Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File:                     bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier:          8MNThmWrc/u3ArEwvvJCS21lmsNEAC3V+QCLSYXLais=
Subject key identifier:   93:D8:BE:42:FE:C0:DB:D5:F4:86:29:21:DB:24:10:9D:87:D3:35:57
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       096B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number:          0950
Signing time:             Sat 04 May 2024 21:15:41 +0000
Manifest this update:     Sat 04 May 2024 21:15:40 +0000
Manifest next update:     Sat 11 May 2024 21:15:40 +0000
Files and hashes:         1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: AeyGuP1wR6ffEy5fAJdBwGfi4RiTaPWSLOmwNWeYzoE=)
                          2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: 1clJlOZM8oS6uj6S/tJNTJIPq9IsyLwsmMNQrfRkWRI=)
                          3: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: TPzeQS2bK+HgnD2Ywg81GgKCXNRcrpJV4c4y6kOHkiI=)
                          4: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: p+JIQBFEOgYXDXUyhadg34/LgK5/3/gHTYuz5O7OCcg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 21:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: May  4 21:15:40 2024 GMT
            Not After : May 11 21:15:40 2024 GMT
        Subject: CN=6636a57c-a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:2f:89:bb:af:16:58:84:2d:19:2a:c6:c3:
                    e4:9e:86:59:07:47:e5:97:e0:1e:a6:85:6e:75:f2:
                    3f:ca:01:1c:45:9a:fb:4a:34:b4:13:e0:a2:01:ba:
                    98:08:22:53:18:e9:84:85:3b:2a:3c:c7:4d:cd:5f:
                    00:30:3d:03:35:8b:52:36:89:c3:d6:e1:c1:cf:ad:
                    4c:bd:a3:4f:f5:fb:98:62:65:5d:37:bb:31:37:4a:
                    ea:97:0b:82:cc:c1:2b:2e:ea:2d:10:37:c5:12:68:
                    8e:c3:6c:ab:fa:ce:e3:3e:a9:93:2d:f2:db:8a:81:
                    7c:80:99:7d:22:e7:ce:03:4a:07:82:dd:5d:27:3f:
                    58:f7:82:8f:0e:2e:a2:04:63:c1:04:80:67:59:b1:
                    5a:88:04:de:c6:1d:34:6e:2d:d9:af:71:e4:a8:1d:
                    39:4a:b6:11:83:55:41:0d:bb:07:a0:f6:dc:ce:08:
                    04:28:5a:8a:0c:c4:8b:72:37:b0:28:da:86:0a:af:
                    8e:03:1e:ad:8a:39:d9:27:73:9d:8b:c1:b8:93:27:
                    77:ac:e4:93:42:53:b7:05:27:03:a8:e0:69:56:67:
                    ee:73:7d:75:f4:c4:ba:c8:d1:ce:a5:bc:54:7d:25:
                    f2:7c:fb:6c:16:e7:e7:1c:52:26:10:d1:9e:22:d1:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:BE:42:FE:C0:DB:D5:F4:86:29:21:DB:24:10:9D:87:D3:35:57
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:00:7c:34:45:f1:18:a2:96:ee:18:74:d5:fc:e9:22:9c:62:
         d5:ba:a4:ed:ed:0b:21:fc:6b:2a:8e:23:c3:3b:10:f0:9b:47:
         31:de:4d:7f:48:60:25:54:a9:e6:7e:a7:62:34:1b:2d:a4:a3:
         a0:f8:e0:7d:eb:50:15:9d:f6:46:48:db:37:04:05:ef:74:2c:
         2d:40:3b:2f:83:5b:b8:ce:45:d2:22:81:76:3b:e6:b7:49:07:
         e5:16:59:bb:d4:73:c8:f6:be:ec:62:cf:df:d2:e0:31:b9:06:
         c5:1b:53:8f:2f:ed:d8:2f:3c:4e:1a:e7:de:26:ec:61:65:bd:
         04:04:79:ad:f0:71:07:b6:e9:27:e0:6e:87:9d:e3:f3:4b:20:
         7c:35:fb:71:94:c6:20:f3:c0:e2:83:11:ef:8c:9b:42:5b:5b:
         be:3e:54:f0:9d:84:1c:af:48:c1:71:7c:5c:61:10:88:e5:d9:
         f4:4d:b5:9e:8c:60:63:d7:f8:06:93:f5:d5:0b:64:2e:21:c4:
         a1:ef:78:aa:54:20:67:2e:21:f5:d7:6d:de:e1:a9:ee:27:f7:
         1d:cf:97:b5:42:af:dd:2f:ef:4d:7c:8d:89:93:05:73:be:3b:
         ca:02:46:41:0b:68:97:43:36:57:48:9a:93:fc:76:07:b6:14:
         6e:ff:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org