Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File:                     pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier:          E2049BkZe/u1a/OvRgFCKIvDfmXzxmho3GhfIK9J5eo=
Subject key identifier:   FA:FB:2A:A7:7A:2F:4C:9D:48:C1:E8:C0:AF:08:46:14:0F:C0:47:93
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer:       /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number:          CD
Signing time:             Tue 07 May 2024 06:11:22 +0000
Manifest this update:     Tue 07 May 2024 06:11:21 +0000
Manifest next update:     Tue 14 May 2024 06:11:21 +0000
Files and hashes:         1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: n1S7NlUsbwAyC3zPaE9S5iP97X+lHB2tJPSKELZJl7k=)
                          2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: G2cUE4XCDbRjo3hZZ2YVvtK0RuJ9Lk3l6kRgEwAu52s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
                          rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
        Validity
            Not Before: May  7 06:11:21 2024 GMT
            Not After : May 14 06:11:21 2024 GMT
        Subject: CN=6639c60a-5428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:6d:c6:eb:f8:85:49:50:b3:74:32:12:49:
                    f4:89:7f:07:01:0d:3d:48:88:56:eb:1c:a6:70:74:
                    91:55:80:63:d4:6c:9e:87:84:80:84:f4:63:e7:7b:
                    e4:00:b8:14:dd:da:26:ec:71:22:14:78:ea:cd:e8:
                    b1:93:b3:76:2a:da:44:c1:fc:76:ba:82:2e:f6:0a:
                    6a:fd:22:94:ff:54:50:a2:aa:d9:16:5c:5f:dd:53:
                    e5:a9:7d:ad:ff:92:fb:0d:c6:b8:21:e7:b2:35:e4:
                    92:29:fd:99:e5:b5:6d:8c:66:3c:24:f4:3b:0b:49:
                    62:60:a9:e0:ac:20:66:d1:cc:d7:49:3f:bc:4e:1e:
                    59:b7:6c:ba:29:6a:d2:86:d0:d8:28:73:4f:9c:07:
                    e6:14:e5:da:b6:23:ed:c2:57:63:d4:ed:88:ec:4b:
                    5c:75:85:e4:c4:f9:7b:e1:9b:a6:18:2f:29:92:63:
                    f2:1c:0a:2a:39:aa:2e:4b:6d:05:ba:f9:68:48:d8:
                    2a:9d:f5:e0:fe:63:ca:39:d6:61:eb:91:a5:78:7e:
                    29:81:a4:ec:0d:23:2a:3a:98:75:37:52:cc:a7:95:
                    92:2f:ce:0a:c6:32:77:a8:13:e8:34:a2:ed:6d:e2:
                    08:1b:39:e1:d4:fa:79:78:4f:29:83:06:3a:75:2e:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:2A:A7:7A:2F:4C:9D:48:C1:E8:C0:AF:08:46:14:0F:C0:47:93
            X509v3 Authority Key Identifier:
                keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:13:2b:d4:cc:a8:88:f9:07:37:10:6f:77:67:2a:54:6e:ca:
         e4:35:7f:17:5a:3d:93:68:a8:91:70:0f:c9:b2:46:6a:3e:36:
         17:37:1f:8f:85:49:1f:8a:ef:cf:1e:0b:49:37:57:ab:07:40:
         d9:b2:f6:96:bd:c7:c6:34:cd:df:a5:a5:76:04:c1:7f:c0:30:
         76:7a:0a:e1:cb:6b:39:4a:58:d5:43:d0:26:55:58:82:39:37:
         cb:da:ca:77:0c:61:61:59:41:91:63:8c:a8:8c:e2:09:d3:38:
         dd:e9:d0:67:e6:8d:f7:4a:d5:7f:de:75:1c:44:97:33:72:32:
         f7:31:8f:fb:25:43:79:c3:36:c7:9c:96:fd:d0:e8:8c:fa:d8:
         fc:da:21:e8:c9:8f:d1:76:6b:5a:61:b4:28:e8:1b:5e:7d:41:
         2d:a0:db:e5:ac:48:59:9b:5c:04:66:1c:a2:0c:5f:54:66:b1:
         3d:a4:3b:82:62:01:8f:52:aa:73:b7:68:9a:db:1e:4c:8e:7a:
         92:3f:c6:de:fb:59:e3:7a:2f:49:17:0e:72:8c:e0:34:5b:3a:
         c0:81:5d:94:84:36:ab:2a:96:ca:0e:7d:1c:ef:39:06:fa:a9:
         8b:0b:85:70:72:5f:43:b5:5f:62:64:49:d3:ba:06:55:d9:ed:
         2c:11:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:01:24 2024 by rpki-client on console-fra.rpki-client.org