Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File:                     RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier:          9EH+b1a67pVOEA4gUkUmETPMhTQ4G7gS/3/qJbvyGMc=
Subject key identifier:   AA:D1:CD:EF:8D:72:D6:19:63:FE:C6:D2:5D:68:EF:BF:5A:23:86:2C
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer:       /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number:          6E
Signing time:             Wed 15 May 2024 07:44:25 +0000
Manifest this update:     Wed 15 May 2024 07:44:25 +0000
Manifest next update:     Wed 22 May 2024 07:44:25 +0000
Files and hashes:         1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: O/mbjzB6rNHqTs5R6b7s5QrI/xhBC1017iPgNSQmi+8=)
                          2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: KY4aaNbNR/WIo9SsVxf2BG+N++qSnRS+00C68EAHaOA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
        Validity
            Not Before: May 15 07:44:25 2024 GMT
            Not After : May 22 07:44:25 2024 GMT
        Subject: CN=664467d9-684c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:52:85:99:29:82:bb:82:d8:30:62:fc:18:
                    38:ae:ee:5d:cd:1d:08:aa:5b:24:96:63:9f:2f:bd:
                    43:4f:6b:29:62:35:18:d3:0b:a3:10:8f:8e:01:e6:
                    cb:4c:e6:b8:77:87:41:02:e4:7c:7d:11:da:43:33:
                    e8:d0:6e:bc:f7:93:31:ce:f2:fc:6e:8d:26:3d:a4:
                    0a:f4:d7:af:ec:15:8d:d4:12:f6:27:7c:1d:f7:03:
                    8f:6e:3f:52:65:48:f7:5f:77:31:bf:df:5f:3c:c2:
                    d3:c4:c1:f1:d5:93:8e:04:ba:9a:d3:7d:53:6b:23:
                    83:52:dc:54:ea:83:83:de:3a:94:cb:29:c4:f2:af:
                    d3:23:c4:e8:3b:24:15:35:9f:2f:19:04:81:ac:eb:
                    a2:68:2e:e0:3b:73:d3:0a:c6:a8:8c:d0:b0:27:78:
                    c0:3e:3b:ff:a5:f4:ae:d4:db:7e:63:46:27:b5:ad:
                    f2:4a:a9:2f:3e:87:e6:d4:72:fa:fe:28:bd:e7:6f:
                    ca:99:d8:b0:34:fb:78:92:33:e6:3f:77:cd:47:59:
                    8a:a4:59:f8:ce:86:db:96:81:94:fd:5a:0a:21:0b:
                    8b:d9:41:34:58:9e:e7:1b:3c:17:8a:d6:5a:44:c7:
                    2c:9f:24:0b:37:af:fe:b4:80:f8:76:4c:9a:61:fe:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:CD:EF:8D:72:D6:19:63:FE:C6:D2:5D:68:EF:BF:5A:23:86:2C
            X509v3 Authority Key Identifier:
                keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:95:1c:00:a7:10:84:f5:41:46:6f:36:c8:0e:f7:0a:72:45:
         ca:16:f8:c3:bf:93:f1:56:01:21:72:8e:fe:2e:62:0b:b7:39:
         b7:a2:91:0e:b5:e9:54:4a:07:de:e5:b7:a3:d1:6c:e6:40:55:
         fb:1a:92:38:2e:31:2f:2f:01:a5:0b:85:6b:47:82:97:ad:76:
         d1:a4:c5:8e:79:51:eb:63:91:51:62:bd:4e:f2:8c:38:17:de:
         2f:13:a5:e0:26:b8:c4:86:c2:86:0a:6a:81:21:15:f7:03:bd:
         b2:fd:ac:47:93:87:6a:b6:84:74:50:ed:db:53:eb:76:e1:54:
         7c:3b:ba:fe:ec:ea:bf:ee:88:c1:41:2e:dc:96:46:ad:c3:e6:
         f0:d4:ee:3a:67:40:96:33:f1:71:9f:cb:86:aa:e1:85:18:2b:
         39:a1:09:fa:fc:58:ae:a5:4b:be:be:aa:cc:4b:94:d1:13:19:
         e5:70:32:da:97:cb:d0:d9:d7:84:63:6d:ff:f1:e3:5d:04:fe:
         c9:4c:45:a1:7d:f1:37:22:97:05:5f:51:e3:10:1a:12:ed:ba:
         49:e3:90:14:8e:0a:6e:6e:25:89:5c:e9:ab:c2:73:43:51:f6:
         81:7f:af:a5:f6:e0:8e:1e:e0:d8:5b:a1:4d:7c:58:fa:98:2a:
         c3:14:88:d7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RjMxRDExMC8GA1UEBRMoNDYwMEMxOEQ2MkM2RjcyNEQ1Qzk1NTA2RjQxQjhDOTVG
QzM5MERDMDAeFw0yNDA1MTUwNzQ0MjVaFw0yNDA1MjIwNzQ0MjVaMBgxFjAUBgNV
BAMTDTY2NDQ2N2Q5LTY4NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxAlKFmSmCu4LYMGL8GDiu7l3NHQiqWySWY58vvUNPayliNRjTC6MQj44B5stM
5rh3h0EC5Hx9EdpDM+jQbrz3kzHO8vxujSY9pAr016/sFY3UEvYnfB33A49uP1Jl
SPdfdzG/3188wtPEwfHVk44EuprTfVNrI4NS3FTqg4PeOpTLKcTyr9MjxOg7JBU1
ny8ZBIGs66JoLuA7c9MKxqiM0LAneMA+O/+l9K7U235jRie1rfJKqS8+h+bUcvr+
KL3nb8qZ2LA0+3iSM+Y/d81HWYqkWfjOhtuWgZT9WgohC4vZQTRYnucbPBeK1lpE
xyyfJAs3r/60gPh2TJph/j0VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqtHN741y
1hlj/sbSXWjvv1ojhiwwHwYDVR0jBBgwFoAURgDBjWLG9yTVyVUG9BuMlfw5DcAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzFELzA1NUFCNTQ0N0RG
NzExRUU4N0I3RDQzMEM0RjlBRTAyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURj
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUmdEQmpXTEc5eVRWeVZVRzlCdU1sZnc1RGNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
MzFELzA1NUFCNTQ0N0RGNzExRUU4N0I3RDQzMEM0RjlBRTAyL1JnREJqV0xHOXlU
VnlWVUc5QnVNbGZ3NURjQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHaVHACnEIT1QUZvNsgO9wpyRcoW+MO/k/FWASFyjv4uYgu3ObeikQ61
6VRKB97lt6PRbOZAVfsakjguMS8vAaULhWtHgpetdtGkxY55UetjkVFivU7yjDgX
3i8TpeAmuMSGwoYKaoEhFfcDvbL9rEeTh2q2hHRQ7dtT63bhVHw7uv7s6r/uiMFB
LtyWRq3D5vDU7jpnQJYz8XGfy4aq4YUYKzmhCfr8WK6lS76+qsxLlNETGeVwMtqX
y9DZ14Rjbf/x410E/slMRaF98TcilwVfUeMQGhLtuknjkBSOCm5uJYlc6avCc0NR
9oF/r6X24I4e4NhboU18WPqYKsMUiNc=
-----END CERTIFICATE-----
Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org