Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          68+V5LRgbYu7nVaflJt2f/t2vVaByVPAh3S9yht+Ji4=
Subject key identifier:   C6:20:F2:1B:03:7F:66:6F:DF:91:F3:54:A3:B6:F3:03:D1:C6:F2:63
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          0120
Signing time:             Thu 21 Nov 2024 03:07:15 +0000
Manifest this update:     Thu 21 Nov 2024 03:07:15 +0000
Manifest next update:     Thu 28 Nov 2024 03:07:15 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: MIyZ4VPyBQgYpE4GyIUqKgUYSImYUM1yqAxjerYskQA=)
                          2: 9F79846406E911EE88450147C4F9AE02.roa (hash: VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=)
                          3: E5925096093911EEABCFA170C4F9AE02.roa (hash: 9se4h5DVwbqK4ocwNJG41tqNbygd7PqouTQTwTnQqOU=)
                          4: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Nov 21 03:07:15 2024 GMT
            Not After : Nov 28 03:07:15 2024 GMT
        Subject: CN=673ea3e3-d907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:22:bc:8c:74:a7:d8:87:22:16:ca:53:e1:
                    ef:99:73:6e:d8:3b:43:49:32:b5:a1:30:05:fc:34:
                    e4:58:ae:9a:49:6d:6b:d4:21:ae:e0:5c:21:15:84:
                    68:c3:bb:41:17:08:67:d0:27:54:f4:df:3c:f0:32:
                    d2:a0:a6:13:b0:3b:53:b7:c8:e4:9d:82:af:94:ef:
                    cf:58:56:fa:c7:d7:9b:0f:f5:6f:f2:8c:6f:6e:02:
                    6c:a6:1c:9b:de:80:ab:79:67:ce:cc:63:1a:a6:d1:
                    3b:d7:c3:67:8b:36:ab:fa:42:73:eb:ac:84:e6:78:
                    0a:38:30:25:65:e1:83:b5:41:63:3f:88:05:3a:eb:
                    d7:ad:76:49:11:31:ae:09:a3:f0:ec:62:1d:36:9a:
                    64:09:89:4b:ed:51:f0:7c:0e:fe:c4:5f:07:7f:1f:
                    70:5d:45:e5:37:29:3b:a3:f3:04:e7:fe:56:14:a2:
                    c5:18:41:88:04:5b:39:4d:e3:4a:59:b8:1a:da:25:
                    33:fe:cb:2d:84:e8:e8:59:ec:f7:c9:7d:7f:35:e4:
                    23:57:ff:08:cf:88:32:b4:6c:4b:22:79:9a:75:b3:
                    d5:72:6c:3f:7e:94:be:c2:7e:15:6f:c5:da:d1:d7:
                    6b:39:33:97:94:cb:c9:d5:ba:78:05:44:6a:17:02:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:20:F2:1B:03:7F:66:6F:DF:91:F3:54:A3:B6:F3:03:D1:C6:F2:63
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:c6:85:58:b8:fe:fd:59:0f:6a:e7:58:79:3a:9a:51:83:
         b8:73:96:ee:f2:5a:27:9e:a6:a8:5a:3f:7f:5b:de:47:c7:6b:
         37:15:e2:d6:e7:3d:9c:2d:3b:2c:b0:ae:c4:d6:ce:b4:e6:46:
         f7:41:a7:cb:73:39:be:2c:05:c3:51:5a:37:d5:01:b7:0a:20:
         96:b3:ba:f4:0f:c6:5a:7c:80:80:ef:68:95:55:99:24:70:00:
         a9:f7:82:ad:3f:d7:b1:d0:f7:9b:34:59:ab:1c:32:e3:25:85:
         75:e6:e5:78:3d:c8:7b:d3:97:e1:2f:bb:25:10:38:2e:89:0e:
         7e:ad:72:58:f7:5d:36:19:22:68:74:12:19:39:1f:7b:dc:eb:
         1b:06:57:6a:d8:08:4a:6f:b6:8a:98:bd:17:a5:84:7d:d3:b3:
         fd:96:09:79:97:fd:62:75:0f:e2:ea:1b:fa:fe:cf:53:76:cc:
         a1:ec:4b:c4:ee:c2:26:66:1a:f2:ad:6a:99:94:e7:0e:91:a4:
         40:d4:e5:86:c9:70:02:92:dc:3e:c5:f9:75:56:14:69:01:7e:
         62:56:b8:b5:7d:6b:92:d7:2b:50:ae:00:68:fb:64:d3:e4:74:
         64:19:5e:67:41:3a:3f:42:c3:8f:bf:65:84:ec:b0:44:d4:c3:
         ad:5c:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org