Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File:                     fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier:          1oqFNqJS7kuTrrJMLFtC5URzUV7ls9XvUBlMdu4AkUQ=
Subject key identifier:   B8:F1:D4:7F:A2:12:D4:10:58:D2:33:8C:25:33:44:1B:7B:3B:B6:BC
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number:          0828
Signing time:             Thu 02 May 2024 22:12:42 +0000
Manifest this update:     Thu 02 May 2024 22:12:41 +0000
Manifest next update:     Thu 09 May 2024 22:12:41 +0000
Files and hashes:         1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: dL6d1hvwykLdsg71h0NGagUWf2kwEkTgAFX/qNWwFsM=)
                          2: 501941C093F211EEA029A113C4F9AE02.roa (hash: cNuSuuV714IVwMFeckoTksnZWBrOOwGcqob9V4WivZw=)
                          3: 781C64FAF58611ED89273159C4F9AE02.roa (hash: BxsMNoB2QJPR5XxPvxsoROwMKuUMiU+Rq2m2bFQEC9Y=)
                          4: 9672E862793811EE92C54834C4F9AE02.roa (hash: fy/XQ3orV/fnfoxTdm1B9LEP7BHKU3FpLozA+E8kZU0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: May  2 22:12:41 2024 GMT
            Not After : May  9 22:12:41 2024 GMT
        Subject: CN=66340fda-b7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:57:7f:91:1d:69:9a:ad:50:78:85:f2:00:
                    e9:ae:7f:b9:5a:6f:6b:ec:f9:b6:06:33:86:6d:d1:
                    40:32:ec:19:b7:4f:cc:4a:c2:43:fe:ce:a7:fa:38:
                    13:bf:3d:64:20:a1:ed:fc:36:a5:8b:1a:93:4a:4c:
                    80:20:01:98:4c:c8:f0:d9:ca:d5:f6:61:e3:17:f1:
                    e9:9b:f4:d6:1b:f3:b0:1a:b1:8d:ae:06:d2:9d:fc:
                    d9:e8:b1:ca:26:8c:c2:84:57:7c:93:72:bb:ff:2a:
                    3d:57:a6:29:09:71:e7:96:74:48:69:1f:19:6d:50:
                    bb:3f:80:a3:ff:48:4e:06:9d:dd:4f:24:15:7a:6d:
                    46:2a:77:92:54:99:86:66:72:48:da:ed:09:55:74:
                    61:5d:e5:9b:4b:6c:93:55:02:92:3f:bd:e4:82:b2:
                    5d:06:48:f1:e4:f3:b9:0b:f8:4b:c0:f1:af:49:af:
                    09:15:52:22:f2:91:f5:69:2b:25:6f:16:2c:34:35:
                    37:21:0f:34:38:f5:41:f7:35:f2:4a:b1:d7:9b:9e:
                    e0:0c:be:ae:4b:02:93:6e:8a:34:86:fd:99:99:96:
                    a6:85:11:39:ca:a4:d3:a8:5e:16:82:45:66:b5:0f:
                    00:9e:a3:cb:62:d2:ac:d0:24:d8:51:07:11:1f:b9:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:D4:7F:A2:12:D4:10:58:D2:33:8C:25:33:44:1B:7B:3B:B6:BC
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:00:03:e8:d8:d8:e8:72:d7:04:a4:54:4c:15:f6:8f:ab:09:
         a0:d3:f7:4f:8a:5d:32:9f:67:f1:42:50:93:3c:86:68:87:1c:
         cd:4c:2d:fd:7a:bc:22:17:94:47:00:21:41:1f:56:72:a9:d2:
         5a:b9:51:3d:63:fa:bd:f2:7d:a6:2e:a2:5a:27:4a:7b:10:a9:
         12:21:d3:2e:85:5a:8e:20:cf:7a:d3:45:c2:6d:62:9d:83:16:
         af:22:ca:44:95:b3:3e:78:e7:82:86:60:fe:04:04:45:13:7e:
         f6:24:11:82:4e:05:2e:79:f2:a3:7f:bf:e5:82:76:2a:25:b4:
         f7:18:ad:f1:ee:43:19:0f:db:9f:9c:90:73:43:8e:ca:17:85:
         f0:52:44:a6:3d:46:8e:2f:05:43:1c:0c:5a:0b:21:05:a5:c8:
         99:d8:0c:22:04:6f:20:d3:3f:5f:91:ff:d8:c8:44:36:41:f1:
         1e:69:00:a2:1c:ca:b5:13:7c:2c:cf:fc:37:2f:af:ce:82:b0:
         89:da:7a:d0:7d:b9:7e:99:b2:f6:d9:d4:48:80:ca:31:b3:cf:
         f9:3b:11:2f:5c:94:83:7a:eb:3f:0d:15:02:a8:99:e4:14:a6:
         b7:15:1f:63:bd:cd:dd:4f:90:ef:f9:6c:b7:16:04:aa:64:12:
         fa:ff:e1:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjQwNTAyMjIxMjQxWhcNMjQwNTA5MjIxMjQxWjAYMRYwFAYD
VQQDEw02NjM0MGZkYS1iN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutxXf5EdaZqtUHiF8gDprn+5Wm9r7Pm2BjOGbdFAMuwZt0/MSsJD/s6n+jgT
vz1kIKHt/DalixqTSkyAIAGYTMjw2crV9mHjF/Hpm/TWG/OwGrGNrgbSnfzZ6LHK
JozChFd8k3K7/yo9V6YpCXHnlnRIaR8ZbVC7P4Cj/0hOBp3dTyQVem1GKneSVJmG
ZnJI2u0JVXRhXeWbS2yTVQKSP73kgrJdBkjx5PO5C/hLwPGvSa8JFVIi8pH1aSsl
bxYsNDU3IQ80OPVB9zXySrHXm57gDL6uSwKTboo0hv2ZmZamhRE5yqTTqF4WgkVm
tQ8AnqPLYtKs0CTYUQcRH7nBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjx1H+i
EtQQWNIzjCUzRBt7O7a8MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U
VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFAAPo2NjoctcEpFRMFfaPqwmg0/dPil0yn2fxQlCTPIZohxzNTC39
erwiF5RHACFBH1ZyqdJauVE9Y/q98n2mLqJaJ0p7EKkSIdMuhVqOIM9600XCbWKd
gxavIspElbM+eOeChmD+BARFE372JBGCTgUuefKjf7/lgnYqJbT3GK3x7kMZD9uf
nJBzQ47KF4XwUkSmPUaOLwVDHAxaCyEFpciZ2AwiBG8g0z9fkf/YyEQ2QfEeaQCi
HMq1E3wsz/w3L6/OgrCJ2nrQfbl+mbL22dRIgMoxs8/5OxEvXJSDeus/DRUCqJnk
FKa3FR9jvc3dT5Dv+Wy3FgSqZBL6/+Gw
-----END CERTIFICATE-----
Generated at Thu May 2 23:19:02 2024 by rpki-client on console-ams.rpki-client.org