Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File:                     GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier:          aHbnd3WqgdU7PxByX2ZufsYX2uR+pxXgY1+1FNllVRw=
Subject key identifier:   B5:03:18:5E:43:39:30:D1:44:B5:B8:2A:CD:F7:FD:B5:C6:92:4D:C4
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number:          E9
Signing time:             Sat 23 Nov 2024 03:40:26 +0000
Manifest this update:     Sat 23 Nov 2024 03:40:26 +0000
Manifest next update:     Sat 30 Nov 2024 03:40:26 +0000
Files and hashes:         1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: vHjXSPiHYaL8lRkMMVr9lWa7oMADkgv8jmiFeg9xF/A=)
                          2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: 7xbva2x/2mRF/+1fr2KpL4N7Zq29lf7peyPdqH7ozvw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Nov 23 03:40:26 2024 GMT
            Not After : Nov 30 03:40:26 2024 GMT
        Subject: CN=67414eaa-ee4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:2a:8a:02:4e:6b:87:5d:f6:43:9c:65:80:
                    73:12:d7:2c:70:d7:14:e8:4e:5e:9b:7b:4a:80:4c:
                    a0:2c:04:79:c6:07:b5:31:a2:c9:05:4b:d9:4c:e0:
                    ab:91:87:6a:ae:99:df:d2:31:93:bd:72:df:23:c4:
                    93:ab:09:6d:62:8f:1c:85:db:7c:0f:8e:66:87:1e:
                    09:f1:f6:bf:57:f5:10:96:65:1f:95:ea:1c:4c:6d:
                    86:a7:78:6d:e1:dc:f0:8f:c2:58:59:c8:d9:a9:75:
                    e1:2a:61:97:aa:47:49:df:d3:d8:e7:51:a8:cb:8f:
                    1e:8c:ff:6e:ca:64:2b:6a:50:5c:21:f8:68:57:4d:
                    85:57:c5:49:76:3f:bf:eb:d3:0f:15:0b:9a:8a:80:
                    5f:af:8c:05:64:7c:1a:1b:80:7c:c8:f0:55:fd:42:
                    67:d8:ee:bb:ab:51:36:f5:94:1b:72:f1:16:21:5b:
                    9c:a6:75:99:5c:78:67:c0:32:d2:3b:cc:e7:49:47:
                    7a:f5:cc:6a:ed:0d:27:c0:84:a7:f7:f1:f4:6c:b5:
                    17:1d:40:80:53:57:36:e6:c8:68:01:cc:54:a2:11:
                    fb:95:4e:9a:43:26:12:3c:cd:7e:01:2a:8e:43:f2:
                    f8:44:7e:50:a4:40:d8:d1:47:4b:a8:e7:05:8b:15:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:18:5E:43:39:30:D1:44:B5:B8:2A:CD:F7:FD:B5:C6:92:4D:C4
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fd:e7:df:00:15:1c:df:73:2e:94:e6:0b:9f:5a:73:d2:c8:
         36:e8:dc:6f:8c:9e:47:c4:2c:4f:98:f2:93:f5:c1:df:ae:2e:
         eb:ea:7c:1c:36:fd:23:02:24:88:c8:8e:26:65:a9:58:0f:e8:
         a2:2c:4a:26:7d:98:33:72:d0:2a:2f:3f:aa:31:77:84:04:17:
         fe:72:b9:de:93:42:cc:96:56:94:84:5e:34:1c:36:6c:2c:b5:
         de:8e:34:c9:5e:a8:62:1d:d7:75:90:83:70:b0:1c:bc:7a:6b:
         3b:5f:ea:86:d3:a0:7b:a6:6a:93:63:11:99:0e:c9:2f:4d:8a:
         5d:66:03:60:67:bf:ef:e1:c2:44:41:90:1b:8f:c9:ec:01:8c:
         43:80:8e:ad:5e:19:3c:de:55:d2:ca:56:24:ef:b5:37:43:7c:
         e5:97:d7:ec:f2:d0:ca:5f:48:9e:78:c3:c4:ac:05:8a:1d:2a:
         3b:fd:bc:21:f3:72:f0:77:28:d1:c0:65:47:d0:3a:89:16:12:
         d1:d7:cc:4f:47:d3:2a:68:01:1f:82:b6:80:2a:66:26:f2:44:
         3e:f1:3e:e8:76:18:4a:da:f2:97:e5:e3:37:a8:bf:b9:28:6b:
         5b:bf:f2:6c:76:ae:55:52:3c:73:eb:60:72:ca:3a:4c:86:82:
         0b:8c:81:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwOUIxMTAvBgNVBAUTKDFBRjNDODlDRjE0N0YyRkVCNTFEQUFFODk1N0RCOTlE
Mzg3MjYzQjgwHhcNMjQxMTIzMDM0MDI2WhcNMjQxMTMwMDM0MDI2WjAYMRYwFAYD
VQQDEw02NzQxNGVhYS1lZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3sqigJOa4dd9kOcZYBzEtcscNcU6E5em3tKgEygLAR5xge1MaLJBUvZTOCr
kYdqrpnf0jGTvXLfI8STqwltYo8chdt8D45mhx4J8fa/V/UQlmUfleocTG2Gp3ht
4dzwj8JYWcjZqXXhKmGXqkdJ39PY51Goy48ejP9uymQralBcIfhoV02FV8VJdj+/
69MPFQuaioBfr4wFZHwaG4B8yPBV/UJn2O67q1E29ZQbcvEWIVucpnWZXHhnwDLS
O8znSUd69cxq7Q0nwISn9/H0bLUXHUCAU1c25shoAcxUohH7lU6aQyYSPM1+ASqO
Q/L4RH5QpEDY0UdLqOcFixV0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUDGF5D
OTDRRLW4Ks33/bXGkk3EMB8GA1UdIwQYMBaAFBrzyJzxR/L+tR2q6JV9uZ04cmO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDA5Qi8xRTJGQkVENDVD
NjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2NjFIYXJvbFgyNW5UaHlZ
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2UEluUEZIOHY2MUhhcm9sWDI1blRoeVk3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDA5Qi8xRTJGQkVENDVDNjQxMUVFQTU5QTgyMUVDNEY5QUUwMi9HdlBJblBGSDh2
NjFIYXJvbFgyNW5UaHlZN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8/effABUc33MulOYLn1pz0sg26NxvjJ5HxCxPmPKT9cHfri7r6nwc
Nv0jAiSIyI4mZalYD+iiLEomfZgzctAqLz+qMXeEBBf+crnek0LMllaUhF40HDZs
LLXejjTJXqhiHdd1kINwsBy8ems7X+qG06B7pmqTYxGZDskvTYpdZgNgZ7/v4cJE
QZAbj8nsAYxDgI6tXhk83lXSylYk77U3Q3zll9fs8tDKX0ieeMPErAWKHSo7/bwh
83LwdyjRwGVH0DqJFhLR18xPR9MqaAEfgraAKmYm8kQ+8T7odhhK2vKX5eM3qL+5
KGtbv/Jsdq5VUjxz62ByyjpMhoILjIGD
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org