Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          pNc4Ut5UVudrBqYlBouYbnRdiGONd0ccyn0ogn6JfpA=
Subject key identifier:   68:77:09:3E:11:25:B9:73:72:F2:3C:33:8C:85:96:C4:68:8B:56:3F
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1AC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1A7A
Signing time:             Sun 24 Nov 2024 16:14:19 +0000
Manifest this update:     Sun 24 Nov 2024 16:14:18 +0000
Manifest next update:     Sun 01 Dec 2024 16:14:18 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: UaCyTzTXXXdgLa92s1QNjEmrb5iv9voWNb37V5P7JWo=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: F/S8AioHMhl/X8J3CcnYUHXIULmRySNS41JHCMugVlY=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: becdUlU0pzm+rTWjvZx42/pYjskuy1zBf2rR0ajjah0=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: AVwqpX6FayZNpFX6kyIsTun1sVHL/w/miYCG6ceUG/g=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: shZ1SoLVzfeL8x+bbIRO6LB79qQKbmIOeQclikjQj88=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6848 (0x1ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Nov 24 16:14:18 2024 GMT
            Not After : Dec  1 16:14:18 2024 GMT
        Subject: CN=674350db-9466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:7d:69:f2:a0:2e:8a:12:45:1c:ab:e6:62:
                    b2:b5:1d:a8:39:e1:6d:f5:83:50:eb:c1:71:9a:12:
                    c3:bd:05:95:6c:4e:be:32:91:e9:e6:32:e0:f7:0a:
                    53:ae:9e:4f:29:98:c4:bc:b4:f9:4b:2f:a4:8f:fc:
                    75:43:e2:3d:48:a9:2d:b7:a5:2b:0e:e5:4a:4e:3d:
                    2b:98:01:cd:88:fa:5c:fa:8e:58:f2:c8:bc:dd:39:
                    8d:4a:5b:69:84:ef:63:86:d5:28:c6:ae:62:a3:c7:
                    d8:c1:57:9a:82:df:a0:a1:3e:45:54:97:a0:df:76:
                    09:60:dc:32:64:4a:88:68:6f:8c:fb:a1:9f:b8:9e:
                    b2:d9:ba:0c:66:49:ae:19:75:af:01:0a:0c:59:44:
                    94:bc:cc:cb:83:c7:58:39:a5:00:7a:34:e6:10:bc:
                    2d:bc:6c:57:a1:0e:50:27:c8:c1:9d:c2:04:ab:e1:
                    7b:0c:19:36:16:f7:b1:0e:95:21:23:25:00:02:2d:
                    00:fb:20:15:59:b2:99:1e:79:52:37:45:97:d2:98:
                    42:e2:5a:94:d8:93:c5:7a:35:fb:9e:e8:88:31:89:
                    ca:3a:04:af:76:c5:8b:7f:12:62:2e:04:c7:3b:2f:
                    43:2d:e6:c9:31:d7:40:32:44:91:db:82:b4:17:a5:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:09:3E:11:25:B9:73:72:F2:3C:33:8C:85:96:C4:68:8B:56:3F
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:c8:65:2e:5e:15:b0:52:14:7f:d5:d6:7b:95:2e:9d:8d:
         48:ed:b5:64:13:91:dc:39:93:58:a8:b8:42:b6:e8:72:13:dc:
         f3:9b:4d:67:1b:a9:45:f4:9e:28:22:5b:b1:b2:8c:49:33:04:
         d4:18:aa:d5:69:07:6a:c2:e9:3f:c3:10:e7:35:52:b5:3d:d6:
         bf:73:0f:f7:ce:dd:cb:2d:50:f4:49:61:03:c6:42:c8:bf:2b:
         1c:89:24:06:6c:af:1a:22:fa:53:96:c3:0b:95:71:62:ba:d4:
         b6:82:cd:74:31:cb:0c:9a:6f:0d:e8:34:06:e5:c7:a0:95:15:
         ea:37:87:2c:90:01:33:a5:ad:95:71:82:31:c9:42:01:a5:91:
         0d:1b:b6:de:5a:3b:02:54:5e:0a:32:88:97:6a:2f:3e:2f:50:
         51:c6:11:aa:ca:a0:cf:87:4b:f1:e2:ba:6c:91:0c:36:ad:89:
         92:bc:1f:68:37:8c:d3:80:f1:c1:0d:8d:99:84:48:b6:ad:32:
         59:70:14:17:fe:cc:31:61:94:2c:e6:d9:2d:de:8b:f4:af:b5:
         98:11:8c:fa:39:c6:33:e0:c4:dc:0a:1b:73:ad:c4:fd:23:76:
         28:25:ef:2e:59:de:ed:ac:e9:88:8e:d7:3d:76:74:f5:ec:9e:
         70:96:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:56 2024 by rpki-client on console-ams.rpki-client.org