Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
File:                     PtgP6zsCGgUkGr5w0aUQqGetcf0.mft (raw, json)
Hash identifier:          CnZ/oMRFhnQG2yR25v2xgOKPh7TalKveYZkHGHzLdF8=
Subject key identifier:   7A:8E:CA:33:BA:8A:62:D2:A1:F8:DF:6F:BE:4C:CC:A6:C1:9F:85:56
Authority key identifier: 3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD
Certificate issuer:       /CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
Manifest number:          F7
Signing time:             Tue 07 May 2024 05:45:03 +0000
Manifest this update:     Tue 07 May 2024 05:45:03 +0000
Manifest next update:     Tue 14 May 2024 05:45:03 +0000
Files and hashes:         1: PtgP6zsCGgUkGr5w0aUQqGetcf0.crl (hash: zx+/+mDyGd7TF/E3Sw2R9no1iuNqgUFG82aq5gf0ovI=)
                          2: E8C858F29CA911EDAA491C41C4F9AE02.roa (hash: QHwYnCyYfvJatT715L+F2i/uGN2F0rnr5Y6JgS/3oH0=)
                          3: A0ED0DDA9BC711EDB1BAE42AC4F9AE02.roa (hash: Az0jUnUm8VmZoeCVcqYkX7+Qy5F3ImNwyCThQYBVCrI=)
                          4: A2326CD09BC711EDB1BAE42AC4F9AE02.roa (hash: f0OThesUGfvttTcDodxsID0jyEWcTJ7RmlTU9M1bL0E=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl
                          rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6BA/serialNumber=3ED80FEB3B021A05241ABE70D1A510A867AD71FD
        Validity
            Not Before: May  7 05:45:03 2024 GMT
            Not After : May 14 05:45:03 2024 GMT
        Subject: CN=6639bfdf-1978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:c9:ed:a9:60:4a:db:3f:02:e0:fb:5c:1e:
                    56:06:97:c6:fd:6a:65:79:8e:61:80:dd:82:7f:31:
                    be:39:55:7f:4a:68:5e:96:20:82:4d:59:25:b4:b0:
                    32:0f:3e:a0:db:7a:e1:23:7b:ae:2f:22:4e:d6:79:
                    d8:8b:0f:5a:c2:bb:c7:50:ee:80:7b:ad:4c:59:23:
                    86:74:aa:af:4e:67:d4:6e:4b:6a:87:e3:cd:f5:78:
                    51:ba:75:20:73:33:1e:4d:73:bc:98:51:8f:e9:8f:
                    3b:b8:dd:12:e6:bb:e9:a1:b1:91:a2:4d:48:a7:87:
                    35:31:f8:7f:2d:c4:0a:d1:bf:6d:67:3f:65:0a:01:
                    82:20:31:d9:30:7e:b4:21:78:50:1a:19:24:55:9b:
                    79:c0:c8:8b:81:be:e0:f3:69:43:e4:ee:05:27:21:
                    53:22:b1:b9:fb:1c:18:91:31:a1:de:85:ae:34:54:
                    21:52:f7:25:90:dc:b6:a6:ab:77:bf:99:6c:4d:91:
                    d6:88:7c:fa:97:0d:6b:d0:fc:5a:65:eb:e0:ab:b4:
                    60:aa:97:73:27:c4:b1:17:3d:00:7d:00:0e:da:29:
                    5c:94:2d:36:fe:10:1f:b2:33:56:38:3d:8e:50:db:
                    79:ae:52:8e:bb:8e:ab:50:12:8b:e0:88:c1:65:69:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:CA:33:BA:8A:62:D2:A1:F8:DF:6F:BE:4C:CC:A6:C1:9F:85:56
            X509v3 Authority Key Identifier:
