Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
File:                     PtgP6zsCGgUkGr5w0aUQqGetcf0.mft (raw, json)
Hash identifier:          +wdpFW4rZ1cQTJJG8oTIvFuEO/hiKV039jzInVFieLE=
Subject key identifier:   62:6F:F9:2A:7E:9D:36:43:92:41:11:B5:1D:14:63:4C:37:BC:22:D3
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Certificate issuer:       /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
Manifest number:          FF
Signing time:             Sat 25 May 2024 05:56:37 +0000
Manifest this update:     Sat 25 May 2024 05:56:36 +0000
Manifest next update:     Sat 01 Jun 2024 05:56:36 +0000
Files and hashes:         1: PtgP6zsCGgUkGr5w0aUQqGetcf0.crl (hash: YEA+si/OA+vj0Yd0AwNt3BtqhJOBCgnA3DKJor8YNCY=)
                          2: E8C858F29CA911EDAA491C41C4F9AE02.roa (hash: QHwYnCyYfvJatT715L+F2i/uGN2F0rnr5Y6JgS/3oH0=)
                          3: A0ED0DDA9BC711EDB1BAE42AC4F9AE02.roa (hash: Az0jUnUm8VmZoeCVcqYkX7+Qy5F3ImNwyCThQYBVCrI=)
                          4: A2326CD09BC711EDB1BAE42AC4F9AE02.roa (hash: f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
                          rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 05:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
        Validity
            Not Before: May 25 05:56:36 2024 GMT
            Not After : Jun  1 05:56:36 2024 GMT
        Subject: CN=66517d95-0c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:28:41:f7:e1:62:e3:f2:a3:f1:ad:5e:49:
                    ca:f7:d2:ea:59:e5:9a:f6:ac:80:b3:c0:fc:c0:1b:
                    47:89:08:fd:02:de:bf:49:b7:e3:9c:e7:26:21:39:
                    05:11:85:ed:77:f2:84:78:78:5f:a7:e6:61:01:57:
                    72:2a:06:0b:88:38:9e:ed:50:bd:cc:ac:b6:62:fe:
                    bd:13:37:16:be:70:df:40:bd:44:d4:7e:49:74:8c:
                    e0:18:73:40:90:e8:9c:e0:02:13:30:4e:61:68:80:
                    d2:73:0d:59:b5:53:40:22:73:6c:5b:83:e4:b5:db:
                    06:7d:99:f5:00:97:b0:f3:cf:09:48:9a:6e:9b:0b:
                    13:1f:b1:85:a5:8a:86:89:ed:8c:68:aa:15:25:f3:
                    d8:2e:0b:70:0c:d2:6a:a5:8c:84:cf:52:33:21:29:
                    d4:29:e7:a3:9d:7e:b1:2e:67:c3:0d:7b:7d:1d:78:
                    a1:44:36:58:ad:96:4c:90:16:a4:f2:44:fc:9b:0d:
                    63:95:15:b2:43:35:4a:68:5f:6d:b3:d8:c1:d7:7a:
                    3b:7f:25:16:89:48:de:0d:34:d6:b9:ed:25:9a:99:
                    e2:45:9c:1b:26:2d:5e:f4:ac:94:f1:ae:6a:ac:0b:
                    6e:37:80:fe:f5:8d:bf:b2:db:10:02:f5:22:7c:d8:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:F9:2A:7E:9D:36:43:92:41:11:B5:1D:14:63:4C:37:BC:22:D3
