Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
File:                     bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json)
Hash identifier:          OTzhVYWh/tUD2+JcHp4g49wcjJK0SLeJYjtlpdVc9/Y=
Subject key identifier:   FC:E0:0D:EB:7F:03:51:C9:43:97:37:31:A7:A3:F7:47:48:EE:BC:4E
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Certificate issuer:       /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial:       0ECE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
Manifest number:          0EB0
Signing time:             Wed 24 Apr 2024 18:22:50 +0000
Manifest this update:     Wed 24 Apr 2024 18:22:50 +0000
Manifest next update:     Wed 01 May 2024 18:22:50 +0000
Files and hashes:         1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: glU87cgsZq0hiI786ELwkg9mfsIwO7rHItTvDvDIOKo=)
                          2: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: QX7ihpdthODjLuN1vI4hUXtujzHVr4tAIZU8MBbXqK8=)
                          3: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: NtGKzgpKwKx/ngQO/wWSxSabwozU3yEw7+Ao7QOnulA=)
                          4: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: //CBIFW9G+/3hG8eXpvv6Hsd/GArYGHPj8b2SgrbzU0=)
                          5: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: NFD4NtlZjLdR0S90NAjZE9DDhbct+5Q8bRL2MxBa1fg=)
                          6: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: qkPQhdZ1AXp1eu/jPQTReH5I7eEjnJm7cKpLdbqNUqQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3790 (0xece)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
        Validity
            Not Before: Apr 24 18:22:50 2024 GMT
            Not After : May  1 18:22:50 2024 GMT
        Subject: CN=66294dfa-c508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:4b:e7:25:46:ed:8e:73:8d:36:49:55:2e:
                    45:81:b5:5c:02:97:48:6a:68:cc:7e:fa:d8:e3:cf:
                    7e:5c:4b:ff:9c:6a:00:85:4b:35:72:90:3c:a6:53:
                    2d:8d:80:5b:de:4a:50:4f:ad:b3:f0:b5:b0:d1:a0:
                    2b:4a:36:cf:28:59:48:39:06:eb:e7:95:d9:1b:39:
                    77:07:2f:3a:4d:96:39:ee:2f:e6:b9:44:ac:32:90:
                    24:9b:62:ce:1a:7c:20:4a:aa:44:0b:f0:53:e1:68:
                    cc:04:2f:05:73:5a:e5:45:6e:f6:01:ce:88:d4:fd:
                    b1:e1:78:86:9a:10:e0:7f:1b:29:ba:fe:05:5d:d6:
                    9b:74:0f:ad:50:59:dd:3d:18:b8:98:56:14:4c:0e:
                    60:25:a6:d4:cc:1d:98:72:cd:b4:d6:c9:e6:fb:6a:
                    1c:00:75:02:e6:a0:18:0f:f0:18:44:e8:5c:1f:c1:
                    06:b9:68:dd:bb:a4:db:b6:fa:dc:a9:b8:dc:d2:55:
                    53:0e:38:65:cf:b4:e7:0b:aa:f1:19:0e:d1:ad:d7:
                    81:a5:fe:13:b0:60:4a:d1:6b:c9:d1:00:d0:38:79:
                    d7:58:5b:83:53:1e:2d:a8:2a:53:12:49:c0:b3:1c:
                    48:8a:ee:8d:79:36:c2:0c:ef:46:b6:c2:e5:52:71:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:0D:EB:7F:03:51:C9:43:97:37:31:A7:A3:F7:47:48:EE:BC:4E
            X509v3 Authority Key Identifier:
                keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:2d:f0:5c:19:0c:73:ef:a5:42:6a:6e:6c:aa:77:71:53:
         c6:b8:f3:d6:a8:10:04:d2:9b:e4:c4:eb:cc:b7:9f:eb:b0:54:
         ab:f1:b1:83:5e:77:68:7f:76:00:c4:b8:1b:1f:8a:bb:04:d8:
         26:7a:86:20:f8:e7:90:49:8e:bc:17:2f:8d:ef:72:6d:ce:70:
         6e:55:45:cd:f7:0c:d3:5d:13:f4:a3:e6:50:1a:eb:63:d4:81:
         fe:b7:05:9a:0f:0d:54:0a:15:9f:90:88:33:a4:71:ef:88:a9:
         7a:b9:18:9e:cd:3e:bf:e8:82:90:89:76:b8:28:0a:f6:ba:46:
         ae:d0:bd:20:95:88:47:bb:57:8c:56:40:be:75:9f:4a:8d:1d:
         7d:ec:1f:1d:bf:1d:13:0f:36:51:a0:06:63:86:40:69:a6:6e:
         de:0e:7f:93:7b:34:5f:5d:40:05:83:dd:de:02:19:a1:96:33:
         7f:c1:21:08:97:38:0d:90:68:2f:28:12:21:07:14:be:3b:be:
         e6:f5:3b:ad:b0:f9:fc:ea:72:48:7d:2a:2f:a9:2c:0e:e4:73:
         d8:00:05:df:2b:a4:89:91:c9:29:04:20:b6:43:dd:56:1e:e3:
         c8:0c:cd:19:55:56:78:12:6a:0e:fd:03:d0:66:35:f8:2c:f6:
         8a:a3:d4:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2
NkU0RUZDMDUwHhcNMjQwNDI0MTgyMjUwWhcNMjQwNTAxMTgyMjUwWjAYMRYwFAYD
VQQDEw02NjI5NGRmYS1jNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKRL5yVG7Y5zjTZJVS5FgbVcApdIamjMfvrY489+XEv/nGoAhUs1cpA8plMt
jYBb3kpQT62z8LWw0aArSjbPKFlIOQbr55XZGzl3By86TZY57i/muUSsMpAkm2LO
GnwgSqpEC/BT4WjMBC8Fc1rlRW72Ac6I1P2x4XiGmhDgfxspuv4FXdabdA+tUFnd
PRi4mFYUTA5gJabUzB2Ycs201snm+2ocAHUC5qAYD/AYROhcH8EGuWjdu6Tbtvrc
qbjc0lVTDjhlz7TnC6rxGQ7RrdeBpf4TsGBK0WvJ0QDQOHnXWFuDUx4tqCpTEknA
sxxIiu6NeTbCDO9GtsLlUnEOhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzgDet/
A1HJQ5c3Maej90dI7rxOMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz
RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3
Rk50c2RuSjUwSXhtNU9fQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1HS3wXBkMc++lQmpubKp3cVPGuPPWqBAE0pvkxOvMt5/rsFSr8bGD
Xndof3YAxLgbH4q7BNgmeoYg+OeQSY68Fy+N73JtznBuVUXN9wzTXRP0o+ZQGutj
1IH+twWaDw1UChWfkIgzpHHviKl6uRiezT6/6IKQiXa4KAr2ukau0L0glYhHu1eM
VkC+dZ9KjR197B8dvx0TDzZRoAZjhkBppm7eDn+TezRfXUAFg93eAhmhljN/wSEI
lzgNkGgvKBIhBxS+O77m9TutsPn86nJIfSovqSwO5HPYAAXfK6SJkckpBCC2Q91W
HuPIDM0ZVVZ4EmoO/QPQZjX4LPaKo9RF
-----END CERTIFICATE-----
Generated at Wed Apr 24 21:18:19 2024 by rpki-client on console-ams.rpki-client.org