Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
File:                     75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json)
Hash identifier:          574qLSodL/ndbJXlhcyDEXcXlCnd1FwZBFIdKvFnzcs=
Subject key identifier:   B3:1D:A1:62:FB:34:B7:57:0A:5E:49:EC:CD:F0:AC:18:1B:5D:01:1C
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
Manifest number:          B9
Signing time:             Wed 01 May 2024 06:45:54 +0000
Manifest this update:     Wed 01 May 2024 06:45:54 +0000
Manifest next update:     Wed 08 May 2024 06:45:54 +0000
Files and hashes:         1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: CS5j+hozf6gEshngH/0ybamCysN6NEj1fe63gTh1pE4=)
                          2: 3CFB1F1CEF2B11EDA9DCF923C4F9AE02.roa (hash: blcMZSvo6KhAhOHjPZ1Rt0X5o7NSUgv8BA41P7IoGJ8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: May  1 06:45:54 2024 GMT
            Not After : May  8 06:45:54 2024 GMT
        Subject: CN=6631e522-5946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:f2:98:e1:51:88:2f:69:3f:c1:fb:a5:bf:
                    3b:53:ed:18:e4:3b:3c:04:a9:3f:7f:04:54:aa:56:
                    33:d1:a5:40:5c:e7:6f:4a:1e:7e:81:bb:7c:75:32:
                    dc:1b:10:29:d0:4e:41:f8:88:7f:5c:21:15:eb:92:
                    cb:a4:79:9b:c7:e6:a0:35:5c:ea:40:d3:ef:03:88:
                    5a:73:2f:ce:73:92:28:55:8c:90:a4:45:88:d4:bb:
                    e0:ca:88:36:d5:39:05:9f:03:bb:ce:3f:7a:66:07:
                    61:c5:8d:5e:d0:c2:31:75:d1:51:0f:e5:ad:0b:9f:
                    bc:bd:ac:30:42:a4:a4:cd:b3:dd:d3:72:46:8e:f2:
                    28:50:71:de:cf:77:20:32:52:03:2b:63:62:6b:93:
                    ba:cf:d7:a0:ab:fc:73:84:2b:82:77:72:aa:fd:c8:
                    c9:fb:6f:4c:fb:4d:ad:43:41:ba:36:41:ea:64:db:
                    78:e3:88:2c:ef:67:61:d1:b9:db:8f:5f:ed:92:b3:
                    c6:74:13:35:ac:f6:97:5f:b9:8e:5f:3c:59:05:be:
                    8e:cf:35:2f:2f:2b:6c:5e:fb:42:84:8f:be:8a:40:
                    7c:e8:3d:d1:c9:20:0a:51:b5:89:fc:4c:f4:23:42:
                    c4:ab:27:3e:00:01:71:d9:eb:3d:5e:c9:de:0e:b5:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1D:A1:62:FB:34:B7:57:0A:5E:49:EC:CD:F0:AC:18:1B:5D:01:1C
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:b1:ba:6f:20:1a:aa:2d:3c:63:d2:ff:ee:ab:0a:dd:6a:
         2e:26:40:3f:b3:bd:44:31:67:82:59:46:8c:b6:6d:95:39:5e:
         75:56:e5:8b:d3:ad:a1:17:a3:d8:40:e0:84:66:03:8c:44:d9:
         b2:df:5f:a8:92:24:9a:e9:08:0e:2c:97:e4:71:0b:77:93:bb:
         df:49:b7:13:a9:19:78:70:1c:f9:2d:46:8d:2d:99:47:f2:4d:
         31:ca:c8:80:c0:4c:76:0f:9a:d1:4f:69:94:e0:e4:11:34:b2:
         f8:f8:ad:ff:0f:6d:aa:06:c0:2c:bb:40:05:f4:47:5b:37:52:
         35:13:34:21:6e:df:42:13:ac:b1:cf:80:35:b2:57:c3:62:11:
         42:1f:a1:8b:06:6e:a4:d2:d4:3d:03:f4:ff:c0:bf:74:71:19:
         4d:3d:0f:c8:98:d5:ff:34:bc:ba:ed:c0:7a:aa:1c:22:ac:95:
         67:0d:29:7b:3c:8c:73:f8:6d:87:6b:92:d5:c0:c2:21:74:8f:
         1c:66:73:eb:a4:e1:fd:05:19:01:15:69:32:fa:23:85:46:93:
         c8:66:63:d0:5e:1c:a2:53:a0:9e:98:90:28:a2:97:5f:a8:ba:
         fe:a5:74:02:98:ef:0f:39:cf:3c:fb:f8:8e:7e:b4:ef:93:16:
         bf:f2:f4:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy
OEUyOEZCNEIwHhcNMjQwNTAxMDY0NTU0WhcNMjQwNTA4MDY0NTU0WjAYMRYwFAYD
VQQDEw02NjMxZTUyMi01OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4l7ymOFRiC9pP8H7pb87U+0Y5Ds8BKk/fwRUqlYz0aVAXOdvSh5+gbt8dTLc
GxAp0E5B+Ih/XCEV65LLpHmbx+agNVzqQNPvA4hacy/Oc5IoVYyQpEWI1Lvgyog2
1TkFnwO7zj96ZgdhxY1e0MIxddFRD+WtC5+8vawwQqSkzbPd03JGjvIoUHHez3cg
MlIDK2Nia5O6z9egq/xzhCuCd3Kq/cjJ+29M+02tQ0G6NkHqZNt444gs72dh0bnb
j1/tkrPGdBM1rPaXX7mOXzxZBb6OzzUvLytsXvtChI++ikB86D3RySAKUbWJ/Ez0
I0LEqyc+AAFx2es9XsneDrWc+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMdoWL7
NLdXCl5J7M3wrBgbXQEcMB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG
MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0M4Ny9FNzgyODU0RUVGMEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1
dDhUZzBFbk1ybklvNG8tMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsmbG6byAaqi08Y9L/7qsK3WouJkA/s71EMWeCWUaMtm2VOV51VuWL
062hF6PYQOCEZgOMRNmy31+okiSa6QgOLJfkcQt3k7vfSbcTqRl4cBz5LUaNLZlH
8k0xysiAwEx2D5rRT2mU4OQRNLL4+K3/D22qBsAsu0AF9EdbN1I1EzQhbt9CE6yx
z4A1slfDYhFCH6GLBm6k0tQ9A/T/wL90cRlNPQ/ImNX/NLy67cB6qhwirJVnDSl7
PIxz+G2Ha5LVwMIhdI8cZnPrpOH9BRkBFWky+iOFRpPIZmPQXhyiU6CemJAoopdf
qLr+pXQCmO8POc88+/iOfrTvkxa/8vS/
-----END CERTIFICATE-----
Generated at Wed May 1 07:55:43 2024 by rpki-client on console-fra.rpki-client.org