Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File:                     1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier:          rXr5li9mBEF9ybZ0ExjUkUgdjlvYjKy8BCNhLzjulVA=
Subject key identifier:   BD:FA:97:E2:28:C5:0E:95:8B:E3:D0:F7:FF:E5:01:73:5D:88:09:3D
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer:       /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial:       1B22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number:          1B07
Signing time:             Mon 06 May 2024 16:46:09 +0000
Manifest this update:     Mon 06 May 2024 16:46:08 +0000
Manifest next update:     Mon 13 May 2024 16:46:08 +0000
Files and hashes:         1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: tLLlR3mKUDmJr6uWImXuLxzsCEfhrz6W5bfVduClfpU=)
                          2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: Pqm+kfFVeVJJT52PIyCw8FkJYkhG46t2Pk315FyyFs4=)
                          3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: iHpjkKgrM/aDV1pos/dM1mkPjodoRGQzW79P/+DhQv0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
                          rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 16:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6946 (0x1b22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
        Validity
            Not Before: May  6 16:46:08 2024 GMT
            Not After : May 13 16:46:08 2024 GMT
        Subject: CN=66390950-c66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:03:ce:5b:c1:35:00:1b:7b:b0:de:28:27:
                    35:b2:99:50:82:cc:60:e9:d3:d4:8a:e3:84:35:3a:
                    7f:b4:67:be:5d:0c:7c:a7:ee:b0:af:44:ba:43:b2:
                    c0:60:94:3b:84:fc:97:e9:5f:2e:5c:70:ef:2c:7b:
                    0e:f1:b7:9f:c6:39:88:60:62:3c:01:27:76:9b:a6:
                    14:7a:a1:86:c8:7a:78:d0:ec:3b:28:e0:ff:38:cb:
                    2f:36:d7:3f:46:bf:00:c3:2d:69:04:2e:fd:88:85:
                    fc:09:3b:b9:9a:44:a0:37:04:13:57:68:95:5f:61:
                    18:19:28:59:91:f5:42:fb:1b:9b:3c:17:f6:b6:6b:
                    11:86:73:9c:80:c5:a8:b5:b0:ec:46:42:2b:88:8b:
                    2f:d4:ed:ec:58:e4:82:c0:b1:8b:7c:2f:73:35:5d:
                    71:cc:20:70:84:f6:86:e3:ad:48:97:b5:13:94:03:
                    36:fd:71:ff:d4:6e:a3:d7:7b:22:b9:d1:84:b2:85:
                    3e:84:dd:cd:96:a3:03:65:77:e2:56:38:f4:a7:28:
                    4a:84:7e:f6:e3:06:49:a0:6a:ff:55:02:20:e4:f3:
                    b9:94:d0:eb:d4:9d:30:16:69:b0:97:2a:d0:a7:21:
                    16:04:f4:16:c5:11:11:9b:96:b9:60:b3:9f:02:2b:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:97:E2:28:C5:0E:95:8B:E3:D0:F7:FF:E5:01:73:5D:88:09:3D
            X509v3 Authority Key Identifier:
                keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:a5:05:0b:a1:00:93:51:f4:2c:92:5a:8c:16:0e:c8:19:
         ed:ad:a0:17:d3:f3:30:2d:6d:ea:8f:af:ec:ac:07:59:b9:58:
         c3:dc:32:2b:b8:8d:4d:a6:57:1b:34:83:8f:c0:9f:68:e5:8b:
         cf:c6:62:26:73:3c:6c:d0:e8:3f:5c:f8:d6:e7:14:7c:b7:b7:
         b4:a7:78:fa:07:7a:1f:84:b7:88:36:b5:c8:35:73:c6:db:de:
         93:53:9c:b0:76:8b:ec:fe:90:f3:20:67:e5:8e:4b:e0:81:16:
         b8:38:16:b5:bc:2d:35:fc:62:00:db:9e:f2:52:aa:7c:09:d6:
         0c:74:86:28:27:2c:d3:35:ba:19:15:3f:ce:7b:b6:57:ea:17:
         01:10:51:3a:65:c1:f0:e3:42:14:53:70:fa:67:5b:d2:7d:29:
         f3:b4:dd:c6:4b:df:04:cd:d1:f9:97:a9:c2:ba:24:19:97:50:
         85:7b:98:5c:4f:c9:7b:fa:af:9c:71:2c:5a:3e:89:f0:86:b1:
         c8:bf:b3:b9:16:a8:ce:a3:e0:05:26:12:35:b3:8f:e6:f7:58:
         d0:ff:f8:ca:bd:13:69:8f:a9:18:a2:75:6c:d5:ae:8e:de:b2:
         68:71:5d:98:87:cb:60:39:31:2b:a1:5b:48:eb:dd:db:f7:87:
         cd:18:4e:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy
RUFDODJDQUYwHhcNMjQwNTA2MTY0NjA4WhcNMjQwNTEzMTY0NjA4WjAYMRYwFAYD
VQQDEw02NjM5MDk1MC1jNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTEDzlvBNQAbe7DeKCc1splQgsxg6dPUiuOENTp/tGe+XQx8p+6wr0S6Q7LA
YJQ7hPyX6V8uXHDvLHsO8befxjmIYGI8ASd2m6YUeqGGyHp40Ow7KOD/OMsvNtc/
Rr8Awy1pBC79iIX8CTu5mkSgNwQTV2iVX2EYGShZkfVC+xubPBf2tmsRhnOcgMWo
tbDsRkIriIsv1O3sWOSCwLGLfC9zNV1xzCBwhPaG461Il7UTlAM2/XH/1G6j13si
udGEsoU+hN3NlqMDZXfiVjj0pyhKhH724wZJoGr/VQIg5PO5lNDr1J0wFmmwlyrQ
pyEWBPQWxRERm5a5YLOfAis5JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL36l+Io
xQ6Vi+PQ9//lAXNdiAk9MB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5
QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla
WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCftKUFC6EAk1H0LJJajBYOyBntraAX0/MwLW3qj6/srAdZuVjD3DIr
uI1NplcbNIOPwJ9o5YvPxmImczxs0Og/XPjW5xR8t7e0p3j6B3ofhLeINrXINXPG
296TU5ywdovs/pDzIGfljkvggRa4OBa1vC01/GIA257yUqp8CdYMdIYoJyzTNboZ
FT/Oe7ZX6hcBEFE6ZcHw40IUU3D6Z1vSfSnztN3GS98EzdH5l6nCuiQZl1CFe5hc
T8l7+q+ccSxaPonwhrHIv7O5FqjOo+AFJhI1s4/m91jQ//jKvRNpj6kYonVs1a6O
3rJocV2Yh8tgOTEroVtI693b94fNGE66
-----END CERTIFICATE-----
Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org