Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          nX6OicARnUOaELReQs1Wr2ZjfdZfKc72/kqpETrLXO0=
Subject key identifier:   7D:D5:FD:FB:A1:98:3C:20:35:5C:E8:70:CB:99:74:6F:D6:8B:AC:85
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          0120
Signing time:             Sat 01 Jun 2024 06:28:47 +0000
Manifest this update:     Sat 01 Jun 2024 06:28:47 +0000
Manifest next update:     Sat 08 Jun 2024 06:28:47 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: tQHvSNmRCARvF4cpQK2BRZ+T9SSQi9WFsUaStS00GSY=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: mkZebtP/InCv8k9hv/UGEvbr4n/hrgo+6kq5IXv2lVg=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: FcjIDRSFwJ0XRDEd6W2lWYtKkYg2/8vEkKYrWb1NPTQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Jun  1 06:28:47 2024 GMT
            Not After : Jun  8 06:28:47 2024 GMT
        Subject: CN=665abf9f-75c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:95:dc:26:58:6e:38:97:15:40:6d:2d:0c:
                    e1:77:22:b7:db:c1:64:96:ad:89:29:d7:cd:8d:ed:
                    e4:56:ae:57:b8:5e:87:34:82:56:19:b2:64:9e:89:
                    bd:9f:92:65:f2:11:cb:69:71:eb:bd:cc:87:53:1b:
                    4f:05:4c:26:05:23:46:25:f2:79:75:df:b9:4e:97:
                    b0:ac:94:e3:b5:b6:fe:a4:a7:f6:4b:d8:8f:9d:b6:
                    93:47:55:8c:38:d8:f2:10:11:26:99:0b:95:15:25:
                    cd:11:2a:70:31:68:ea:cd:3c:e1:9e:30:3e:05:cb:
                    1c:cc:4d:45:1f:5b:42:f5:99:36:52:fa:29:cd:ad:
                    e2:4e:d2:d9:0f:56:84:a6:da:16:25:5a:97:37:74:
                    15:c0:5f:79:ee:76:d4:8a:07:ea:f0:ec:8a:75:30:
                    ff:9a:45:ed:bc:7f:96:17:46:84:d2:f9:2c:56:30:
                    5d:3e:ac:d8:7a:ab:ae:21:0c:6d:c3:00:b9:3f:51:
                    09:f3:53:ea:4f:23:cf:3a:a1:37:3b:e6:c8:3a:ce:
                    92:ae:23:7b:3d:62:31:81:09:2f:09:13:88:11:8e:
                    d7:a7:d3:8a:39:23:aa:d5:69:e0:7a:1e:84:f8:ff:
                    8b:b6:bf:83:a1:37:d6:ef:69:81:d8:59:76:87:88:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:FD:FB:A1:98:3C:20:35:5C:E8:70:CB:99:74:6F:D6:8B:AC:85
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:2e:d3:8e:3b:3f:cb:e4:35:13:21:35:f9:08:b7:6b:f6:
         c7:15:f3:c2:39:6b:50:0e:d0:41:b3:b7:34:00:12:10:fd:54:
         a1:ba:32:b9:54:e1:1f:9a:bf:77:e5:2b:cc:5d:36:6a:ae:1c:
         18:8d:ff:17:a4:59:7f:5d:ca:13:73:a4:2d:5e:e1:1a:cb:57:
         73:c4:bf:e9:81:1d:dd:0f:9f:5b:1b:56:76:b0:ce:da:70:f5:
         6a:63:14:5b:ff:34:2e:74:be:ce:48:60:34:50:c8:1b:80:77:
         e4:4f:a4:8e:9b:d5:de:f5:1b:ee:18:f2:65:3f:ad:af:9e:b7:
         d1:80:9f:9b:3f:56:85:74:b7:71:f1:ad:93:e6:d2:0c:63:d1:
         02:14:07:a6:8d:71:2f:22:7e:cd:6a:82:93:2a:35:4c:f3:e4:
         82:5e:a1:d9:07:55:77:40:13:56:da:03:f0:93:3b:18:d9:ea:
         d3:ed:0a:4c:48:cb:17:92:78:0d:db:2b:60:93:0d:d0:85:b0:
         20:bc:b0:1b:c7:29:ca:28:a4:7a:98:ad:3a:80:32:83:a9:bd:
         1f:b9:90:2b:ae:47:7c:ea:95:47:d9:1c:1b:90:d3:6c:7f:0a:
         95:b3:07:08:de:36:19:41:56:08:82:e6:64:a8:a4:b5:ae:94:
         e5:df:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:21 2024 by rpki-client on console-ams.rpki-client.org