Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
File:                     6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft (raw, json)
Hash identifier:          tM2T0Azl3y3oEmO9+ayE9dN8q32gKWIv/psK6M21mFQ=
Subject key identifier:   DD:62:61:8B:00:6D:0F:89:51:F0:F7:68:E3:EC:FF:5F:2D:7A:90:BC
Authority key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Certificate issuer:       /CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
Manifest number:          0A39
Signing time:             Fri 22 Nov 2024 19:31:18 +0000
Manifest this update:     Fri 22 Nov 2024 19:31:18 +0000
Manifest next update:     Fri 29 Nov 2024 19:31:18 +0000
Files and hashes:         1: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl (hash: SHiRQoWJBP6yFnOhImTUG7GU+qFKp+KraVXEbZHHoHs=)
                          2: BA767AE8584A11EA91887312C4F9AE02.roa (hash: CSO3Zmx3ajDkBk6mIZBI03aEqBJbOoiRtko65P+Duqo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl
                          rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
        Validity
            Not Before: Nov 22 19:31:18 2024 GMT
            Not After : Nov 29 19:31:18 2024 GMT
        Subject: CN=6740dc06-97d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:19:54:82:0e:ae:04:2c:b1:66:d5:97:50:
                    be:eb:b0:44:47:23:67:0f:fb:56:e9:c5:58:f1:d7:
                    94:7c:df:0a:c1:6e:82:5c:68:9e:b1:87:1d:9d:d8:
                    64:00:db:80:69:0b:04:20:8d:7c:f5:10:78:1f:a4:
                    f0:ad:87:68:1a:30:a2:6a:c4:50:a3:7e:67:89:2d:
                    a5:3e:9e:ab:88:35:54:bb:2c:3c:7c:5f:7c:22:bc:
                    67:8d:d2:9d:5a:17:e6:ef:41:ed:df:3d:b2:19:d4:
                    f8:8d:7b:82:88:cb:f9:35:03:14:9e:b5:53:1f:0d:
                    11:2c:de:17:4b:da:b9:4a:21:1e:33:a2:d4:ee:41:
                    3b:db:75:56:45:d6:fd:8b:01:92:03:a6:56:f2:33:
                    43:2e:7f:95:94:da:91:38:20:6b:ea:49:89:cb:6e:
                    28:be:80:4f:b3:bb:61:5c:ca:99:53:fb:1c:06:74:
                    8e:b4:8e:fa:13:f1:b7:dd:7b:c6:cb:02:91:8a:15:
                    3a:7f:7a:86:90:6a:b6:e0:e0:ce:5a:81:a5:ee:bc:
                    3a:ee:a9:6d:46:58:07:87:fa:a2:34:82:05:92:ab:
                    06:09:82:0b:b9:75:37:47:79:dd:b2:fb:2f:b5:96:
                    25:00:01:1f:7d:42:5b:e7:8a:f8:00:00:69:81:89:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:61:8B:00:6D:0F:89:51:F0:F7:68:E3:EC:FF:5F:2D:7A:90:BC
            X509v3 Authority Key Identifier:
                keyid:EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:8c:31:6a:95:53:66:2b:be:ad:35:37:a3:a1:33:a8:31:
         58:ce:12:04:fa:9f:97:f2:e9:f4:99:e7:07:32:c7:4c:c3:15:
         16:ad:29:f7:14:85:fa:a4:5a:28:e1:5b:89:53:81:91:1a:37:
         0b:f2:95:65:2f:89:f4:cc:e3:f6:d9:79:ad:d8:53:cf:08:fd:
         9e:e7:8a:fa:3e:56:54:d6:2d:7d:7b:4b:cc:25:49:d9:e2:e7:
         04:f1:0e:ab:85:6c:c6:a5:cc:b1:5d:61:c7:71:99:24:56:f8:
         af:9a:99:80:60:ec:bf:ba:83:78:85:4a:13:f0:f9:e7:71:b7:
         5a:15:f3:28:bc:53:1b:2d:a7:96:a8:99:b0:7d:00:e0:68:c4:
         d9:7f:ea:f2:d8:89:5f:0f:01:a5:7e:1a:f9:42:cf:45:aa:c0:
         3f:ae:ef:ce:22:63:16:9a:96:f6:20:4b:8d:0d:e8:51:10:cf:
         2d:e5:22:ba:e5:08:35:e4:d2:67:f1:c2:98:d2:4b:17:e4:7f:
         f2:5b:ed:d0:5d:68:49:8c:cc:0b:e8:f2:58:a5:ab:f5:4e:f9:
         7d:84:18:1e:ae:30:8c:49:03:79:dd:ce:74:f6:1e:84:ce:ee:
         de:7d:9a:8a:28:c1:13:e6:b1:2d:b8:fd:43:d5:be:97:05:2d:
         b7:cf:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org