Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
File:                     gL6TDjBkmxKs7o3EC1dat93mSUU.mft (raw, json)
Hash identifier:          w/4PhM0ByfcYXXq4RZJjYAagKZvF0321MgBEP2eKk6w=
Subject key identifier:   42:D8:10:45:E4:31:10:A0:77:32:E9:2F:26:57:63:81:D0:A3:0C:91
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Certificate issuer:       /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
Manifest number:          7A
Signing time:             Wed 15 May 2024 07:30:08 +0000
Manifest this update:     Wed 15 May 2024 07:30:07 +0000
Manifest next update:     Wed 22 May 2024 07:30:07 +0000
Files and hashes:         1: gL6TDjBkmxKs7o3EC1dat93mSUU.crl (hash: 3Pv+uF6y1LivMhaWyNJUKAUkzhAs8Yui9obciE3Ejaw=)
                          2: F43FF9A8AA7511EE9BF3CC35C4F9AE02.roa (hash: WKYiP49W1hPEBg5xPJNDaypzL2WmJIjN8JIxlvH+Nc8=)
                          3: F0FB94ACA95611EEA6E7DB7AC4F9AE02.roa (hash: zhhux1n5VimQG2Opw0t79vR4Z74YBehcUmhiid+R0gw=)
                          4: 17A27C7E116211EF8FC7E061C4F9AE02.roa (hash: OfXLw74eEnD+wALnxMrVwPI67xdf6M5/aHwWE7Uyjy8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Validity
            Not Before: May 15 07:30:07 2024 GMT
            Not After : May 22 07:30:07 2024 GMT
        Subject: CN=66446480-dca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:bf:46:55:ca:6c:e4:ed:80:6c:41:2a:6e:
                    64:57:0a:cf:0f:b9:7a:f5:97:ba:c2:4b:da:e8:b1:
                    84:5e:71:29:f3:7e:bc:77:db:0d:96:f6:17:8a:52:
                    ad:c9:42:00:11:64:4e:aa:08:fa:2a:45:19:f7:65:
                    19:57:b0:44:2d:ed:19:1b:c5:ef:90:f1:0f:64:c6:
                    50:91:e5:1e:63:98:73:35:a6:97:bf:7b:57:df:85:
                    96:ff:23:94:30:97:9f:3a:73:db:fd:88:78:57:ee:
                    52:f4:94:df:75:87:21:2f:f3:da:cb:21:b1:aa:ff:
                    69:c2:12:45:24:50:a0:74:5a:73:08:20:a7:54:8c:
                    e5:f0:52:e0:2d:c1:de:e3:50:40:23:f9:5e:04:c0:
                    9a:9f:43:3f:9c:e7:bd:0f:21:be:d8:00:76:c8:4d:
                    95:93:c1:48:2a:39:96:08:d9:3c:3a:dd:74:fd:cd:
                    79:4e:b3:5f:e5:4a:b8:4f:b3:f0:51:70:20:91:1a:
                    ae:1a:cd:ea:ad:66:84:2d:41:9b:19:1a:d3:cd:b4:
                    f6:b1:cb:e9:a2:ce:59:4e:de:d8:12:d4:30:19:47:
                    3b:78:bc:52:eb:bd:b9:83:6a:75:f6:31:10:6b:e7:
                    9d:ec:08:85:97:e6:0b:2c:c7:41:98:93:2d:fd:61:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:10:45:E4:31:10:A0:77:32:E9:2F:26:57:63:81:D0:A3:0C:91
            X509v3 Authority Key Identifier:
                keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:cd:ad:0e:bf:60:76:23:da:78:4f:01:d6:c1:cb:0b:65:
         a6:56:ca:b4:4e:f3:23:aa:b4:30:23:05:53:09:bf:f4:bd:a4:
         90:d3:a3:28:51:5f:22:62:a0:8b:ee:22:40:83:0f:89:d1:1a:
         fb:36:5d:eb:86:be:44:38:7b:7d:17:9a:08:f8:d8:3e:91:7e:
         e7:00:96:18:95:6c:3f:16:7d:b8:95:05:77:c1:69:63:f8:7f:
         09:ef:13:80:5d:5d:66:f6:07:de:2b:ea:30:ad:10:08:60:85:
         e4:fa:51:1e:aa:7d:bf:56:0b:e5:4c:20:9f:93:d3:3f:4e:9d:
         7f:48:c3:19:8c:f0:44:52:22:1b:7f:85:61:91:ad:5b:78:ca:
         09:42:d4:66:6c:9c:21:fe:81:02:ec:20:60:bc:4f:44:a5:e5:
         e0:8d:00:e2:8f:02:1c:de:ec:5f:7a:7d:27:63:d5:e3:d9:67:
         82:de:10:ae:e3:89:65:44:5e:41:6d:20:8e:8e:c9:7a:6d:5c:
         c9:dc:b6:b1:7d:79:52:e0:18:55:55:1d:54:53:32:8f:80:20:
         d4:49:7d:9e:39:d5:0f:09:07:1d:73:01:ea:3d:85:9a:d5:ac:
         df:7f:5f:05:5f:de:5a:3c:96:b0:b0:b6:69:28:75:88:b2:a4:
         24:23:ec:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDMzMxMTAvBgNVBAUTKDgwQkU5MzBFMzA2NDlCMTJBQ0VFOERDNDBCNTc1QUI3
RERFNjQ5NDUwHhcNMjQwNTE1MDczMDA3WhcNMjQwNTIyMDczMDA3WjAYMRYwFAYD
VQQDEw02NjQ0NjQ4MC1kY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3bK/RlXKbOTtgGxBKm5kVwrPD7l69Ze6wkva6LGEXnEp8368d9sNlvYXilKt
yUIAEWROqgj6KkUZ92UZV7BELe0ZG8XvkPEPZMZQkeUeY5hzNaaXv3tX34WW/yOU
MJefOnPb/Yh4V+5S9JTfdYchL/PayyGxqv9pwhJFJFCgdFpzCCCnVIzl8FLgLcHe
41BAI/leBMCan0M/nOe9DyG+2AB2yE2Vk8FIKjmWCNk8Ot10/c15TrNf5Uq4T7Pw
UXAgkRquGs3qrWaELUGbGRrTzbT2scvpos5ZTt7YEtQwGUc7eLxS6725g2p19jEQ
a+ed7AiFl+YLLMdBmJMt/WH4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELYEEXk
MRCgdzLpLyZXY4HQowyRMB8GA1UdIwQYMBaAFIC+kw4wZJsSrO6NxAtXWrfd5klF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMzMy81NDI2NUYzNDY2
ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214S3M3bzNFQzFkYXQ5M21T
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dMNlREakJrbXhLczdvM0VDMWRhdDkzbVNVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEMzMy81NDI2NUYzNDY2ODcxMUVFQjkzRDNGNkNDNEY5QUUwMi9nTDZURGpCa214
S3M3bzNFQzFkYXQ5M21TVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGss2tDr9gdiPaeE8B1sHLC2WmVsq0TvMjqrQwIwVTCb/0vaSQ06Mo
UV8iYqCL7iJAgw+J0Rr7Nl3rhr5EOHt9F5oI+Ng+kX7nAJYYlWw/Fn24lQV3wWlj
+H8J7xOAXV1m9gfeK+owrRAIYIXk+lEeqn2/VgvlTCCfk9M/Tp1/SMMZjPBEUiIb
f4Vhka1beMoJQtRmbJwh/oEC7CBgvE9EpeXgjQDijwIc3uxfen0nY9Xj2WeC3hCu
44llRF5BbSCOjsl6bVzJ3LaxfXlS4BhVVR1UUzKPgCDUSX2eOdUPCQcdcwHqPYWa
1azff18FX95aPJawsLZpKHWIsqQkI+yT
-----END CERTIFICATE-----
Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org