Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
File:                     vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json)
Hash identifier:          r7/uToLP3ysUyhOCY6zULQ6Dg0gfvlaEp4M0dWsuP68=
Subject key identifier:   06:44:32:AF:E9:54:98:47:8E:BD:D5:3D:9D:E1:8E:D1:5C:89:7D:F9
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Certificate issuer:       /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
Manifest number:          A6
Signing time:             Fri 17 May 2024 06:49:06 +0000
Manifest this update:     Fri 17 May 2024 06:49:05 +0000
Manifest next update:     Fri 24 May 2024 06:49:05 +0000
Files and hashes:         1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: Hk50NtLRqceyQXEkR9LIKai7Ag4W1P4GtpQvx/OWkPA=)
                          2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: GBMicqxqWJGllSCeNaCG3fJSPAOHIQZXCyZq5HgUNnQ=)
                          3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: Zdv05MwdqY6/OABs/FWqaeUs/E7iyDc64LmUs67RP4Q=)
                          4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: HITqvsOV8NXEevbID5wWbEGFWpToE66JO9d/dCgPkiY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
                          rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
        Validity
            Not Before: May 17 06:49:05 2024 GMT
            Not After : May 24 06:49:05 2024 GMT
        Subject: CN=6646fde2-54eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:f3:1d:07:dd:b9:29:32:8d:f6:3d:40:d5:
                    4e:42:1d:15:13:01:7d:d5:a3:cc:9f:9b:2f:8b:33:
                    41:9d:0e:4e:62:b2:73:d2:8d:70:4c:f1:76:81:0b:
                    4f:b3:ea:4f:c6:cb:8a:2e:04:f0:ac:d2:b4:19:1f:
                    68:c2:0b:e4:e8:c0:d1:08:01:bf:30:f1:83:d7:8f:
                    e1:9f:79:2d:3b:73:91:28:8f:42:8e:4b:81:21:53:
                    ea:77:cd:81:99:94:e4:3b:ee:46:ae:9b:f4:0f:70:
                    9c:da:d3:70:04:2c:d5:4d:9a:34:11:f5:44:b8:f8:
                    60:89:ac:b3:18:ac:d0:e0:64:60:9c:84:d7:c7:ac:
                    73:04:e3:b9:ae:5b:e5:6b:b9:ba:8b:b6:16:f1:da:
                    21:63:41:ae:2e:36:e7:e3:01:f2:f5:2a:37:42:c1:
                    fb:92:a6:8f:7d:00:b1:40:ec:0c:a8:2a:e3:19:c0:
                    e9:1e:fe:03:82:ed:dd:2a:b4:e0:d8:d5:e0:bf:38:
                    ec:78:56:7c:6d:02:12:5d:40:9d:6b:5b:55:32:de:
                    06:0b:87:89:98:80:95:4d:b4:ce:92:8e:1d:3b:0d:
                    14:45:79:4a:72:25:b8:32:2e:53:23:67:2f:77:78:
                    d6:bf:8f:c3:64:9e:41:9c:03:70:b4:11:33:a3:b1:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:32:AF:E9:54:98:47:8E:BD:D5:3D:9D:E1:8E:D1:5C:89:7D:F9
            X509v3 Authority Key Identifier:
                keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:6f:e1:2e:62:cf:88:74:c5:06:bd:71:ee:d0:9a:27:7f:
         0d:55:d2:84:2b:7f:f6:3e:02:ab:f3:82:5e:1a:75:0b:a7:dd:
         d2:ea:9c:99:b5:14:ff:d8:ac:ea:d9:2a:38:e1:31:f5:96:19:
         c8:28:3b:32:5d:82:bc:96:de:32:ee:0b:17:ba:5a:e9:90:bb:
         ad:75:b6:82:6d:cf:84:e5:7d:e5:f6:f4:57:20:f0:a0:e8:74:
         94:97:7c:2e:56:e2:9d:91:80:48:a7:f7:f4:8e:b3:2e:03:05:
         c6:35:e2:9a:a6:c8:18:94:ae:1c:8b:84:ed:aa:3e:b9:0f:c7:
         1f:c8:88:40:61:ab:8c:bf:08:6b:65:63:e4:6e:3b:35:12:ff:
         cd:3e:ff:58:c9:e3:14:8c:12:49:98:f0:25:7c:21:69:79:cd:
         a1:06:e9:dd:ac:40:d7:de:c9:88:32:18:a5:e3:42:8e:87:6d:
         8d:80:f3:df:53:9a:6c:18:dd:92:a8:a7:5b:e5:20:b1:9a:a4:
         77:b0:f2:e5:15:89:07:d8:23:e3:32:72:dc:ae:34:f6:19:8f:
         e4:78:b6:dc:86:f4:d9:ff:3e:51:7e:f2:55:3f:41:59:ac:c5:
         63:9a:dd:6f:45:c7:8d:b8:83:c7:9b:ea:5d:3e:d3:3e:ef:a1:
         87:ec:9e:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD
QzUyNjUyNEYwHhcNMjQwNTE3MDY0OTA1WhcNMjQwNTI0MDY0OTA1WjAYMRYwFAYD
VQQDEw02NjQ2ZmRlMi01NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwOnzHQfduSkyjfY9QNVOQh0VEwF91aPMn5svizNBnQ5OYrJz0o1wTPF2gQtP
s+pPxsuKLgTwrNK0GR9owgvk6MDRCAG/MPGD14/hn3ktO3ORKI9CjkuBIVPqd82B
mZTkO+5Grpv0D3Cc2tNwBCzVTZo0EfVEuPhgiayzGKzQ4GRgnITXx6xzBOO5rlvl
a7m6i7YW8dohY0GuLjbn4wHy9So3QsH7kqaPfQCxQOwMqCrjGcDpHv4Dgu3dKrTg
2NXgvzjseFZ8bQISXUCda1tVMt4GC4eJmICVTbTOko4dOw0URXlKciW4Mi5TI2cv
d3jWv4/DZJ5BnANwtBEzo7HctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZEMq/p
VJhHjr3VPZ3hjtFciX35MB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB
RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh
NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCID2/hLmLPiHTFBr1x7tCaJ38NVdKEK3/2PgKr84JeGnULp93S6pyZ
tRT/2Kzq2So44TH1lhnIKDsyXYK8lt4y7gsXulrpkLutdbaCbc+E5X3l9vRXIPCg
6HSUl3wuVuKdkYBIp/f0jrMuAwXGNeKapsgYlK4ci4Ttqj65D8cfyIhAYauMvwhr
ZWPkbjs1Ev/NPv9YyeMUjBJJmPAlfCFpec2hBundrEDX3smIMhil40KOh22NgPPf
U5psGN2SqKdb5SCxmqR3sPLlFYkH2CPjMnLcrjT2GY/keLbchvTZ/z5RfvJVP0FZ
rMVjmt1vRceNuIPHm+pdPtM+76GH7J7E
-----END CERTIFICATE-----
Generated at Fri May 17 08:52:56 2024 by rpki-client on console-ams.rpki-client.org