Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
File:                     j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json)
Hash identifier:          H9n5M5xiMqTQcx7vpm5GWYpgFeoWCuc5viPhns5k5Sk=
Subject key identifier:   FC:D8:7E:D5:F0:38:6A:CC:9E:40:15:3F:08:DA:1E:99:48:E0:D3:17
Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8
Certificate issuer:       /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
Manifest number:          B6
Signing time:             Sat 23 Nov 2024 04:04:56 +0000
Manifest this update:     Sat 23 Nov 2024 04:04:55 +0000
Manifest next update:     Sat 30 Nov 2024 04:04:55 +0000
Files and hashes:         1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: Bow0Gy+TBK/5Gya22gCyWI4VCfG29Xgsxt1CdYrXmy0=)
                          2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: 0voBvvYJ1FOla9h6paRdef89XemcSYIiMH4ggu9oHRY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8
        Validity
            Not Before: Nov 23 04:04:55 2024 GMT
            Not After : Nov 30 04:04:55 2024 GMT
        Subject: CN=67415467-c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:fa:eb:55:aa:df:64:e5:14:90:9c:30:a4:
                    02:8f:2b:21:9f:9f:f6:ce:8f:18:88:3f:66:08:08:
                    9e:70:08:a7:72:47:bd:42:8d:7c:69:45:c4:d2:75:
                    6a:f9:ff:41:96:4a:0f:ee:3d:f4:b2:30:fa:fd:2a:
                    e8:c1:4d:c1:f9:d6:1f:d6:2e:2d:b1:f0:2e:1c:a0:
                    9d:54:95:0f:ca:8e:35:d4:45:3e:68:c9:d6:4e:9a:
                    fc:ad:3f:09:b6:43:4a:4f:7f:58:ca:4b:18:8c:5c:
                    50:f8:c0:40:f8:ad:7d:bd:5f:87:4a:28:91:98:9b:
                    35:3a:72:2b:05:e0:b1:fd:52:4e:c7:de:fd:31:56:
                    20:29:19:f5:93:0c:02:87:5f:bb:24:dd:ce:90:08:
                    6a:a3:ce:3a:d1:0f:eb:c4:ec:a5:58:11:92:79:9e:
                    63:e2:58:5c:3b:d4:11:e7:87:84:e8:d1:5f:ea:d3:
                    1e:69:58:72:43:eb:26:08:ed:40:05:ba:f6:51:b8:
                    26:1f:c3:30:98:c8:69:0e:bc:47:f1:8b:19:a0:dd:
                    60:f2:88:8b:87:33:7a:dd:b1:14:21:2c:8d:e1:88:
                    38:03:90:6a:dc:d1:02:76:8f:e6:74:49:36:c2:a2:
                    e4:7d:ff:93:fe:b2:98:25:0a:3c:4f:b8:4a:43:05:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D8:7E:D5:F0:38:6A:CC:9E:40:15:3F:08:DA:1E:99:48:E0:D3:17
            X509v3 Authority Key Identifier:
                keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:17:60:70:c2:70:01:3c:f7:0c:ff:34:2e:40:a6:d4:33:a4:
         ef:16:9c:bf:09:d9:17:29:ba:88:b8:06:dd:f7:a0:0b:c2:79:
         03:81:72:c9:0d:a9:60:23:ba:0e:1d:82:4c:f0:0e:3f:c4:98:
         6d:d1:16:13:fc:fe:f8:62:98:e8:65:ac:9e:64:56:fc:df:4d:
         91:92:8b:c4:79:38:f9:77:f1:49:88:ec:ab:90:a0:da:55:53:
         3a:33:ed:d4:f2:75:cd:9f:02:f4:19:c4:43:88:d9:eb:5b:aa:
         77:64:68:12:e5:bb:1a:bd:b9:8f:ca:d7:9b:15:92:14:c5:0a:
         5b:b9:46:58:d8:4a:7f:6a:7e:66:bb:00:31:48:47:56:b8:4b:
         c6:19:1c:1e:bc:65:f0:94:08:d4:96:9a:14:23:3c:c5:35:03:
         50:dd:8f:db:5f:a2:1a:04:c8:1a:0b:a2:13:a0:2a:73:53:81:
         93:4e:57:2a:8c:fa:02:d1:f5:56:0b:26:1f:08:b3:0b:69:8b:
         55:8d:8a:9e:46:c4:c4:12:f6:67:f7:7a:ed:e5:c8:52:af:04:
         8c:d7:66:26:03:fd:b7:90:48:ec:94:1b:3e:34:ce:df:d7:56:
         4e:ca:9e:b6:fb:3a:80:7c:1d:5b:22:77:d4:b8:bf:f0:28:05:
         55:78:97:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD
OERBMzY2QjgwHhcNMjQxMTIzMDQwNDU1WhcNMjQxMTMwMDQwNDU1WjAYMRYwFAYD
VQQDEw02NzQxNTQ2Ny1jMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutv661Wq32TlFJCcMKQCjyshn5/2zo8YiD9mCAiecAincke9Qo18aUXE0nVq
+f9BlkoP7j30sjD6/SrowU3B+dYf1i4tsfAuHKCdVJUPyo411EU+aMnWTpr8rT8J
tkNKT39YyksYjFxQ+MBA+K19vV+HSiiRmJs1OnIrBeCx/VJOx979MVYgKRn1kwwC
h1+7JN3OkAhqo8460Q/rxOylWBGSeZ5j4lhcO9QR54eE6NFf6tMeaVhyQ+smCO1A
Bbr2UbgmH8MwmMhpDrxH8YsZoN1g8oiLhzN63bEUISyN4Yg4A5Bq3NECdo/mdEk2
wqLkff+T/rKYJQo8T7hKQwWn3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzYftXw
OGrMnkAVPwjaHplI4NMXMB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz
MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr
MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqF2BwwnABPPcM/zQuQKbUM6TvFpy/CdkXKbqIuAbd96ALwnkDgXLJ
DalgI7oOHYJM8A4/xJht0RYT/P74YpjoZayeZFb8302RkovEeTj5d/FJiOyrkKDa
VVM6M+3U8nXNnwL0GcRDiNnrW6p3ZGgS5bsavbmPytebFZIUxQpbuUZY2Ep/an5m
uwAxSEdWuEvGGRwevGXwlAjUlpoUIzzFNQNQ3Y/bX6IaBMgaC6IToCpzU4GTTlcq
jPoC0fVWCyYfCLMLaYtVjYqeRsTEEvZn93rt5chSrwSM12YmA/23kEjslBs+NM7f
11ZOyp62+zqAfB1bInfUuL/wKAVVeJcY
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org