Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
File:                     PtgP6zsCGgUkGr5w0aUQqGetcf0.mft (raw, json)
Hash identifier:          vJ7Q+kTdbiLSJOIuJCyREci8/DHD64kVYUnYaEAU7AM=
Subject key identifier:   4F:3E:13:BC:64:EB:9E:7D:8C:C3:80:0A:2C:38:19:D9:79:00:AE:1F
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Certificate issuer:       /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
Manifest number:          015B
Signing time:             Sat 23 Nov 2024 02:26:46 +0000
Manifest this update:     Sat 23 Nov 2024 02:26:45 +0000
Manifest next update:     Sat 30 Nov 2024 02:26:45 +0000
Files and hashes:         1: PtgP6zsCGgUkGr5w0aUQqGetcf0.crl (hash: B/N/4fO/sMe2i1do2AB6YCtUEdRMWACULZOQjGfRGew=)
                          2: E8C858F29CA911EDAA491C41C4F9AE02.roa (hash: QHwYnCyYfvJatT715L+F2i/uGN2F0rnr5Y6JgS/3oH0=)
                          3: A0ED0DDA9BC711EDB1BAE42AC4F9AE02.roa (hash: Az0jUnUm8VmZoeCVcqYkX7+Qy5F3ImNwyCThQYBVCrI=)
                          4: A2326CD09BC711EDB1BAE42AC4F9AE02.roa (hash: f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
                          rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
        Validity
            Not Before: Nov 23 02:26:45 2024 GMT
            Not After : Nov 30 02:26:45 2024 GMT
        Subject: CN=67413d66-f6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:59:17:80:a8:59:1d:c0:9b:bf:fe:95:d8:
                    16:3e:62:e3:8c:c2:01:af:18:18:f5:05:e3:85:81:
                    ba:1b:eb:19:21:bc:28:95:d4:03:ae:1e:1d:74:44:
                    88:7e:a4:9a:e9:2f:fe:ad:ec:b7:a2:2b:33:cd:1b:
                    3b:c7:a9:07:c9:cb:34:96:5a:e9:cc:79:d4:e9:fe:
                    96:73:de:8c:42:49:bb:1a:c2:88:ec:f8:b2:1e:4e:
                    28:9f:39:4e:dc:17:25:aa:ac:4f:7a:82:6c:29:73:
                    76:9a:95:82:d7:85:e1:1e:1f:19:69:6c:4a:d9:5c:
                    66:8a:b7:2a:44:6a:d2:bf:08:26:d2:0c:b3:10:5a:
                    4b:3c:7d:ca:b5:2a:0a:05:6d:42:ec:6a:54:10:d0:
                    b8:ac:ee:65:fb:2d:4d:fd:f2:6f:58:22:0f:ef:0b:
                    56:fe:39:48:e5:61:ff:a8:68:0e:96:de:44:48:49:
                    53:bc:0b:da:f6:e3:25:c2:b5:54:66:c4:c6:35:ca:
                    6e:46:f2:85:4b:3f:b4:73:cb:fe:97:7f:e5:49:d1:
                    64:e6:a9:d5:cc:1c:a5:36:10:c5:5e:0f:51:a8:98:
                    07:59:cf:08:97:b6:34:44:c7:40:bf:b6:4a:a0:f0:
                    5e:65:a3:ee:2d:3f:6f:30:43:00:c1:2f:df:6d:e6:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:13:BC:64:EB:9E:7D:8C:C3:80:0A:2C:38:19:D9:79:00:AE:1F
