Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          y0QGDK7XV+uIzRNqdvVUL/aEvGe1aTSP/nF2V531uCU=
Subject key identifier:   E3:06:7F:63:46:24:0C:21:5B:AB:D0:CE:1B:38:8B:82:87:B4:A9:25
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       05A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          0595
Signing time:             Fri 31 May 2024 01:05:05 +0000
Manifest this update:     Fri 31 May 2024 01:05:05 +0000
Manifest next update:     Fri 07 Jun 2024 01:05:05 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: vOdSb8ckvG4LVKgmNt43qwagEXi3O87ptv7gLArxdAI=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: AmaUz+EXza9ap5Ndg+GApOzoKeEyWm7IYO9NmvdFo54=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: May 31 01:05:05 2024 GMT
            Not After : Jun  7 01:05:05 2024 GMT
        Subject: CN=66592241-8f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:5d:e7:69:9d:46:a0:2b:ae:0e:44:00:f1:
                    47:f9:da:42:c0:87:4d:24:2d:f4:a3:7e:0d:b8:11:
                    e9:56:23:42:eb:e8:1b:77:83:7a:10:11:27:1a:ad:
                    bf:74:6f:8a:22:79:d7:01:46:90:90:06:2b:15:68:
                    b8:f8:84:4e:b3:1a:93:dc:87:8c:0e:5c:ba:1f:33:
                    aa:3b:09:89:27:b5:f2:e0:57:01:82:b8:f0:04:45:
                    81:cb:6a:b1:04:6d:ea:79:5d:db:a1:23:ab:e3:4b:
                    ce:d7:2b:a9:96:d2:70:64:a5:9c:1b:0a:bf:37:dc:
                    47:f4:82:10:c0:93:18:f2:1e:da:8b:8a:dc:60:3a:
                    0d:05:90:22:8e:3d:16:34:a3:51:4f:3e:a0:3f:96:
                    2c:34:26:74:dd:a8:f2:26:2c:74:61:45:2d:cb:98:
                    c6:ba:56:85:01:0c:33:f4:45:9a:71:ed:f4:9e:0d:
                    c8:49:cc:5a:05:37:c2:eb:3e:aa:4c:aa:45:4c:bd:
                    0f:be:8f:43:a3:e1:0b:c5:13:cf:d4:f8:b0:e7:e6:
                    03:c4:76:71:bb:e6:4d:b0:1e:22:0f:3e:c3:20:2d:
                    14:df:20:eb:3d:1a:28:89:9e:fe:0e:2b:ae:21:c2:
                    cc:c3:2b:31:b7:98:c2:f4:ba:2c:2d:ac:c3:20:48:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:7F:63:46:24:0C:21:5B:AB:D0:CE:1B:38:8B:82:87:B4:A9:25
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:3f:13:35:ea:13:b0:dd:6b:2e:aa:65:20:29:52:fc:11:
         53:fa:3f:be:1d:30:25:3b:cf:8f:a8:2c:94:77:59:8d:54:33:
         a2:83:62:92:88:e9:ff:ca:42:de:08:76:66:6c:80:ae:03:d6:
         b0:2b:ed:b3:37:c3:27:f9:f6:d9:ed:a6:f3:a1:f7:cf:b6:10:
         b0:f9:ad:26:13:d0:68:1a:ad:aa:c1:6c:b0:c4:94:c7:7e:31:
         c9:4c:e1:e8:a0:20:6e:9e:3c:e4:bb:53:ef:8f:e7:7f:2d:90:
         59:93:1a:25:37:b4:6d:64:3b:9a:ce:29:4d:98:37:94:bc:89:
         82:bd:86:b0:e1:92:9a:49:e2:ae:ba:55:1f:e5:41:a9:e0:b2:
         35:b6:30:79:a2:8b:67:7b:01:6c:58:7d:51:1a:2d:e8:ca:db:
         a3:41:15:8b:aa:f0:a2:a7:d7:55:1f:23:5d:17:bb:7c:74:bc:
         d1:e0:79:ec:1b:17:f9:df:81:cb:f0:4e:07:66:ab:ab:e7:08:
         f7:56:72:71:f2:fd:00:53:cc:58:88:88:73:23:d7:b2:d5:a8:
         cc:ea:9a:d4:69:4b:f0:78:25:ac:51:ea:51:fc:67:b1:28:42:
         97:e1:f2:25:0e:52:90:8c:ab:b5:70:e5:b1:b3:50:dc:d3:49:
         08:df:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:15:02 2024 by rpki-client on console-ams.rpki-client.org