Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File:                     6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier:          pvcB6F3fyJK8u5J0rVcXebq28OswDjpKfQua4qGmYcg=
Subject key identifier:   73:E5:62:35:43:D1:FC:F1:89:EA:E3:D2:CB:AF:1A:78:84:0F:B4:58
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer:       /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number:          0BA8
Signing time:             Fri 31 May 2024 19:49:27 +0000
Manifest this update:     Fri 31 May 2024 19:49:26 +0000
Manifest next update:     Fri 07 Jun 2024 19:49:26 +0000
Files and hashes:         1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: 4XpBPlpehFp43eFIwXn3nAHWOvigWZD1H5SQwfdBZPs=)
                          2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: jrF852kYs14PjM50WXxMNg2jyLTmQd/Vsk+M72tm3yQ=)
                          3: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: Ld5pscWq93/B8bJqWD9PbsCKAWSDUIeXMVhp+RoHWfE=)
                          4: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: s4DzG/E04Q0fnhiE5oVYIoLbLi9ghXS2LlqAbc2cX68=)
                          5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: 5VZxUDRMUQQgnnjybdQidjUZH2bCJTwBzXkF3QIUH2I=)
                          6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: h9Fh9EUvUC3oV/r/uGWrFesRwzibrMM5nGlTiBIllQc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
                          rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 19:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
        Validity
            Not Before: May 31 19:49:26 2024 GMT
            Not After : Jun  7 19:49:26 2024 GMT
        Subject: CN=665a29c6-6981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:c7:2e:ae:bd:b4:6d:2c:a2:aa:8b:ee:7e:
                    f8:c8:1d:08:e9:2d:f6:3c:47:7e:43:23:e4:dd:5a:
                    a9:2c:5a:49:a7:55:32:7c:f8:28:a2:46:11:c6:96:
                    65:69:f7:92:55:99:8e:63:68:d2:bb:82:44:4b:84:
                    a9:f4:f8:bd:ac:88:e1:be:42:a6:7b:d7:9d:d1:34:
                    95:28:5b:30:f4:0d:86:ce:57:72:49:61:b6:be:f3:
                    5a:80:c6:c5:a2:e7:60:12:90:c5:c8:4c:54:96:84:
                    61:30:48:b7:65:a6:4d:9a:5b:75:23:eb:a0:28:79:
                    66:08:96:91:a5:4a:4a:13:8c:cb:a2:4b:8e:b7:63:
                    fe:3d:2a:03:c3:2c:ae:43:9b:da:0d:cc:18:f5:ed:
                    91:7a:43:65:3d:b5:90:db:16:57:02:18:09:a0:a3:
                    9d:82:21:fa:47:25:bc:46:7f:14:0f:89:86:65:ee:
                    ac:51:c5:d8:d3:18:f5:c3:93:a9:a7:df:66:63:88:
                    0f:85:bc:e1:b7:8f:a3:b1:d9:5c:f6:10:2c:93:73:
                    e0:10:b1:b6:c7:db:e8:c4:f7:61:b2:d3:31:94:f6:
                    36:c2:4c:f4:a8:67:c3:8b:61:62:1e:f7:96:5f:5c:
                    03:fe:90:7c:fb:81:b9:ab:a3:31:b3:4e:63:ec:ba:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:62:35:43:D1:FC:F1:89:EA:E3:D2:CB:AF:1A:78:84:0F:B4:58
            X509v3 Authority Key Identifier:
                keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:14:65:52:66:9d:6d:c0:23:83:c4:71:28:37:0c:48:99:
         b4:fe:36:46:98:f4:9a:f7:ec:76:fc:a7:bd:e8:f4:ec:be:c8:
         8f:3c:01:de:fe:c6:48:52:06:83:26:68:9a:48:0a:51:ae:af:
         c4:47:01:42:3a:0a:54:aa:db:dc:b4:fc:b8:f2:54:a3:3e:8a:
         b8:43:81:3d:83:84:5e:0f:af:cf:30:35:0b:34:e0:6a:8e:9f:
         c2:de:c9:7a:71:36:e2:fb:e7:4b:1e:5e:0b:22:55:cc:e0:2c:
         2f:9b:0a:6a:87:f0:43:58:7f:df:42:d3:0c:a9:3a:94:ea:ff:
         fd:3f:d1:aa:fb:84:8f:bc:f5:bd:63:f7:bf:c4:33:09:cf:cd:
         89:19:68:a6:41:39:d0:10:24:76:90:4e:aa:64:49:8d:f5:9d:
         41:21:0b:66:3c:42:34:48:bc:93:da:ff:74:4b:60:e3:03:5e:
         f9:44:96:1e:16:99:46:5b:a7:b4:b5:df:1d:f0:65:05:2f:8d:
         f2:fe:19:a0:f6:fd:83:04:c9:ad:65:66:6f:b9:ab:d4:1a:83:
         69:e5:9f:4d:64:52:d2:b1:40:24:3d:45:48:6d:ce:16:c3:3b:
         23:04:31:98:d6:ed:39:47:cd:e7:5b:32:ab:d6:ba:f1:bd:ae:
         ab:35:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org