Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File:                     pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier:          9Mi1DRScHKExRM1zHY+7QDR2kPFZeJmyXK0OIhsgQ98=
Subject key identifier:   A2:E3:50:2F:24:88:84:24:45:5C:F4:B6:A0:1C:6F:D2:0C:BF:87:AA
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0A62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number:          0A4D
Signing time:             Fri 24 May 2024 20:31:14 +0000
Manifest this update:     Fri 24 May 2024 20:31:14 +0000
Manifest next update:     Fri 31 May 2024 20:31:14 +0000
Files and hashes:         1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: ohEI4zKsD+Z2HaOtWBeF/RH9r4aSA9wGMxTo/gJ8dII=)
                          2: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: hZdNCZhOEgMmUOLzpxK667F37LydOrIPh2KJ7cHFl8M=)
                          3: B6B70B6AB04E11EE91ED6854C4F9AE02.roa (hash: QF9f+pUQoT13KprGL+p1ZKAVyTkPJFcooDk5K3cXJFE=)
                          4: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: C8iXMjUzV0QbuQGRlsfr36SJbDpqnQOR6HISgduh/mM=)
                          5: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: E+dzndQmuSO0n0Sh5pmEn4AaJFit12UJN5O99vYKKSM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 20:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: May 24 20:31:14 2024 GMT
            Not After : May 31 20:31:14 2024 GMT
        Subject: CN=6650f912-7136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:c3:d7:b8:ad:bf:37:d0:fb:65:36:63:4b:
                    1f:56:dd:8c:5f:d9:35:3c:df:64:09:58:38:b0:9e:
                    a5:ff:a8:83:22:cf:0e:fa:d9:7d:58:b1:f1:6b:77:
                    12:db:e3:11:9a:22:61:0b:82:ec:f3:11:c8:d4:d3:
                    5f:fe:49:77:7f:3a:d6:af:81:0e:27:9b:14:9e:20:
                    36:b0:fe:cd:8c:2a:14:6c:ed:c9:3c:25:f2:ba:c5:
                    a5:f5:ab:28:36:db:7c:70:8f:03:45:e9:e3:db:d9:
                    77:ec:c4:8f:b8:c5:82:88:be:d9:79:ce:ad:a5:26:
                    54:37:a6:4f:90:93:5d:78:44:6e:ff:f5:55:4a:18:
                    bb:32:f7:34:71:35:39:9d:27:00:c6:c0:4c:cb:e4:
                    f4:49:5b:2e:e0:9b:19:ec:dd:f8:7c:c0:ba:53:40:
                    2a:10:11:01:1c:8b:b3:61:f9:71:14:b3:f9:a7:f5:
                    19:52:79:8f:5e:bf:4c:69:24:cb:8e:f0:e3:88:8d:
                    ca:40:34:66:76:ad:bc:52:de:3d:cc:62:64:a5:4d:
                    21:10:b6:77:78:4e:13:a9:1a:48:1f:6a:38:08:fc:
                    21:db:7f:48:e9:37:16:76:c6:8d:fa:e8:03:9c:7b:
                    39:e0:b2:ec:2e:0f:2c:7b:30:9e:fa:e0:e5:ba:0f:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:50:2F:24:88:84:24:45:5C:F4:B6:A0:1C:6F:D2:0C:BF:87:AA
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:ec:b3:7c:e8:11:61:db:f7:37:35:4f:7a:47:89:c8:85:
         8b:ab:52:d8:ef:c9:43:f8:22:e5:47:92:8c:a7:19:09:08:c2:
         f5:f4:af:db:43:24:95:dd:08:2a:9e:7a:f9:5c:4d:9b:7a:15:
         fc:92:7b:7b:fc:8f:29:b1:a1:49:94:04:27:48:ec:9c:52:15:
         bf:8e:dd:f6:8a:cb:87:69:9e:4b:a1:df:7e:7c:86:c3:15:d9:
         1e:1f:6a:67:48:f1:42:5c:f4:05:36:55:e5:67:1f:8d:f7:64:
         b9:e5:58:ae:ca:b0:9f:33:a6:3f:52:94:ab:f1:97:9f:de:7f:
         1f:c6:85:11:a5:10:5f:b3:6e:8f:47:05:f1:b9:93:fa:22:dd:
         89:6b:27:97:c2:d7:fc:5f:a4:55:3b:f9:b2:f2:2c:6c:79:25:
         bc:45:b2:1f:c6:67:14:4e:64:22:54:57:3e:6a:ae:0d:bd:7a:
         cb:8c:74:00:c6:25:b6:60:4e:0d:97:ca:51:8b:7e:1b:44:d5:
         7c:9b:24:ad:7b:b1:16:cb:54:ae:79:50:29:fd:4a:67:e5:a9:
         64:54:41:22:33:a0:52:32:98:80:5f:7f:e6:1f:aa:4b:40:cc:
         e9:f6:2d:42:17:15:34:f9:0e:2f:8a:d1:76:25:17:52:d7:c9:
         c2:56:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:26:10 2024 by rpki-client on console-fra.rpki-client.org