Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
File:                     6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json)
Hash identifier:          4CLJSA9EuAhMg0AXq9u4hRvYMilbN6ekbs6TL6B/MAs=
Subject key identifier:   03:81:C3:B1:A4:61:FE:D1:EE:F7:7D:73:A0:5A:9C:35:AB:19:F3:E1
Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
Certificate issuer:       /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Certificate serial:       1613
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
Manifest number:          160C
Signing time:             Sun 24 Nov 2024 16:36:40 +0000
Manifest this update:     Sun 24 Nov 2024 16:36:39 +0000
Manifest next update:     Sun 01 Dec 2024 16:36:39 +0000
Files and hashes:         1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: vN2A/30/NZoWDK7WjcBvtQwHkjNYpPcCOLom8UWODp8=)
                          2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: 561yu9MGU0vumwQn4MDwqvQwRWFnU69Hgu+DoY89L9g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl
                          rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5651 (0x1613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
        Validity
            Not Before: Nov 24 16:36:39 2024 GMT
            Not After : Dec  1 16:36:39 2024 GMT
        Subject: CN=67435618-a42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:1b:59:2b:86:db:ca:ad:4f:af:7d:af:89:
                    46:ac:62:4e:25:ad:8a:42:60:1d:c2:19:2e:c3:85:
                    d6:fd:31:b0:89:6f:59:de:39:8a:d1:f8:00:ee:7d:
                    64:5d:2e:dd:c5:51:9f:ad:2c:b6:d5:98:da:d4:53:
                    d9:53:4f:ac:cc:6b:12:84:0d:c0:32:d7:40:d2:4b:
                    6c:be:bb:f1:0e:7f:e3:c0:4e:44:0f:90:76:85:84:
                    92:39:ca:b7:81:a1:bf:4e:63:ef:e8:3c:5f:72:95:
                    15:99:8f:bf:d4:2b:74:84:18:bc:09:88:39:bf:ae:
                    ed:99:50:b1:fa:e8:cb:b8:e7:3b:63:b5:61:5a:10:
                    3c:20:35:30:91:6e:a7:b2:69:b1:32:2f:45:8c:b7:
                    c3:d1:ab:86:0d:53:dd:a5:77:b2:11:db:6a:35:50:
                    90:17:f5:b7:26:ce:61:06:70:81:98:08:aa:9f:02:
                    ec:1e:6b:6e:6c:08:cd:61:03:aa:35:dd:a9:68:50:
                    23:bf:f1:58:1e:4e:52:e3:ec:f8:45:73:b4:c7:4d:
                    0a:d5:b0:a5:4c:40:29:6e:d5:67:0d:02:c0:fd:80:
                    35:77:e7:12:75:ec:a0:e6:3d:70:e9:b3:ef:3e:c5:
                    a1:45:d7:76:26:a2:ff:85:6e:cc:52:98:e1:ce:71:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:C3:B1:A4:61:FE:D1:EE:F7:7D:73:A0:5A:9C:35:AB:19:F3:E1
            X509v3 Authority Key Identifier:
                keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:25:e7:63:b4:9e:4d:0d:67:f0:be:99:44:59:04:f9:f4:
         b2:02:bd:a9:5f:61:0d:64:7a:31:31:98:68:cc:65:02:c7:91:
         26:cd:55:64:bd:83:cb:26:90:79:31:aa:01:33:6c:00:dd:c1:
         66:b6:38:83:62:99:99:5f:4b:38:a1:06:09:ed:22:78:b5:e2:
         20:77:23:6c:0a:aa:be:30:e1:bf:9f:2f:d9:76:66:99:f6:31:
         dd:26:9a:6f:ec:ff:6d:38:0a:b3:96:cf:d5:20:75:11:c6:9c:
         23:6c:a2:94:96:37:b3:b9:6f:5b:86:4f:c4:3a:80:5e:75:1e:
         7e:df:47:fe:23:83:de:7e:0a:cf:6e:24:c5:a7:d1:22:9e:ea:
         14:c6:66:0c:92:fb:93:73:4b:60:f0:09:d3:a0:42:dc:f0:e6:
         29:0f:21:07:19:df:f1:24:7c:de:cf:db:52:9a:8d:78:0c:92:
         31:94:42:c5:62:38:74:69:80:d5:ec:1c:69:40:df:e7:d4:8d:
         b0:b9:c2:30:30:c5:45:87:42:41:4a:6f:eb:34:10:fb:dc:d4:
         57:bf:d9:e5:78:e5:11:59:1f:58:48:9e:68:62:a8:49:36:92:
         aa:ce:99:46:21:21:f2:1f:77:a5:69:50:02:f1:85:19:fc:b6:
         cb:55:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:07 2024 by rpki-client on console-fra.rpki-client.org