Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier:          y91hbTL2+taknH1y71gvdapvLFwo0DYbXa9VccxAp+U=
Subject key identifier:   6A:DF:01:31:85:02:61:B2:DC:03:24:34:AF:50:BB:52:AA:64:04:76
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer:       /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number:          4A
Signing time:             Sat 01 Jun 2024 09:34:33 +0000
Manifest this update:     Sat 01 Jun 2024 09:34:32 +0000
Manifest next update:     Sat 08 Jun 2024 09:34:32 +0000
Files and hashes:         1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: LC4H79Jjfd0/m3I69xtibKSNMLoh2oDdgwdGpe3ssZA=)
                          2: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: SDRPwzoZ0Rhe4jtkG3pcG+5QwBQoYK+SqShzeOhWbsI=)
                          3: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: T9OAvqcKR2Vcyhqmt37QjmwF8bQbuv/XSOzyEwce7MA=)
                          4: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: yOwmDYo/6Tqm/tPpcXeo8/c68zUTxd3wLfwfrL3ucVQ=)
                          5: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TcxR5GasmaKH6rGfRvY0IoCldVHXhPAOZAWVkfzaYfo=)
                          6: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: 6NgK+nGcOvONOsxU4FAtDZCrjoU00hf/yGyPQJumcEE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Validity
            Not Before: Jun  1 09:34:32 2024 GMT
            Not After : Jun  8 09:34:32 2024 GMT
        Subject: CN=665aeb28-d4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:db:62:ce:54:72:89:6e:9d:4b:e3:a7:70:
                    bb:4f:00:b4:8d:81:5f:99:bd:65:8c:6a:da:7e:40:
                    ae:77:76:22:ec:fd:e5:e8:9e:e9:22:59:70:c6:a2:
                    9a:5b:5b:17:68:6f:87:36:8f:a1:6d:ce:8e:51:16:
                    fe:b7:a9:50:92:07:34:09:ce:bb:7e:e3:c8:f7:85:
                    46:de:99:6b:2e:1f:9f:1b:53:ed:4c:ab:79:c3:d5:
                    ac:10:0d:bf:59:0c:ea:11:16:5b:d7:b6:fd:98:e4:
                    35:dd:54:9b:2d:c7:05:6c:6b:c3:2f:47:ce:57:1c:
                    aa:90:38:82:ad:e1:a9:17:24:e1:ab:44:6f:be:0b:
                    05:cf:25:da:18:a6:42:2b:5c:fa:03:6d:ab:6e:5b:
                    b5:d2:88:ea:0a:5f:4f:30:c0:87:ec:14:44:ad:15:
                    96:5f:1c:a8:e5:4a:e9:7f:b0:67:5d:d9:13:8f:64:
                    e5:ec:a6:58:b5:20:68:17:15:3e:71:80:f9:87:2d:
                    27:6d:36:d8:c8:83:1f:f8:f4:60:27:40:8f:39:db:
                    1f:34:06:c1:29:25:4a:d3:aa:c4:95:6c:b3:c2:dd:
                    7f:b2:3f:b8:a9:2c:ac:6a:86:92:8d:1e:c8:9b:c7:
                    90:66:55:7f:3b:14:f7:07:f8:a4:6a:69:2f:80:52:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:01:31:85:02:61:B2:DC:03:24:34:AF:50:BB:52:AA:64:04:76
            X509v3 Authority Key Identifier:
                keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:94:35:73:cc:2e:9e:84:30:ce:96:68:d2:7d:0b:40:e7:
         63:d4:dc:b1:92:85:bd:95:a0:99:17:13:a1:fe:af:1f:8f:95:
         ff:c4:98:06:3c:34:48:a8:fa:0f:20:26:62:0c:0c:7e:7e:5c:
         a6:5f:85:a8:42:86:1f:34:67:db:14:47:4d:d6:cb:9a:1f:25:
         fe:e1:79:8d:e7:0d:34:6b:a7:63:b5:fc:b0:88:cd:b4:5c:82:
         fe:32:45:1d:55:d5:da:5d:3a:b8:bc:1c:45:25:9c:e4:f9:74:
         00:1f:f7:34:9e:fb:5d:b4:23:87:7d:e4:f7:bb:aa:d1:4b:cb:
         6d:f3:8a:4e:8e:99:4c:b9:d7:a4:c6:7c:fe:ed:66:48:40:c4:
         03:9c:c2:4c:26:99:60:3b:35:cb:c6:19:b4:13:4f:30:3f:79:
         f5:1b:71:b5:9d:4f:96:1a:e7:8b:83:bf:47:37:be:1d:2d:98:
         3e:10:b1:ee:f2:94:65:06:ef:e2:8e:a2:10:6b:18:1e:6a:5d:
         29:04:e4:fe:ba:f8:22:38:66:bb:da:82:9d:00:59:03:75:22:
         4b:c7:48:18:a3:98:b3:ae:7a:42:d7:f9:e0:3a:5b:56:94:ac:
         ee:38:bd:6d:af:e0:88:5d:89:54:e6:0b:98:60:9f:d5:b3:11:
         88:14:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:26 2024 by rpki-client on console-fra.rpki-client.org