                keyid:3E:D8:0F:EB:3B:02:1A:05:24:1A:BE:70:D1:A5:10:A8:67:AD:71:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtgP6zsCGgUkGr5w0aUQqGetcf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6BA/169687969BC311EDA6542324C4F9AE02/PtgP6zsCGgUkGr5w0aUQqGetcf0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:03:c7:0f:7a:87:72:d0:c4:39:22:48:2e:ad:42:b1:a8:
         f2:6f:6b:09:3d:10:6e:e0:93:6a:6a:30:67:b8:b9:7d:ee:1c:
         ba:97:06:61:66:a3:59:b6:ae:40:5e:68:59:3c:6f:cc:bb:f1:
         8e:51:80:1b:34:d0:0b:34:2c:f3:1f:22:23:12:a4:53:c4:53:
         14:9e:5c:b2:96:4e:fa:b5:71:1e:d0:99:af:16:05:12:b3:c0:
         16:40:ff:d3:ab:d1:5c:50:25:66:dd:be:ce:3c:7e:b2:2b:89:
         f1:f3:ae:13:7e:82:1a:3b:d6:b4:c9:f9:2d:6c:be:88:98:81:
         bd:08:e7:75:72:b1:79:01:34:38:ee:f6:c3:c2:35:b7:84:d5:
         35:8d:f0:b9:e4:28:2b:92:21:49:8e:ad:79:64:22:59:84:0c:
         d3:34:b5:e6:89:6e:63:4f:3a:81:9a:23:4e:a5:59:02:0e:8a:
         5b:d5:e0:e5:64:64:01:a4:54:e4:f9:df:57:96:21:cd:3a:11:
         29:00:88:aa:f5:68:96:b1:4c:b7:ab:c4:94:b9:60:cc:63:a0:
         5b:1a:60:f4:12:c4:55:ff:9a:b4:ca:4f:87:ec:2f:71:63:cb:
         9b:85:2c:44:cc:b8:3c:ea:7f:85:46:af:cb:9c:94:0e:28:dc:
         ea:1f:b8:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE2QkExMTAvBgNVBAUTKDNFRDgwRkVCM0IwMjFBMDUyNDFBQkU3MEQxQTUxMEE4
NjdBRDcxRkQwHhcNMjQwNTA3MDU0NTAzWhcNMjQwNTE0MDU0NTAzWjAYMRYwFAYD
VQQDEw02NjM5YmZkZi0xOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxinJ7algSts/AuD7XB5WBpfG/WpleY5hgN2CfzG+OVV/SmheliCCTVkltLAy
Dz6g23rhI3uuLyJO1nnYiw9awrvHUO6Ae61MWSOGdKqvTmfUbktqh+PN9XhRunUg
czMeTXO8mFGP6Y87uN0S5rvpobGRok1Ip4c1Mfh/LcQK0b9tZz9lCgGCIDHZMH60
IXhQGhkkVZt5wMiLgb7g82lD5O4FJyFTIrG5+xwYkTGh3oWuNFQhUvclkNy2pqt3
v5lsTZHWiHz6lw1r0PxaZevgq7RgqpdzJ8SxFz0AfQAO2ilclC02/hAfsjNWOD2O
UNt5rlKOu46rUBKL4IjBZWnFIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqOyjO6
imLSofjfb75MzKbBn4VWMB8GA1UdIwQYMBaAFD7YD+s7AhoFJBq+cNGlEKhnrXH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTZCQS8xNjk2ODc5NjlC
QzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dnVWtHcjV3MGFVUXFHZXRj
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0Z1A2enNDR2dVa0dyNXcwYVVRcUdldGNmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTZCQS8xNjk2ODc5NjlCQzMxMUVEQTY1NDIzMjRDNEY5QUUwMi9QdGdQNnpzQ0dn
VWtHcjV3MGFVUXFHZXRjZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFwAPHD3qHctDEOSJILq1Csajyb2sJPRBu4JNqajBnuLl97hy6lwZh
ZqNZtq5AXmhZPG/Mu/GOUYAbNNALNCzzHyIjEqRTxFMUnlyylk76tXEe0JmvFgUS
s8AWQP/Tq9FcUCVm3b7OPH6yK4nx864TfoIaO9a0yfktbL6ImIG9COd1crF5ATQ4
7vbDwjW3hNU1jfC55CgrkiFJjq15ZCJZhAzTNLXmiW5jTzqBmiNOpVkCDopb1eDl
ZGQBpFTk+d9XliHNOhEpAIiq9WiWsUy3q8SUuWDMY6BbGmD0EsRV/5q0yk+H7C9x
Y8ubhSxEzLg86n+FRq/LnJQOKNzqH7hG
-----END CERTIFICATE-----
Generated at Tue May 7 06:29:48 2024 by rpki-client on console-ams.rpki-client.org