            X509v3 Authority Key Identifier:
                keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:08:3a:80:41:e7:d5:de:13:36:9d:14:18:d3:70:5f:7c:4d:
         8e:7e:61:4a:bc:30:2a:9a:27:33:30:04:62:01:47:e9:00:d4:
         03:87:a1:20:e8:a2:2d:e8:f3:d9:a3:34:c3:38:55:ed:cf:33:
         b1:4a:da:96:0a:fc:c3:10:a5:07:fb:18:c8:51:b9:35:24:60:
         c8:0e:25:e6:ed:7a:a7:07:43:ec:16:84:89:8b:d3:41:47:79:
         2c:74:ca:f0:36:71:4c:22:1f:33:83:31:b2:24:f7:6e:98:8f:
         ba:79:f2:38:85:bf:c5:d3:8f:84:9e:bc:f0:5c:42:a1:7f:fb:
         74:e3:f9:70:f5:d9:ea:b5:2f:22:45:d3:85:56:8f:55:91:d3:
         fe:f4:f3:fb:08:6a:f8:5b:94:48:d3:05:61:09:98:99:ce:b0:
         f8:ec:4c:52:98:e1:75:2b:66:47:a3:6e:9d:2c:7b:6a:f9:a1:
         ed:b5:8f:09:a8:75:c8:fe:d8:4b:7f:0b:d7:ba:aa:12:5d:69:
         7a:68:04:ff:1d:15:c5:43:20:f8:5a:26:7e:c3:d8:df:2e:19:
         06:2f:58:ed:26:8f:22:f3:43:60:20:21:fc:15:b3:aa:e9:d0:
         46:be:bf:7b:3e:11:f9:d5:ae:f6:0d:a1:34:c1:4d:ff:ef:40:
         1c:23:d5:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE2QkExMTAvBgNVBAUTKDNFRDgwRkVCM0IwMjFBMDUyNDFBQkU3MEQxQTUxMEE4
NjdBRDcxRkQwHhcNMjQwNTI1MDU1NjM2WhcNMjQwNjAxMDU1NjM2WjAYMRYwFAYD
VQQDEw02NjUxN2Q5NS0wYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvAoQffhYuPyo/GtXknK99LqWeWa9qyAs8D8wBtHiQj9At6/SbfjnOcmITkF
EYXtd/KEeHhfp+ZhAVdyKgYLiDie7VC9zKy2Yv69EzcWvnDfQL1E1H5JdIzgGHNA
kOic4AITME5haIDScw1ZtVNAInNsW4PktdsGfZn1AJew888JSJpumwsTH7GFpYqG
ie2MaKoVJfPYLgtwDNJqpYyEz1IzISnUKeejnX6xLmfDDXt9HXihRDZYrZZMkBak
8kT8mw1jlRWyQzVKaF9ts9jB13o7fyUWiUjeDTTWue0lmpniRZwbJi1e9KyU8a5q
rAtuN4D+9Y2/stsQAvUifNijFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJv+Sp+
nTZDkkERtR0UY0w3vCLTMB8GA1UdIwQYMBaAFD7YD+s7AhoFJBq+cNGlEKhnrXH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZCQS8xNjk2ODc5NjlC
QzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dnVWtHcjV3MGFVUXFHZXRj
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0Z1A2enNDR2dVa0dyNXcwYVVRcUdldGNmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTZCQS8xNjk2ODc5NjlCQzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dn
VWtHcjV3MGFVUXFHZXRjZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9CDqAQefV3hM2nRQY03BffE2OfmFKvDAqmiczMARiAUfpANQDh6Eg
6KIt6PPZozTDOFXtzzOxStqWCvzDEKUH+xjIUbk1JGDIDiXm7XqnB0PsFoSJi9NB
R3ksdMrwNnFMIh8zgzGyJPdumI+6efI4hb/F04+EnrzwXEKhf/t04/lw9dnqtS8i
RdOFVo9VkdP+9PP7CGr4W5RI0wVhCZiZzrD47ExSmOF1K2ZHo26dLHtq+aHttY8J
qHXI/thLfwvXuqoSXWl6aAT/HRXFQyD4WiZ+w9jfLhkGL1jtJo8i80NgICH8FbOq
6dBGvr97PhH51a72DaE0wU3/70AcI9XP
-----END CERTIFICATE-----
Generated at Sat May 25 07:21:56 2024 by rpki-client on console-ams.rpki-client.org