Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
File:                     ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json)
Hash identifier:          5qSW2XsTIik8HuoIcnLryF7LLCYfK/b8U7arw8Lk5nU=
Subject key identifier:   30:E7:4F:75:51:A7:5A:54:3B:8A:98:95:33:63:A8:26:B2:0E:18:7E
Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0
Certificate issuer:       /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
Certificate serial:       0B66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
Manifest number:          0B5E
Signing time:             Fri 22 Nov 2024 18:53:11 +0000
Manifest this update:     Fri 22 Nov 2024 18:53:11 +0000
Manifest next update:     Fri 29 Nov 2024 18:53:11 +0000
Files and hashes:         1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: L2NllMhu0RkfLEr9S3qVhC3U+10E8Eiss1V27I0tpV8=)
                          2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl
                          rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0
        Validity
            Not Before: Nov 22 18:53:11 2024 GMT
            Not After : Nov 29 18:53:11 2024 GMT
        Subject: CN=6740d317-579c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:1c:66:f4:9d:c7:51:34:2f:37:14:19:99:
                    dc:0c:7e:3d:a2:2f:8e:72:c4:6d:76:d4:8b:45:e7:
                    11:14:01:c7:de:56:87:4f:4a:bf:98:89:3a:14:a5:
                    80:18:70:1e:cb:4e:1e:c1:4c:08:d0:46:2b:af:54:
                    0a:b6:ae:e3:72:6c:49:0f:80:70:24:ac:b5:59:36:
                    a5:84:bc:e8:de:80:ab:90:2b:a3:ec:92:09:99:f7:
                    20:06:56:24:10:09:0e:dd:40:1c:aa:a7:d4:f3:58:
                    ca:ec:72:b8:48:8a:00:12:76:07:40:7f:72:43:6a:
                    22:c1:7c:fa:76:ef:da:9b:21:20:cd:fc:a2:2b:a1:
                    73:46:e6:c7:90:1f:91:bb:f1:c7:a3:ca:40:77:47:
                    8c:4f:d9:48:80:30:0c:62:9e:f2:9d:57:c9:64:ab:
                    56:1c:44:3f:7d:b5:15:9b:b0:09:ba:d9:72:69:ad:
                    99:9f:dc:99:48:c2:0c:75:de:8b:44:1c:02:eb:2e:
                    ae:2a:1e:00:0d:0b:35:d8:ac:9a:88:51:ba:28:5a:
                    f6:d9:6a:ef:60:db:fe:94:ad:03:b3:80:68:88:7d:
                    56:b0:c5:6c:3d:fe:d9:c1:c1:d8:75:13:83:09:51:
                    82:54:39:3a:a2:9c:5c:4b:2c:28:f1:7c:79:ff:6a:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E7:4F:75:51:A7:5A:54:3B:8A:98:95:33:63:A8:26:B2:0E:18:7E
            X509v3 Authority Key Identifier:
                keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:7b:de:ac:99:0c:3f:f8:d9:6e:92:e4:ad:38:2c:11:20:
         f5:55:2d:8b:4c:2c:da:5d:a9:42:ab:4f:b4:94:7e:45:cd:be:
         16:9a:01:7c:de:b2:9b:d6:12:1b:fa:d5:35:34:4c:a9:37:34:
         43:b1:a4:e7:3d:f0:01:3a:fd:1a:ee:e1:95:3a:2f:d7:19:52:
         b1:db:43:ab:8b:e1:11:c3:d3:d9:61:f7:c1:07:90:44:b5:72:
         d2:9b:89:c8:d7:19:1a:3d:06:08:d9:18:5a:81:57:0b:01:04:
         b6:6a:8a:1d:a9:45:d1:6c:b3:d9:f0:84:ff:57:c1:b0:6b:36:
         a2:38:72:0b:aa:92:de:9a:c2:40:51:91:bd:b0:7b:6d:57:95:
         85:f0:b9:dd:9b:24:b5:44:27:75:21:6f:d1:c8:cf:2a:89:0c:
         ea:d7:6a:34:52:74:f4:6b:79:ac:e1:c0:7d:1a:21:74:9c:f6:
         70:fc:62:8b:64:e3:44:b9:3b:51:4c:73:3d:a8:e1:77:f2:8b:
         6d:29:75:6f:f5:fa:52:fc:13:07:1f:4e:a4:c5:82:51:b3:1d:
         32:03:ed:93:5a:2b:ed:b2:d7:67:80:79:65:0c:17:d4:53:b7:
         19:11:67:9f:c9:e4:02:8b:70:1a:de:3e:32:3e:95:c8:43:85:
         c0:3b:63:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE
ODZFMUVDQjAwHhcNMjQxMTIyMTg1MzExWhcNMjQxMTI5MTg1MzExWjAYMRYwFAYD
VQQDEw02NzQwZDMxNy01NzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hscZvSdx1E0LzcUGZncDH49oi+OcsRtdtSLRecRFAHH3laHT0q/mIk6FKWA
GHAey04ewUwI0EYrr1QKtq7jcmxJD4BwJKy1WTalhLzo3oCrkCuj7JIJmfcgBlYk
EAkO3UAcqqfU81jK7HK4SIoAEnYHQH9yQ2oiwXz6du/amyEgzfyiK6FzRubHkB+R
u/HHo8pAd0eMT9lIgDAMYp7ynVfJZKtWHEQ/fbUVm7AJutlyaa2Zn9yZSMIMdd6L
RBwC6y6uKh4ADQs12KyaiFG6KFr22WrvYNv+lK0Ds4BoiH1WsMVsPf7ZwcHYdROD
CVGCVDk6opxcSywo8Xx5/2qHrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDnT3VR
p1pUO4qYlTNjqCayDhh+MB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF
RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz
czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB583verJkMP/jZbpLkrTgsESD1VS2LTCzaXalCq0+0lH5Fzb4WmgF8
3rKb1hIb+tU1NEypNzRDsaTnPfABOv0a7uGVOi/XGVKx20Ori+ERw9PZYffBB5BE
tXLSm4nI1xkaPQYI2RhagVcLAQS2aoodqUXRbLPZ8IT/V8GwazaiOHILqpLemsJA
UZG9sHttV5WF8LndmyS1RCd1IW/RyM8qiQzq12o0UnT0a3ms4cB9GiF0nPZw/GKL
ZONEuTtRTHM9qOF38ottKXVv9fpS/BMHH06kxYJRsx0yA+2TWivtstdngHllDBfU
U7cZEWefyeQCi3Aa3j4yPpXIQ4XAO2Px
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org