Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          PtXKbe14/5Cxp36TlnM0gtJXLrEA1KmwvTBXJJFnOIM=
Subject key identifier:   FE:32:87:80:73:6E:A3:7E:4A:E6:91:26:3A:A9:41:18:CA:76:0D:CA
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          0811
Signing time:             Thu 16 May 2024 21:58:27 +0000
Manifest this update:     Thu 16 May 2024 21:58:26 +0000
Manifest next update:     Thu 23 May 2024 21:58:26 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: A5zp03tJaGn9wNohP78aAnF3COUqRxDSnBqltz/254s=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: gEbDX3RzY8sVep521pF+eIUJFt6lx0Frnr9TN4RvYm4=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: +18yq2xZTw1zNdRNhQgJ06UGJFn1sQJ6NgJ5C0aSZ+I=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: ihnIybuutNiZ7dnnPxU+ehReMyWFFLtfKVrhAOXbBVE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: May 16 21:58:26 2024 GMT
            Not After : May 23 21:58:26 2024 GMT
        Subject: CN=66468182-0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:8e:5f:e0:ec:8f:8f:03:45:1c:f7:6d:ca:
                    b3:c8:17:d2:31:f5:c6:f3:d9:5d:8a:e9:58:ab:af:
                    7f:18:74:49:9c:95:cd:1d:ad:e0:bb:d8:4d:90:4f:
                    a2:11:db:65:66:a4:fd:fc:68:e4:58:a3:29:92:c7:
                    c4:16:58:a7:70:6a:ec:e4:78:df:23:18:79:97:df:
                    c8:b1:a0:4e:40:61:bd:b2:6d:ac:7f:4a:3a:17:08:
                    47:b9:4e:df:db:6a:ba:c6:20:63:4b:fa:ed:7f:c1:
                    aa:31:93:eb:ce:6a:ec:e0:3c:09:52:1e:23:1d:a9:
                    cd:1d:d9:0f:e4:cb:7a:73:31:f6:12:ea:55:eb:c3:
                    31:c8:6d:26:50:4e:a4:d4:54:31:93:28:40:86:94:
                    91:13:9e:1d:fa:48:fc:68:8e:04:56:a0:00:c0:05:
                    a8:6f:76:76:2f:cd:b9:3f:4e:c4:59:56:ac:b5:10:
                    5b:f3:a6:c7:54:79:a4:cf:d4:cb:de:a1:41:28:c4:
                    69:3f:48:72:63:96:14:0f:bf:81:c5:f2:61:0a:59:
                    0b:94:8d:a1:00:03:29:ad:83:0a:8a:27:71:49:2b:
                    8f:4e:05:4f:8f:37:f1:f9:9d:0c:ba:f5:eb:ee:72:
                    e3:ea:35:0a:72:43:3f:e4:1a:78:28:e5:da:fe:83:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:32:87:80:73:6E:A3:7E:4A:E6:91:26:3A:A9:41:18:CA:76:0D:CA
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:09:af:68:6f:0b:c9:77:cc:79:98:af:42:8d:f9:06:f1:
         d2:52:0e:62:03:4e:46:ff:c0:4c:13:9a:c4:f8:12:44:fc:1e:
         c6:9b:87:80:d2:d8:86:64:6d:9e:2d:1a:57:69:f9:2f:34:44:
         46:5b:56:88:76:ba:f2:3b:32:7c:20:c2:64:da:99:c6:6a:ab:
         60:0e:ab:d7:77:6e:11:fe:4c:9b:4e:8d:ba:6e:81:9b:09:18:
         6e:f8:ea:56:bf:ab:3e:6f:9b:af:2f:ea:f7:cf:98:d5:21:f5:
         58:f4:f0:2a:9e:0d:ec:c8:2f:63:9b:97:dc:1e:ee:38:d7:39:
         a4:c8:a6:71:02:4e:93:11:84:c5:a7:75:48:85:73:44:da:2f:
         65:61:50:38:89:3d:f6:93:d7:d4:6c:fb:34:1e:6a:ed:9f:82:
         97:34:14:a7:31:f9:30:aa:a9:7a:6e:ce:42:6e:06:a9:8b:2c:
         4f:96:9d:54:d0:d6:d3:02:68:25:07:30:0c:43:a2:cd:9d:6c:
         f0:15:c8:f0:fb:c2:dd:e3:e2:94:d3:28:13:c7:fa:38:85:f7:
         31:3b:bb:f0:f4:ba:ca:0c:36:d8:b7:e6:f9:6a:95:60:96:81:
         45:25:5c:4c:f3:04:89:af:83:9e:31:10:aa:33:35:bc:ba:cf:
         82:6a:be:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0MDBERTc1NUUy
NjRBODJCQkMwHhcNMjQwNTE2MjE1ODI2WhcNMjQwNTIzMjE1ODI2WjAYMRYwFAYD
VQQDEw02NjQ2ODE4Mi0wNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyoqOX+Dsj48DRRz3bcqzyBfSMfXG89ldiulYq69/GHRJnJXNHa3gu9hNkE+i
EdtlZqT9/GjkWKMpksfEFlincGrs5HjfIxh5l9/IsaBOQGG9sm2sf0o6FwhHuU7f
22q6xiBjS/rtf8GqMZPrzmrs4DwJUh4jHanNHdkP5Mt6czH2EupV68MxyG0mUE6k
1FQxkyhAhpSRE54d+kj8aI4EVqAAwAWob3Z2L825P07EWVastRBb86bHVHmkz9TL
3qFBKMRpP0hyY5YUD7+BxfJhClkLlI2hAAMprYMKiidxSSuPTgVPjzfx+Z0MuvXr
7nLj6jUKckM/5Bp4KOXa/oOTmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4yh4Bz
bqN+SuaRJjqpQRjKdg3KMB8GA1UdIwQYMBaAFBtWbe9feOMZv8DRQA3nVeJkqCu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjBBQi82QkU1NTBCMEIw
OTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4bV93TkZBRGVkVjRtU29L
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cxWnQ3MTk0NHhtX3dORkFEZWRWNG1Tb0s3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjBBQi82QkU1NTBCMEIwOTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4
bV93TkZBRGVkVjRtU29LN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDHQmvaG8LyXfMeZivQo35BvHSUg5iA05G/8BME5rE+BJE/B7Gm4eA
0tiGZG2eLRpXafkvNERGW1aIdrryOzJ8IMJk2pnGaqtgDqvXd24R/kybTo26boGb
CRhu+OpWv6s+b5uvL+r3z5jVIfVY9PAqng3syC9jm5fcHu441zmkyKZxAk6TEYTF
p3VIhXNE2i9lYVA4iT32k9fUbPs0Hmrtn4KXNBSnMfkwqql6bs5CbgapiyxPlp1U
0NbTAmglBzAMQ6LNnWzwFcjw+8Ld4+KU0ygTx/o4hfcxO7vw9LrKDDbYt+b5apVg
loFFJVxM8wSJr4OeMRCqMzW8us+Car6Y
-----END CERTIFICATE-----
Generated at Thu May 16 22:34:52 2024 by rpki-client on console-ams.rpki-client.org