Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          lO6jYWdfnnrvsH0hXSiNJBuORgkmf3roHqeoGDl7AJQ=
Subject key identifier:   83:4E:6B:0B:5F:4C:5F:27:C4:03:F9:C1:A4:C2:D0:1F:24:17:98:D7
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2960
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2946
Signing time:             Sat 18 May 2024 15:52:30 +0000
Manifest this update:     Sat 18 May 2024 15:52:30 +0000
Manifest next update:     Sat 25 May 2024 15:52:30 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: d8bSI68YTD/KU7wGE5fhngR4ObEEAsTt6xDo41xukWI=)
                          2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: HTj3Qh/xXt5K2jquDffQEnajhNGU7uvbk/PH9Lr2CPY=)
                          3: 37C9EE28F10611EE96681A3CC4F9AE02.roa (hash: Rpc77Bk6UyOQJWmFgc3mVMpOhVuGvlHfa0zdVP+Cj8g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10592 (0x2960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: May 18 15:52:30 2024 GMT
            Not After : May 25 15:52:30 2024 GMT
        Subject: CN=6648cebe-1cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:bd:28:b7:fe:4d:b8:64:d5:4e:f6:11:08:
                    cc:b2:a0:84:90:4c:9b:7e:92:d8:27:dc:63:9e:6c:
                    33:bc:ff:39:3b:cc:95:98:37:18:fe:9d:19:7a:9f:
                    3d:0b:61:2e:70:4a:e0:20:02:56:99:33:5b:96:13:
                    c1:50:77:e2:33:02:ba:9e:c1:f2:d4:8b:3c:d5:6c:
                    be:a9:78:c3:99:3e:2c:81:cd:c7:21:c5:8a:68:e4:
                    59:2c:f4:5f:c1:f9:94:17:73:1c:92:46:a9:7e:14:
                    8d:64:e3:9e:ed:7c:5c:f1:45:40:d9:75:6b:ee:b7:
                    9d:98:f0:a8:54:d6:45:94:22:32:a9:54:59:44:49:
                    98:f9:07:50:78:87:37:aa:ee:be:92:e1:18:df:b1:
                    92:da:51:59:19:0c:71:73:c9:d9:8a:8c:41:bc:b7:
                    a7:34:4c:da:3d:f6:e9:b5:49:bb:bd:97:d1:ca:72:
                    a0:b2:26:8b:51:b0:d9:2d:f5:67:bd:20:3f:b4:c0:
                    e9:2a:01:b9:00:f4:01:20:98:0d:d3:d3:ef:b8:8f:
                    f5:05:fb:31:b2:37:52:f6:76:13:aa:c4:fc:85:9b:
                    51:09:44:8b:22:e8:30:5d:d4:f9:dc:a5:ec:77:3d:
                    8e:58:a7:ff:a7:28:17:a3:21:6c:10:02:78:70:4b:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:6B:0B:5F:4C:5F:27:C4:03:F9:C1:A4:C2:D0:1F:24:17:98:D7
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:01:a1:dc:b2:85:68:f8:2f:2e:2a:09:53:00:35:a5:0a:82:
         d8:41:65:46:20:1e:93:0c:36:fd:27:df:b0:da:95:66:b3:c4:
         0d:95:50:1c:52:cd:3c:a8:16:12:71:4e:15:80:78:b3:f4:1e:
         46:13:b9:98:a6:54:0e:57:10:c3:b4:f8:2b:93:ba:b4:a9:a5:
         d5:bd:57:a9:7a:24:6f:62:33:f6:16:4b:09:b0:ec:be:56:78:
         40:40:1d:aa:5c:42:e9:2d:3e:1e:c5:08:5b:99:27:48:cf:fd:
         84:94:67:49:1a:d7:d2:7b:2f:d7:1b:76:57:26:34:19:6c:b5:
         71:58:61:1e:a2:08:ac:bb:c0:56:a3:02:43:4c:7a:af:91:e7:
         dd:81:a7:be:2a:5f:2c:6b:dc:01:3d:6a:43:97:8c:66:60:c7:
         3f:55:6a:74:27:00:07:10:2d:12:3c:7f:a9:da:4d:d9:f1:1f:
         77:16:69:23:63:8b:80:7f:48:a5:00:8f:6a:18:e3:68:a3:36:
         45:4f:57:8c:b1:bf:13:72:4d:ab:3e:fb:39:c8:55:31:82:26:
         f5:7d:f8:4b:38:1c:c9:d8:e4:c7:3d:04:77:16:cc:03:d1:84:
         1c:2d:6d:5f:6f:14:c5:ea:34:e1:62:2d:81:80:a9:6a:5d:54:
         86:4b:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org