Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File:                     Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier:          TsLeoijGsTffacQXK74cua0BdLMS1uryXeEcpMw4xJI=
Subject key identifier:   4A:CD:09:F9:E7:F0:4B:79:28:81:68:87:C3:50:BE:FA:0B:3F:6C:1C
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer:       /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number:          D6
Signing time:             Sat 23 Nov 2024 03:42:59 +0000
Manifest this update:     Sat 23 Nov 2024 03:42:59 +0000
Manifest next update:     Sat 30 Nov 2024 03:42:59 +0000
Files and hashes:         1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: d66N1uFptQd8dJb1WRM736523w+40FcN18lBil3xi+I=)
                          2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
                          rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
        Validity
            Not Before: Nov 23 03:42:59 2024 GMT
            Not After : Nov 30 03:42:59 2024 GMT
        Subject: CN=67414f43-1c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:92:75:f5:6e:b1:90:6b:bc:e6:bc:20:e6:
                    87:08:3c:6f:f1:8c:17:ba:14:75:34:9d:7d:72:34:
                    2c:45:72:73:e8:a9:bb:e0:16:8c:17:3e:33:a5:bc:
                    00:6f:af:a9:c4:d4:7c:a5:7d:cd:b6:d3:6f:71:84:
                    80:60:7e:2e:5f:d1:d7:53:f3:48:8a:4b:23:b3:48:
                    44:40:30:99:9b:18:aa:5c:96:af:cd:69:19:80:0f:
                    b2:5c:72:d6:3e:be:cc:ef:ed:70:53:53:fe:a1:35:
                    02:42:a3:2e:ef:ea:02:ea:12:8e:92:9c:c7:9d:9d:
                    a3:c7:ac:49:33:77:8f:51:08:83:b4:4e:0c:88:b0:
                    6e:8d:9f:f1:c1:10:9f:ab:3b:75:c1:a2:ee:50:1b:
                    8a:16:e0:a8:49:13:3e:87:e4:05:b6:f7:22:b7:5f:
                    0a:10:e1:6d:60:8e:8b:b7:6e:f5:17:35:47:c0:6b:
                    ae:0b:2e:6a:4e:ae:d7:ff:a9:5c:4d:97:18:db:34:
                    ff:22:67:27:45:fa:e7:2b:28:03:fb:37:e4:7d:42:
                    30:48:57:d1:f0:97:82:31:18:bf:a3:9d:7f:e3:8b:
                    0a:38:6c:fe:f9:3f:2a:d1:37:3e:66:0c:b8:7f:43:
                    3d:cd:c2:6d:33:84:62:3f:b1:70:56:c5:0a:5e:5e:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:09:F9:E7:F0:4B:79:28:81:68:87:C3:50:BE:FA:0B:3F:6C:1C
            X509v3 Authority Key Identifier:
                keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:09:1d:2f:e0:af:f5:16:29:40:0f:73:f1:35:29:46:81:
         5b:3e:46:9d:d4:35:4a:53:8d:d2:a3:93:23:53:38:59:b6:7b:
         7f:b0:55:63:e9:04:5f:c1:7e:e3:4b:c8:5f:f8:82:27:bf:f3:
         a3:ca:c1:52:8c:55:08:3c:8f:6c:27:72:df:45:7e:be:3a:ed:
         12:30:a0:ab:57:27:c1:da:9e:0e:7d:c2:0f:e7:98:a2:d4:51:
         52:10:59:7a:d3:3f:85:3f:a6:e7:bc:85:14:e5:36:02:4a:f4:
         4d:c2:39:43:8c:0a:88:40:e9:bb:03:d1:fd:67:b9:f5:5d:e4:
         2f:aa:22:5d:e1:84:41:6b:04:53:e4:aa:30:e1:71:38:c2:9c:
         50:01:e9:78:08:3d:c5:df:9d:13:ca:5f:2b:cb:e4:21:e5:ce:
         ca:ef:07:c8:4f:85:3e:89:22:36:d9:9a:c3:66:94:63:bd:27:
         78:39:ef:a2:fb:d2:a9:43:f0:a2:72:3a:ea:01:07:ea:bf:16:
         03:a5:19:16:c7:30:db:17:21:bd:1d:89:40:6b:50:98:1c:99:
         de:2c:11:14:52:06:d8:43:0d:be:cd:3e:43:a1:3b:4d:ce:36:
         ec:a2:a5:1a:23:52:65:a4:79:a3:49:d1:34:81:ae:8a:34:ef:
         80:f0:16:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG
Mjg5REIzMzYwHhcNMjQxMTIzMDM0MjU5WhcNMjQxMTMwMDM0MjU5WjAYMRYwFAYD
VQQDEw02NzQxNGY0My0xYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApguSdfVusZBrvOa8IOaHCDxv8YwXuhR1NJ19cjQsRXJz6Km74BaMFz4zpbwA
b6+pxNR8pX3NttNvcYSAYH4uX9HXU/NIiksjs0hEQDCZmxiqXJavzWkZgA+yXHLW
Pr7M7+1wU1P+oTUCQqMu7+oC6hKOkpzHnZ2jx6xJM3ePUQiDtE4MiLBujZ/xwRCf
qzt1waLuUBuKFuCoSRM+h+QFtvcit18KEOFtYI6Lt271FzVHwGuuCy5qTq7X/6lc
TZcY2zT/ImcnRfrnKygD+zfkfUIwSFfR8JeCMRi/o51/44sKOGz++T8q0Tc+Zgy4
f0M9zcJtM4RiP7FwVsUKXl4NHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErNCfnn
8Et5KIFoh8NQvvoLP2wcMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy
QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ
QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCongkdL+Cv9RYpQA9z8TUpRoFbPkad1DVKU43So5MjUzhZtnt/sFVj
6QRfwX7jS8hf+IInv/OjysFSjFUIPI9sJ3LfRX6+Ou0SMKCrVyfB2p4OfcIP55ii
1FFSEFl60z+FP6bnvIUU5TYCSvRNwjlDjAqIQOm7A9H9Z7n1XeQvqiJd4YRBawRT
5Kow4XE4wpxQAel4CD3F350Tyl8ry+Qh5c7K7wfIT4U+iSI22ZrDZpRjvSd4Oe+i
+9KpQ/CicjrqAQfqvxYDpRkWxzDbFyG9HYlAa1CYHJneLBEUUgbYQw2+zT5DoTtN
zjbsoqUaI1JlpHmjSdE0ga6KNO+A8BYD
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org