Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File:                     60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier:          llnucfJDAXDVw1Il2TrHKmxle+kSTgsXlmYIfvNjM+A=
Subject key identifier:   7F:3C:01:BD:E1:EA:D6:2F:04:22:A9:A7:25:21:45:21:82:CB:7E:98
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer:       /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number:          020B
Signing time:             Sat 23 Nov 2024 01:34:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:34:37 +0000
Manifest next update:     Sat 30 Nov 2024 01:34:37 +0000
Files and hashes:         1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: +TVziarBd3xlO7ciIFmLXAA9LN42P8mhE0lOcamuUMQ=)
                          2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
                          rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
        Validity
            Not Before: Nov 23 01:34:37 2024 GMT
            Not After : Nov 30 01:34:37 2024 GMT
        Subject: CN=6741312d-ee52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:05:2f:58:ce:65:19:c7:3e:a5:b3:ab:88:
                    96:5d:6d:17:fa:46:19:c6:96:12:43:2e:70:80:6f:
                    a0:e0:f0:21:cb:e9:da:a7:ae:d6:af:a3:04:df:c3:
                    86:e1:bb:1f:22:90:51:af:e8:f7:d1:c0:9c:eb:8d:
                    bd:7a:bc:10:60:4d:db:7d:a0:09:59:06:e9:c1:f3:
                    0f:07:c8:a2:a2:32:4a:2c:2e:2a:31:c5:78:29:bf:
                    41:53:a4:21:f5:e5:12:d0:da:e8:4a:5a:5d:49:95:
                    83:cf:ec:30:5a:88:42:e0:6d:8b:b8:00:e8:47:1a:
                    6f:67:1d:04:76:c2:34:f8:45:6f:cf:21:8b:a1:48:
                    7e:9b:18:73:c0:88:14:e6:41:15:78:dd:f4:f0:7e:
                    16:82:0b:50:22:9c:a3:9e:e3:02:2c:f7:1e:23:24:
                    f7:34:f2:71:9f:16:d6:fa:70:63:25:11:5e:bc:fe:
                    18:09:17:79:05:60:30:6d:9b:f1:39:0d:79:59:f6:
                    11:48:e6:58:a0:f7:14:ad:2c:64:c0:e1:78:ff:21:
                    14:2b:a0:f9:85:48:5a:27:e0:15:c2:bc:43:4c:82:
                    58:98:b3:6f:97:01:2c:50:9a:15:54:dd:ef:4f:52:
                    2c:89:ae:bd:1d:92:d1:06:52:c7:fd:51:f3:b6:9c:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:01:BD:E1:EA:D6:2F:04:22:A9:A7:25:21:45:21:82:CB:7E:98
            X509v3 Authority Key Identifier:
                keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:85:43:22:3b:ed:c6:fc:6d:60:a8:7c:34:7b:d0:4d:5d:
         f1:c9:0c:77:f0:bd:a0:26:f8:df:9a:8f:65:b2:fe:1c:d0:6e:
         66:be:08:58:f9:bc:e8:ee:74:0e:b3:a5:ac:b3:53:43:20:65:
         26:e7:b9:12:d1:33:4e:98:24:bb:83:d4:60:ed:5e:f7:e7:66:
         f0:86:3f:d0:02:bb:57:18:d2:82:cc:63:61:22:69:87:00:9f:
         96:7a:8d:bd:d2:4d:5e:80:34:2f:f1:7a:73:df:ea:d6:fa:83:
         dc:4c:5c:23:17:ef:6e:76:03:34:d6:ec:a3:53:5f:82:b9:a6:
         1a:3b:20:4c:f2:d9:4d:01:7f:3d:60:34:2d:b4:b6:ae:35:1c:
         39:3b:b5:c6:bc:f8:57:b1:66:7a:13:46:bc:61:7b:16:b4:f5:
         d1:4e:ac:08:9e:18:30:5e:2f:4d:64:6b:9f:d5:f3:86:e9:ec:
         fb:00:55:a6:a8:8c:8e:fa:54:e0:f4:90:74:f8:8e:de:2f:52:
         3e:2a:4c:e2:69:96:1c:0d:8b:34:a2:de:24:5a:ac:3a:aa:54:
         a6:dd:ae:11:85:ac:5a:17:3f:60:d0:0e:dc:7f:85:ba:12:90:
         9a:62:23:b2:47:52:20:3b:57:9c:41:b5:be:a8:e3:d1:fa:c7:
         bf:0e:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org