Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          M5m2GrRbJxLTCrK1yPCFnnEPPwsht6xd58aPUZaxQac=
Subject key identifier:   4E:6C:1D:EE:88:F8:C7:DC:46:C3:FB:41:16:94:35:1A:52:D1:3C:1D
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          BC
Signing time:             Wed 15 May 2024 06:39:33 +0000
Manifest this update:     Wed 15 May 2024 06:39:32 +0000
Manifest next update:     Wed 22 May 2024 06:39:32 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: AufUFtNaQMAoIFxgX4xYj16ATSRUFH7ZOZTeSblsKBs=)
                          2: 9F79846406E911EE88450147C4F9AE02.roa (hash: +vq8vofoET5bBJDWanUe3KSHmg1KyghUUIJtgNyARZ8=)
                          3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: mpWImE75RQyFk680BpXLyuZx+EVi5b3FLbFGN9ptD0I=)
                          4: E5925096093911EEABCFA170C4F9AE02.roa (hash: lOd+R6WVOjKmA4tegFZKHQAB4up8YjSQHp+Qx0Vmyh4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 06:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: May 15 06:39:32 2024 GMT
            Not After : May 22 06:39:32 2024 GMT
        Subject: CN=664458a5-05a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:4c:a7:09:d7:13:06:eb:1c:d6:08:5a:22:
                    36:4d:e1:7f:64:92:8f:76:29:2b:37:3e:1a:14:5d:
                    60:6d:cd:14:86:08:1f:b5:a3:87:ef:b3:02:70:ee:
                    4c:f3:4e:d3:42:5a:f2:53:bf:11:d8:42:cd:c4:7c:
                    7a:80:ec:1a:44:38:a1:c5:45:e5:63:39:df:4b:36:
                    94:90:ed:77:b4:bd:e4:bd:30:90:2e:bc:a8:f7:4b:
                    46:e6:a9:bb:f8:8d:ce:33:34:ce:f4:94:49:4c:9f:
                    7c:01:cd:f1:17:af:64:1a:17:18:a4:a4:61:23:59:
                    7b:19:9a:a2:c9:19:2b:b5:bb:6c:af:32:42:9a:86:
                    97:7c:36:e7:04:4b:12:4a:a1:9a:88:63:5a:64:fd:
                    1b:2f:e5:d2:40:08:57:a7:34:ea:6f:1b:42:84:49:
                    78:8a:21:f6:4f:5b:f0:57:d2:8f:39:c8:e8:33:72:
                    8b:e1:7b:d7:5b:ec:5c:ce:fe:52:86:9c:29:d9:c8:
                    2f:01:3c:eb:b1:92:4f:aa:3b:fd:9a:00:24:b7:c7:
                    ef:ba:9f:57:a6:b0:65:ef:80:55:fd:cc:b4:3a:d3:
                    03:8f:29:8c:dc:a2:d3:53:72:b9:42:22:a4:20:87:
                    13:8b:91:64:9f:56:be:f8:f6:4c:77:47:1e:61:ec:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:1D:EE:88:F8:C7:DC:46:C3:FB:41:16:94:35:1A:52:D1:3C:1D
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:41:45:17:f8:b7:e2:ae:ad:9f:93:7f:53:44:6a:07:d3:8a:
         40:9e:87:e2:ad:b5:42:73:a1:79:55:92:e1:21:13:d2:98:4f:
         7b:a2:4e:6d:bb:8f:26:7b:4e:d8:ef:9c:4d:3b:cf:f9:9f:93:
         17:56:7d:3f:33:31:c8:a0:34:02:63:b8:3b:d7:5a:db:55:2e:
         11:92:9a:97:e5:39:14:54:41:12:60:fe:04:88:52:e1:3f:0f:
         72:7e:6d:4e:24:6b:aa:3c:a2:87:51:04:d3:09:5d:06:16:e4:
         f6:82:9d:d8:cf:1b:1e:7a:16:67:b7:8d:bf:d5:74:d5:35:73:
         4b:d0:3a:94:57:95:08:6e:9c:26:a1:35:20:f3:70:8b:19:4a:
         c4:ed:32:f8:5a:f8:c2:a6:bf:d6:cf:c9:15:63:91:a6:87:36:
         78:ca:83:f4:28:66:f2:08:aa:90:93:43:b0:79:34:78:d1:29:
         da:cf:19:91:86:31:bf:3c:2a:d5:16:ef:58:f9:cc:c8:a9:f2:
         06:ac:b1:a2:e9:27:d0:07:ba:91:37:20:af:6e:c5:c9:b5:28:
         4f:a6:9f:94:47:fb:7e:5f:27:3f:10:55:85:b6:64:c5:28:44:
         87:c1:87:ef:8d:07:ab:2f:77:f8:0f:40:3e:1c:04:c1:1c:af:
         8f:de:51:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjQwNTE1MDYzOTMyWhcNMjQwNTIyMDYzOTMyWjAYMRYwFAYD
VQQDEw02NjQ0NThhNS0wNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwk5MpwnXEwbrHNYIWiI2TeF/ZJKPdikrNz4aFF1gbc0UhggftaOH77MCcO5M
807TQlryU78R2ELNxHx6gOwaRDihxUXlYznfSzaUkO13tL3kvTCQLryo90tG5qm7
+I3OMzTO9JRJTJ98Ac3xF69kGhcYpKRhI1l7GZqiyRkrtbtsrzJCmoaXfDbnBEsS
SqGaiGNaZP0bL+XSQAhXpzTqbxtChEl4iiH2T1vwV9KPOcjoM3KL4XvXW+xczv5S
hpwp2cgvATzrsZJPqjv9mgAkt8fvup9XprBl74BV/cy0OtMDjymM3KLTU3K5QiKk
IIcTi5Fkn1a++PZMd0ceYexfqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5sHe6I
+MfcRsP7QRaUNRpS0TwdMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP
MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVQUUX+Lfirq2fk39TRGoH04pAnofirbVCc6F5VZLhIRPSmE97ok5t
u48me07Y75xNO8/5n5MXVn0/MzHIoDQCY7g711rbVS4RkpqX5TkUVEESYP4EiFLh
Pw9yfm1OJGuqPKKHUQTTCV0GFuT2gp3YzxseehZnt42/1XTVNXNL0DqUV5UIbpwm
oTUg83CLGUrE7TL4WvjCpr/Wz8kVY5GmhzZ4yoP0KGbyCKqQk0OweTR40SnazxmR
hjG/PCrVFu9Y+czIqfIGrLGi6SfQB7qRNyCvbsXJtShPpp+UR/t+Xyc/EFWFtmTF
KESHwYfvjQerL3f4D0A+HATBHK+P3lFm
-----END CERTIFICATE-----
Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org