d8:24:01:ef:e8:b6:7e:8a:50:
         d8:aa:9e:cc:51:86:9b:7a:05:cf:48:4a:80:15:2a:16:75:56:
         19:9a:4d:bc:15:67:8f:25:7b:31:d7:aa:31:d7:c9:0c:0a:db:
         03:f2:4b:d1:30:7a:81:1d:74:ea:b4:12:67:3e:2d:f5:c9:25:
         e9:5c:1c:d3:4b:0e:0d:50:47:74:84:61:37:e9:d1:50:63:2f:
         5a:ba:ab:3f:04:38:41:70:02:d1:d1:a5:ba:8c:bf:ad:01:56:
         69:9c:e8:8f:e9:95:cc:74:84:f7:70:49:6a:33:a2:04:d9:f0:
         7c:7a:61:30:f6:bd:f9:fd:4c:85:d0:50:1d:a8:3d:12:a1:ef:
         27:15:3b:2b:2d:a8:1a:dc:c9:bd:5b:0c:f0:40:43:de:27:80:
         16:a0:ae:41:a2:bc:2f:1f:e6:35:53:1a:ca:a4:a6:b1:0b:8f:
         f8:25:32:9f:4d:98:e6:81:a7:72:80:ca:f8:60:f8:11:7f:e7:
         9b:6b:12:69:e4:be:d6:ad:31:eb:54:3e:c7:87:03:3c:3f:2b:
         0b:97:20:bd:91:c0:7f:b3:e3:8e:66:34:ad:f5:a8:cf:a1:4b:
         05:46:29:e5:bb:89:ca:15:82:99:e8:98:35:78:b6:fd:b3:00:
         ec:59:4c:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc4NTYxMTAvBgNVBAUTKEU4REE1QkYwMUM3OTQzRjFBRUMyNDg2MTBDNUM0RDFC
RTQ0QjcwNEYwHhcNMjQwNDI2MjMzNDA2WhcNMjQwNTAzMjMzNDA2WjAYMRYwFAYD
VQQDEw02NjJjMzllZS0xYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruKjQEQ135CHRTPrnsc3zddbHk4Ds2VmsIsnyjcJUs5cDtvzvUuBxl+yFXK/
FTlCgy8M9LlfXjtTtFp5OLK5Lkl2DHVurPPKzgdEIm0VeHMBlCzzUagN34KPWoXv
OKN9Gh/taPuTWChdSNCoEbHs2GthE9gsuygiZZsef8Ti+xobqqjTX/lEdDMIoR3k
rbZJeG3SvFyjllB1hyi1NN3rJ0cGEnhKR95Nb2FVRoMGlt2K+i4UOuSE8yUc2DL6
lRr+u03BnVwvhMIX18TogZSH0WNb+cj3a9Eiq33crHlE1t4EVbL+SZql+WYWnnOe
E1G+JY5BSPJBUr9Mi+2TVymRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEywdV2I
5YGkQEpHGHU9SCE5OsLfMB8GA1UdIwQYMBaAFOjaW/AceUPxrsJIYQxcTRvkS3BP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzg1Ni85MUNDMzE1MjM3
OUYxMUVCQjMzMTYxMzVDNEY5QUUwMi82TnBiOEJ4NVFfR3V3a2hoREZ4TkctUkxj
RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZOcGI4Qng1UV9HdXdraGhERnhORy1STGNFOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Nzg1Ni85MUNDMzE1MjM3OUYxMUVCQjMzMTYxMzVDNEY5QUUwMi82TnBiOEJ4NVFf
R3V3a2hoREZ4TkctUkxjRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsKQQL7fWxP+XYJAHv6LZ+ilDYqp7MUYabegXPSEqAFSoWdVYZmk28
FWePJXsx16ox18kMCtsD8kvRMHqBHXTqtBJnPi31ySXpXBzTSw4NUEd0hGE36dFQ
Yy9auqs/BDhBcALR0aW6jL+tAVZpnOiP6ZXMdIT3cElqM6IE2fB8emEw9r35/UyF
0FAdqD0Soe8nFTsrLaga3Mm9WwzwQEPeJ4AWoK5BorwvH+Y1UxrKpKaxC4/4JTKf
TZjmgadygMr4YPgRf+ebaxJp5L7WrTHrVD7HhwM8PysLlyC9kcB/s+OOZjSt9ajP
oUsFRinlu4nKFYKZ6Jg1eLb9swDsWUwa
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:23 2024 by rpki-client on console-ams.rpki-client.org