Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          I+9+VkCwO+J+q4JmPSJRr9T34/46LF/c9DTAtJ0WI8Y=
Subject key identifier:   89:8C:F2:A3:21:62:AE:A0:16:9C:88:56:C9:9D:06:3F:7F:E1:E7:73
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       06D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          1071
Signing time:             Fri 22 Nov 2024 19:47:06 +0000
Manifest this update:     Fri 22 Nov 2024 19:47:05 +0000
Manifest next update:     Fri 29 Nov 2024 19:47:05 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: MhmSYSivWAzVd8DbhZIMYM4LpxYybIJNTbpe3wA7GI0=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: Th3Fm0yjUG5Nl/BatZiPSivvwDfuH9VTwBhqmmWBVXU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Nov 22 19:47:05 2024 GMT
            Not After : Nov 29 19:47:05 2024 GMT
        Subject: CN=6740dfba-fb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:f8:77:5a:db:db:6b:f1:35:b4:f0:39:0e:
                    7e:e2:9d:70:4e:d1:48:75:6d:f3:4b:d3:99:68:43:
                    4e:0c:8e:0a:53:5e:c3:3c:f7:e9:c2:e3:f2:d1:db:
                    c0:73:ff:07:ba:ef:35:44:ac:d0:6c:d3:f7:17:fe:
                    d3:2d:69:e6:99:f9:d4:b8:e2:a3:99:4a:77:4a:c6:
                    56:cf:5e:37:33:ce:31:1f:ce:92:2e:2d:1f:3e:84:
                    52:43:b5:2e:ed:40:b9:5a:f4:5d:cd:e8:41:b3:18:
                    70:40:7a:86:af:92:09:8a:3c:b4:a7:ec:5a:d9:3e:
                    ce:3d:93:15:6a:d6:fb:bb:ad:e3:df:cf:77:86:88:
                    89:c6:ef:9a:b5:1e:cd:88:d1:84:f9:25:dc:3e:c5:
                    43:48:9f:d4:27:01:7d:55:f5:a8:b8:a4:f2:4a:6c:
                    a1:d7:1f:47:5b:8b:67:1d:fe:c7:f0:41:6e:17:bd:
                    3b:ac:61:be:bd:d5:0b:2c:d2:a3:1b:d0:1a:41:13:
                    a3:93:60:7e:b0:f1:87:e9:6b:08:ad:e8:4a:89:0f:
                    d0:91:f1:31:ec:a0:61:85:87:4a:19:db:ca:e9:1c:
                    49:d0:c1:7c:5a:b0:92:8f:ce:52:c9:5d:3c:b8:85:
                    cc:9e:b6:c8:e0:06:43:a3:5e:e4:6c:11:d4:ba:a8:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:F2:A3:21:62:AE:A0:16:9C:88:56:C9:9D:06:3F:7F:E1:E7:73
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6d:7f:b6:a2:58:cd:57:1d:4e:5c:03:50:5f:85:3c:f6:36:
         70:ef:61:ef:1f:23:9e:9d:47:8f:9b:f3:05:5b:00:09:76:6f:
         c1:13:47:d2:6b:b2:7d:a2:31:7e:96:74:42:11:9f:46:14:ec:
         65:ea:f4:b6:f0:e8:e2:c4:4f:dc:3f:76:f9:34:7d:c2:78:61:
         58:f1:db:38:f4:f8:e9:33:c0:31:9a:09:91:5a:f1:34:76:25:
         52:7d:e6:20:9e:0f:c2:6e:ce:59:e2:ad:55:eb:8b:32:1e:6e:
         0c:52:07:99:b6:b4:b2:49:51:5b:a1:b4:16:05:12:af:f8:bb:
         f0:78:bc:dd:fb:2b:c1:67:1e:3e:45:c1:75:1e:e4:b8:b5:3f:
         09:10:9e:a9:84:28:63:98:cd:4e:a2:43:41:fb:10:3d:3d:e8:
         56:9b:9b:24:4d:4a:6c:c1:37:48:69:42:74:88:d2:08:f1:56:
         b5:00:a9:74:0c:bc:07:e4:92:a4:bc:e5:c0:a5:ee:4a:ab:38:
         83:32:06:d8:5d:d9:1f:be:06:15:d4:03:39:45:57:24:b9:31:
         e6:1c:e9:11:b5:79:59:af:50:80:fc:0b:85:bf:1f:5e:21:e9:
         6d:e1:8f:55:a8:cb:c3:03:d9:93:e2:7a:66:49:3b:52:8f:99:
         fa:d9:f5:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC
MEUyRUI5MzEwHhcNMjQxMTIyMTk0NzA1WhcNMjQxMTI5MTk0NzA1WjAYMRYwFAYD
VQQDEw02NzQwZGZiYS1mYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1MP4d1rb22vxNbTwOQ5+4p1wTtFIdW3zS9OZaENODI4KU17DPPfpwuPy0dvA
c/8Huu81RKzQbNP3F/7TLWnmmfnUuOKjmUp3SsZWz143M84xH86SLi0fPoRSQ7Uu
7UC5WvRdzehBsxhwQHqGr5IJijy0p+xa2T7OPZMVatb7u63j3893hoiJxu+atR7N
iNGE+SXcPsVDSJ/UJwF9VfWouKTySmyh1x9HW4tnHf7H8EFuF707rGG+vdULLNKj
G9AaQROjk2B+sPGH6WsIrehKiQ/QkfEx7KBhhYdKGdvK6RxJ0MF8WrCSj85SyV08
uIXMnrbI4AZDo17kbBHUuqhSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImM8qMh
Yq6gFpyIVsmdBj9/4edzMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz
RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM
dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlbX+2oljNVx1OXANQX4U89jZw72HvHyOenUePm/MFWwAJdm/BE0fS
a7J9ojF+lnRCEZ9GFOxl6vS28OjixE/cP3b5NH3CeGFY8ds49PjpM8AxmgmRWvE0
diVSfeYgng/Cbs5Z4q1V64syHm4MUgeZtrSySVFbobQWBRKv+LvweLzd+yvBZx4+
RcF1HuS4tT8JEJ6phChjmM1OokNB+xA9PehWm5skTUpswTdIaUJ0iNII8Va1AKl0
DLwH5JKkvOXApe5KqziDMgbYXdkfvgYV1AM5RVckuTHmHOkRtXlZr1CA/AuFvx9e
Ielt4Y9VqMvDA9mT4npmSTtSj5n62fVZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:25 2024 by rpki-client on console-fra.rpki-client.org