Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File:                     bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier:          7uIgnQtRovb7FzlB8LSrdqJnAklY7xis/ZkX6pKbw0Q=
Subject key identifier:   39:F8:0D:17:41:37:A4:9A:81:3A:37:4C:3B:C7:C6:5A:18:33:6B:CB
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number:          0246
Signing time:             Wed 01 May 2024 04:21:01 +0000
Manifest this update:     Wed 01 May 2024 04:21:00 +0000
Manifest next update:     Wed 08 May 2024 04:21:00 +0000
Files and hashes:         1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: FUaOtkDS5JQQr7kGNysYyUsXYj34LC8HULwr65F0law=)
                          2: 7B8DCA22D53F11EE98B61A0EC4F9AE02.roa (hash: GLDIh0I+WZrdD45kcVfxksE1LMMouxKgbwehtWz1oI4=)
                          3: 134DA870DC1611ECAACFC563C4F9AE02.roa (hash: cW4I1UNoPJA8LD5gXTerXs0oFpEE949rMRy/rNvaBhE=)
                          4: 0D207E32BE8711EE9C60D31CC4F9AE02.roa (hash: z+GKrvEqjCCqvC/1p+CkC2KpPlD1Xh1mIWkhDZjsfHA=)
                          5: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: vg1DEPzwmh8qE2AidumeQ/fULrz80QgxAjtYil40UCo=)
                          6: 1798FA5630DF11ED9C562309C4F9AE02.roa (hash: 30DPj1Ur+aGoeQXgrocvUURCS81rNeM67S01JBFeIZM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: May  1 04:21:00 2024 GMT
            Not After : May  8 04:21:00 2024 GMT
        Subject: CN=6631c32c-860f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:7c:37:c6:48:88:91:4c:d4:8b:19:97:2a:
                    de:49:cc:92:ad:bc:4c:02:a7:bc:aa:f6:06:46:43:
                    d3:ad:05:bf:02:c6:1b:a6:73:e5:2e:df:e4:07:2e:
                    26:c6:ca:19:81:c0:2b:ef:1b:1a:58:35:82:55:01:
                    53:0f:ab:64:94:23:3d:d5:48:78:91:9e:1a:a8:57:
                    5d:78:ef:6d:d3:59:60:62:b7:ba:3c:97:b5:1c:85:
                    f7:d9:ba:71:25:3b:28:d1:25:80:f8:9e:07:e5:4b:
                    bf:68:9f:e3:64:50:6f:fb:fd:bf:59:dc:03:12:b0:
                    dd:ea:09:c6:28:c7:74:32:15:00:f2:e2:f0:75:f1:
                    53:2c:fd:cf:71:ca:54:6d:85:b5:c6:84:59:4a:e1:
                    c0:6d:3c:f5:87:68:80:e3:12:89:43:f4:15:9b:f8:
                    62:9f:27:df:e8:4b:f4:e3:55:60:ed:4e:fa:5f:4e:
                    fd:8c:87:10:40:bf:1e:a3:bf:fe:a5:2c:1f:12:b3:
                    48:55:eb:cc:14:21:fe:fb:82:bd:39:8a:c4:52:dd:
                    24:2c:31:6e:30:86:42:6c:3c:58:fa:6d:b5:11:ff:
                    6c:cb:b8:14:29:97:72:98:90:d8:93:2a:3d:15:44:
                    d5:a2:65:e5:b4:dd:f4:44:69:5a:96:31:c6:b4:d2:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F8:0D:17:41:37:A4:9A:81:3A:37:4C:3B:C7:C6:5A:18:33:6B:CB
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:bc:0b:97:ca:12:6b:aa:a4:a2:ed:9a:25:79:2b:e8:9a:
         11:9c:ef:5a:b5:c7:a8:15:14:0f:8c:fa:f3:68:39:17:cf:71:
         66:c5:ae:43:78:ca:e2:01:17:a6:80:a3:1e:2c:3c:84:43:30:
         c9:cf:2b:55:5c:37:29:e6:b0:cb:33:2c:5f:15:34:71:a7:9e:
         e6:16:8f:f9:75:97:4b:55:48:5a:38:91:ba:a7:e9:3f:81:de:
         56:dd:16:7d:e7:dc:4e:37:cc:7b:00:2f:ed:d3:72:d3:93:7a:
         aa:3b:1f:9a:15:bd:60:e8:af:44:3f:7b:5d:40:ce:8a:97:5b:
         f0:f3:86:28:e5:11:2d:55:f9:bb:1b:26:ed:e5:a3:61:d2:0a:
         eb:3e:b9:ce:a6:65:e9:10:b7:94:2e:ee:3b:6a:27:ea:5e:d6:
         59:b4:af:7a:58:ab:77:36:8f:29:b8:5e:01:17:c4:e9:d0:e6:
         20:e2:41:6e:0e:14:eb:ee:02:ff:c9:7e:64:93:a6:7a:e7:09:
         4d:bc:77:d6:5f:8e:4a:57:22:27:e7:f1:25:9b:25:67:05:2d:
         4e:53:2a:c7:0b:05:50:4b:01:3a:eb:f1:17:db:32:18:da:3f:
         d2:f9:4e:31:f7:3b:e7:e1:2c:a9:cb:15:16:8a:3b:f7:c0:67:
         32:0b:18:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx
MjcwMzg2MDgwHhcNMjQwNTAxMDQyMTAwWhcNMjQwNTA4MDQyMTAwWjAYMRYwFAYD
VQQDEw02NjMxYzMyYy04NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KR8N8ZIiJFM1IsZlyreScySrbxMAqe8qvYGRkPTrQW/AsYbpnPlLt/kBy4m
xsoZgcAr7xsaWDWCVQFTD6tklCM91Uh4kZ4aqFddeO9t01lgYre6PJe1HIX32bpx
JTso0SWA+J4H5Uu/aJ/jZFBv+/2/WdwDErDd6gnGKMd0MhUA8uLwdfFTLP3PccpU
bYW1xoRZSuHAbTz1h2iA4xKJQ/QVm/hinyff6Ev041Vg7U76X079jIcQQL8eo7/+
pSwfErNIVevMFCH++4K9OYrEUt0kLDFuMIZCbDxY+m21Ef9sy7gUKZdymJDYkyo9
FUTVomXltN30RGlaljHGtNJ3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn4DRdB
N6SagTo3TDvHxloYM2vLMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl
aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR77wLl8oSa6qkou2aJXkr6JoRnO9atceoFRQPjPrzaDkXz3Fmxa5D
eMriARemgKMeLDyEQzDJzytVXDcp5rDLMyxfFTRxp57mFo/5dZdLVUhaOJG6p+k/
gd5W3RZ959xON8x7AC/t03LTk3qqOx+aFb1g6K9EP3tdQM6Kl1vw84Yo5REtVfm7
Gybt5aNh0grrPrnOpmXpELeULu47aifqXtZZtK96WKt3No8puF4BF8Tp0OYg4kFu
DhTr7gL/yX5kk6Z65wlNvHfWX45KVyIn5/ElmyVnBS1OUyrHCwVQSwE66/EX2zIY
2j/S+U4x9zvn4SypyxUWijv3wGcyCxh9
-----END CERTIFICATE-----
Generated at Wed May 1 05:59:14 2024 by rpki-client on console-fra.rpki-client.org