Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          NuxzfePYOOuXNY2rsConiBCAqWb+VgrYn7Vggv/6HBY=
Subject key identifier:   8E:EB:95:9F:DB:0C:21:59:38:47:01:A9:5B:14:24:16:98:E0:01:90
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          B7
Signing time:             Wed 01 May 2024 06:48:25 +0000
Manifest this update:     Wed 01 May 2024 06:48:25 +0000
Manifest next update:     Wed 08 May 2024 06:48:25 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: OHoWLy8FBkG7sgd5qA24XbazPQMOIfpjUF4k8brrG3E=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: OU5KcZHZ3xkQgEaHszLfMVM61GV8iQUJWprw5u91teE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: May  1 06:48:25 2024 GMT
            Not After : May  8 06:48:25 2024 GMT
        Subject: CN=6631e5b9-349e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:30:1a:c9:a3:7d:a7:c3:81:d8:4c:27:6f:
                    ff:29:57:ef:ec:61:5f:75:8f:84:fd:0c:69:4e:3e:
                    c8:98:6b:dc:17:18:0f:70:e3:bd:68:e1:9c:19:d1:
                    fb:3e:6c:b3:2d:08:7c:79:5c:9d:7d:60:f8:f6:57:
                    9c:66:93:25:83:85:f3:83:e8:8a:2e:f8:09:77:b7:
                    93:fa:c7:fd:1d:cc:f9:3f:72:fc:60:3c:b8:0c:1a:
                    2d:73:10:fb:0f:10:2b:e9:b1:5c:72:4c:f6:b6:46:
                    cd:40:af:96:48:f1:e8:9a:ae:7b:e2:a6:17:93:a2:
                    68:6b:db:20:17:4c:e7:6e:c4:57:a9:5a:1b:53:06:
                    0d:c4:cd:f5:d3:6c:5a:61:8a:77:5c:d6:34:0a:f3:
                    f5:3a:52:01:a7:fe:99:76:b3:46:d4:fc:59:d4:cb:
                    e0:cc:56:ac:74:a5:fc:05:c8:7f:98:5e:8a:00:de:
                    75:63:15:54:f0:0e:59:2d:d1:89:e5:aa:3d:84:c3:
                    ca:d4:1e:c9:9a:41:ca:ec:18:2c:1a:f8:54:d3:2c:
                    2b:18:30:74:10:0a:5f:10:c7:8b:5d:a5:6f:f1:f9:
                    c7:99:65:7e:4b:a5:ac:02:75:49:58:1a:50:be:a9:
                    68:49:35:b9:b1:1f:42:c2:04:15:ba:da:14:e5:85:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:95:9F:DB:0C:21:59:38:47:01:A9:5B:14:24:16:98:E0:01:90
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:dd:a8:24:e4:57:0e:e8:df:7e:75:d2:c9:27:7a:82:75:
         e1:83:c0:05:1d:0a:01:6e:93:a2:a6:92:30:60:41:b7:bb:41:
         30:93:7a:ca:51:94:f1:96:2b:ec:3d:dc:f9:de:af:71:18:af:
         64:1c:68:b8:69:10:e6:c8:63:0e:68:f1:38:9d:0e:4c:83:1c:
         fb:ab:ed:0a:82:5b:37:d3:06:b4:25:30:88:60:35:7b:ba:a5:
         b2:ba:79:56:b9:74:a9:fc:34:a7:f1:09:85:0e:94:3b:79:4c:
         f1:0f:4b:2a:04:b8:ca:70:34:8d:b4:48:11:ec:c3:f5:43:f1:
         74:3f:9c:c8:dc:b9:1e:71:4d:ac:f4:f7:a9:26:c0:b4:bf:c9:
         2b:52:e7:cd:78:7e:64:21:59:29:f9:17:67:29:4e:c5:84:8f:
         6d:27:8c:7c:b7:77:91:8a:16:15:59:b7:ff:99:f9:f6:46:c8:
         73:be:6b:86:b9:64:3d:a9:66:da:7b:5a:9f:b9:7f:a5:58:72:
         db:65:b3:b6:d9:e3:a8:fd:a1:ed:60:fd:ee:bb:3c:f3:01:25:
         73:59:58:89:41:f2:15:c5:03:44:8e:20:34:a5:28:9b:1a:91:
         00:94:83:e9:ca:b9:d0:0c:1a:ea:f8:da:1e:3c:f2:2d:c9:2c:
         57:61:8c:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU3QUExMTAvBgNVBAUTKDE5MDQzQ0QwODlDOTc5NEZBNzhGNDVBNTRFQUI1RjJC
NkU5MThFRUUwHhcNMjQwNTAxMDY0ODI1WhcNMjQwNTA4MDY0ODI1WjAYMRYwFAYD
VQQDEw02NjMxZTViOS0zNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMwwGsmjfafDgdhMJ2//KVfv7GFfdY+E/QxpTj7ImGvcFxgPcOO9aOGcGdH7
PmyzLQh8eVydfWD49lecZpMlg4Xzg+iKLvgJd7eT+sf9Hcz5P3L8YDy4DBotcxD7
DxAr6bFcckz2tkbNQK+WSPHomq574qYXk6Joa9sgF0znbsRXqVobUwYNxM3102xa
YYp3XNY0CvP1OlIBp/6ZdrNG1PxZ1MvgzFasdKX8Bch/mF6KAN51YxVU8A5ZLdGJ
5ao9hMPK1B7JmkHK7BgsGvhU0ywrGDB0EApfEMeLXaVv8fnHmWV+S6WsAnVJWBpQ
vqloSTW5sR9CwgQVutoU5YVtwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7rlZ/b
DCFZOEcBqVsUJBaY4AGQMB8GA1UdIwQYMBaAFBkEPNCJyXlPp49FpU6rXytukY7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdBQS9DMTgzNUQ1Q0Yx
NDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVVLW5qMFdsVHF0ZksyNlJq
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dRUTgwSW5KZVUtbmowV2xUcXRmSzI2Ump1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTdBQS9DMTgzNUQ1Q0YxNDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVV
LW5qMFdsVHF0ZksyNlJqdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc3N2oJORXDujffnXSySd6gnXhg8AFHQoBbpOippIwYEG3u0Ewk3rK
UZTxlivsPdz53q9xGK9kHGi4aRDmyGMOaPE4nQ5Mgxz7q+0Kgls30wa0JTCIYDV7
uqWyunlWuXSp/DSn8QmFDpQ7eUzxD0sqBLjKcDSNtEgR7MP1Q/F0P5zI3LkecU2s
9PepJsC0v8krUufNeH5kIVkp+RdnKU7FhI9tJ4x8t3eRihYVWbf/mfn2RshzvmuG
uWQ9qWbae1qfuX+lWHLbZbO22eOo/aHtYP3uuzzzASVzWViJQfIVxQNEjiA0pSib
GpEAlIPpyrnQDBrq+NoePPItySxXYYx1
-----END CERTIFICATE-----
Generated at Wed May 1 07:23:56 2024 by rpki-client on console-ams.rpki-client.org