            X509v3 Authority Key Identifier:
                keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:98:ca:63:02:1e:1e:07:04:27:44:5d:c5:1a:13:65:65:
         65:d3:e6:2e:ea:00:78:c1:e8:8a:2c:f5:c4:50:db:81:33:27:
         4d:18:04:90:25:05:51:bb:09:ee:c1:30:e9:30:c7:e1:9f:2e:
         0b:ed:91:47:05:ff:85:a0:08:50:d8:5b:a5:d0:a5:c4:e0:f0:
         b4:3a:5a:af:91:03:c0:df:b9:ca:f1:7f:4f:b5:88:9e:f0:b1:
         c5:36:dc:3e:20:3e:d4:4d:8a:a8:72:69:f6:01:10:47:ee:4a:
         2e:28:d2:7b:85:bc:f3:ce:62:9c:bd:d5:31:9d:97:21:80:ba:
         ad:5c:a9:60:11:b5:ce:c5:22:19:ec:86:ce:e2:54:5b:6b:4d:
         37:f3:d8:99:5e:46:5a:d5:fa:43:85:10:21:6d:bf:47:54:05:
         ad:c0:a4:71:ec:04:38:78:50:14:39:6d:25:71:1a:eb:40:58:
         e0:bb:68:45:b8:ee:29:98:58:83:68:72:83:54:c0:8d:d6:02:
         05:09:b0:49:71:89:03:cf:00:ff:6d:e3:7f:9b:14:7b:90:3d:
         db:00:cd:73:2c:49:99:7f:7d:ac:a8:be:67:a7:9e:35:b0:69:
         00:2d:a3:85:f1:ec:9a:6b:bf:90:b4:20:45:68:d7:17:df:24:
         0f:43:59:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE2QkExMTAvBgNVBAUTKDNFRDgwRkVCM0IwMjFBMDUyNDFBQkU3MEQxQTUxMEE4
NjdBRDcxRkQwHhcNMjQxMTIzMDIyNjQ1WhcNMjQxMTMwMDIyNjQ1WjAYMRYwFAYD
VQQDEw02NzQxM2Q2Ni1mNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNtZF4CoWR3Am7/+ldgWPmLjjMIBrxgY9QXjhYG6G+sZIbwoldQDrh4ddESI
fqSa6S/+rey3oiszzRs7x6kHycs0llrpzHnU6f6Wc96MQkm7GsKI7PiyHk4onzlO
3BclqqxPeoJsKXN2mpWC14XhHh8ZaWxK2VxmircqRGrSvwgm0gyzEFpLPH3KtSoK
BW1C7GpUENC4rO5l+y1N/fJvWCIP7wtW/jlI5WH/qGgOlt5ESElTvAva9uMlwrVU
ZsTGNcpuRvKFSz+0c8v+l3/lSdFk5qnVzBylNhDFXg9RqJgHWc8Il7Y0RMdAv7ZK
oPBeZaPuLT9vMEMAwS/fbeb+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8+E7xk
6559jMOACiw4Gdl5AK4fMB8GA1UdIwQYMBaAFD7YD+s7AhoFJBq+cNGlEKhnrXH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZCQS8xNjk2ODc5NjlC
QzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dnVWtHcjV3MGFVUXFHZXRj
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0Z1A2enNDR2dVa0dyNXcwYVVRcUdldGNmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTZCQS8xNjk2ODc5NjlCQzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dn
VWtHcjV3MGFVUXFHZXRjZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQn5jKYwIeHgcEJ0RdxRoTZWVl0+Yu6gB4weiKLPXEUNuBMydNGASQ
JQVRuwnuwTDpMMfhny4L7ZFHBf+FoAhQ2Ful0KXE4PC0OlqvkQPA37nK8X9PtYie
8LHFNtw+ID7UTYqocmn2ARBH7kouKNJ7hbzzzmKcvdUxnZchgLqtXKlgEbXOxSIZ
7IbO4lRba00389iZXkZa1fpDhRAhbb9HVAWtwKRx7AQ4eFAUOW0lcRrrQFjgu2hF
uO4pmFiDaHKDVMCN1gIFCbBJcYkDzwD/beN/mxR7kD3bAM1zLEmZf32sqL5np541
sGkALaOF8eyaa7+QtCBFaNcX3yQPQ1lp
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org