Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          aQTfv4X7kAEsY+rH+Kmpq3GTWPqALueLyweeLsixygQ=
Subject key identifier:   82:17:64:9B:31:1F:42:FB:D4:AF:A7:6F:46:B7:EF:62:9A:29:41:EE
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          6C
Signing time:             Fri 17 May 2024 07:36:42 +0000
Manifest this update:     Fri 17 May 2024 07:36:42 +0000
Manifest next update:     Fri 24 May 2024 07:36:42 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: RkkGtnZ39ExZeT4JXkeiKeu+aTa0uMo9MhkCMDTsYd4=)
                          2: EBF0BAF86EF711EE821C4538C4F9AE02.roa (hash: 8jzsQF9K37g0759p+cHddGRVaB9B3asBzSUwagiKw4Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: May 17 07:36:42 2024 GMT
            Not After : May 24 07:36:42 2024 GMT
        Subject: CN=6647090a-b62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:e1:b8:fe:47:8b:47:0d:a7:17:bb:2e:d5:
                    59:bb:57:2c:2b:0f:a8:70:5c:a1:9f:92:13:db:21:
                    1d:81:8c:3a:d3:b4:c9:53:89:bc:b8:11:ec:e1:d5:
                    ca:6b:2c:f4:11:84:5a:1f:f5:5d:df:91:43:68:cf:
                    e6:90:ff:98:61:b0:30:b4:55:cd:b8:15:0c:85:e5:
                    69:6a:d6:0a:7a:b9:9b:65:37:e7:af:3a:1c:f7:12:
                    ba:43:f3:e3:ba:c9:89:d4:d8:78:38:30:20:eb:4b:
                    b6:c0:a3:d3:31:78:60:9e:f3:be:c3:24:75:60:67:
                    93:2f:9c:a5:94:5a:13:fe:4f:72:20:9b:17:a3:08:
                    77:c5:ce:7d:4a:9f:48:ea:45:52:95:e5:f4:ce:c9:
                    0d:e0:ff:cf:84:41:f0:8e:8c:12:7c:7a:0c:90:6b:
                    f6:a3:b0:6a:8c:7a:c0:1b:55:c6:e1:ad:0f:41:a3:
                    ad:89:c2:80:b0:ff:23:48:58:5e:a8:ea:c4:72:39:
                    09:1a:91:c8:fb:80:5c:9d:c1:a1:7b:87:58:53:e3:
                    7f:b7:6b:34:ff:85:35:3a:46:02:5c:6a:1b:4b:a0:
                    51:eb:7d:cb:61:02:36:22:a3:7b:e7:d9:55:b6:d3:
                    08:47:c5:00:d8:2d:76:98:88:6a:c4:d6:a7:eb:d9:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:64:9B:31:1F:42:FB:D4:AF:A7:6F:46:B7:EF:62:9A:29:41:EE
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f8:ec:d0:65:69:c7:18:b9:f1:8f:27:e0:7a:25:37:63:08:
         c5:b7:80:22:61:ac:08:f4:47:f3:20:61:35:88:f1:a1:17:0f:
         40:ce:bb:19:97:2d:db:3c:5d:76:55:67:0b:63:1c:78:1d:a6:
         cb:c9:43:0d:ec:6c:54:34:f1:30:0a:a4:92:f6:16:c6:7a:5b:
         f1:0c:ba:43:dd:23:01:11:b1:9e:39:a6:89:3f:37:d7:77:32:
         d3:31:43:d4:3a:83:47:45:61:32:44:f7:ed:5e:1c:18:d8:98:
         9a:bf:60:a7:0a:f7:b7:de:4b:30:c9:54:d8:63:1b:ea:c1:d2:
         11:a0:05:b1:6d:2f:f1:7e:20:32:70:57:b6:37:c7:d2:57:d1:
         63:95:a1:73:4f:36:cf:ae:66:78:8e:24:00:f4:b1:73:91:a5:
         66:49:66:40:ab:99:49:ae:dc:e6:09:dc:6d:39:fb:e1:38:07:
         79:98:13:c4:00:5d:2c:63:58:34:de:b0:b0:cb:9d:d1:af:6a:
         ed:a8:cd:ef:41:82:07:c0:cb:11:fb:46:74:93:ea:86:32:b9:
         04:4b:2d:d9:e2:b0:c2:37:3b:43:db:a4:1c:67:11:f2:77:be:
         14:53:ec:9a:89:3f:70:9c:c3:9f:bb:d0:a2:be:98:d0:b2:2d:
         f8:ac:e3:0a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RTUxNDExMC8GA1UEBRMoRDJBREJBRjBEN0Q1MkNCOTRENEExMzk3OEIzMjA1M0JD
REY3N0EwRjAeFw0yNDA1MTcwNzM2NDJaFw0yNDA1MjQwNzM2NDJaMBgxFjAUBgNV
BAMTDTY2NDcwOTBhLWI2MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ/OG4/keLRw2nF7su1Vm7VywrD6hwXKGfkhPbIR2BjDrTtMlTiby4Eezh1cpr
LPQRhFof9V3fkUNoz+aQ/5hhsDC0Vc24FQyF5Wlq1gp6uZtlN+evOhz3ErpD8+O6
yYnU2Hg4MCDrS7bAo9MxeGCe877DJHVgZ5MvnKWUWhP+T3IgmxejCHfFzn1Kn0jq
RVKV5fTOyQ3g/8+EQfCOjBJ8egyQa/ajsGqMesAbVcbhrQ9Bo62JwoCw/yNIWF6o
6sRyOQkakcj7gFydwaF7h1hT43+3azT/hTU6RgJcahtLoFHrfcthAjYio3vn2VW2
0whHxQDYLXaYiGrE1qfr2ffTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUghdkmzEf
QvvUr6dvRrfvYpopQe4wHwYDVR0jBBgwFoAU0q268NfVLLlNShOXizIFO833eg8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFNTE0L0Q4RURGNjhFNkVG
NTExRUVCRDE4MEEzMkM0RjlBRTAyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2Vn
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMHEyNjhOZlZMTGxOU2hPWGl6SUZPODMzZWc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF
NTE0L0Q4RURGNjhFNkVGNTExRUVCRDE4MEEzMkM0RjlBRTAyLzBxMjY4TmZWTExs
TlNoT1hpeklGTzgzM2VnOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJz47NBlaccYufGPJ+B6JTdjCMW3gCJhrAj0R/MgYTWI8aEXD0DOuxmX
Lds8XXZVZwtjHHgdpsvJQw3sbFQ08TAKpJL2FsZ6W/EMukPdIwERsZ45pok/N9d3
MtMxQ9Q6g0dFYTJE9+1eHBjYmJq/YKcK97feSzDJVNhjG+rB0hGgBbFtL/F+IDJw
V7Y3x9JX0WOVoXNPNs+uZniOJAD0sXORpWZJZkCrmUmu3OYJ3G05++E4B3mYE8QA
XSxjWDTesLDLndGvau2oze9BggfAyxH7RnST6oYyuQRLLdnisMI3O0PbpBxnEfJ3
vhRT7JqJP3Ccw5+70KK+mNCyLfis4wo=
-----END CERTIFICATE-----
Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org